
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json)
Hash identifier: OxTfKFqftd5JT4Jqkt1Da0P7/mHKQsIa3wbbExJfAFw=
Subject key identifier: 1B:84:8B:A7:17:39:23:3D:AA:9B:A3:CC:98:CF:41:51:51:B6:1D:41
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 358F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
Manifest number: 3569
Signing time: Wed 22 Jul 2026 15:15:58 +0000
Manifest this update: Wed 22 Jul 2026 15:15:57 +0000
Manifest next update: Wed 29 Jul 2026 15:15:57 +0000
Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: hGdfuP0kIUk/TnkPdpeD9lS/e9A1jDHSXn0q1krYzeA=)
2: 81CE23A6794C11F1BC374DFC78A30FBC.roa (hash: hd0r2prWlA4+0LF9b/xFRJOUyttYhz792UHJpUj+rF4=)
3: 18DC10026A6911F18287CF148C47A888.roa (hash: OCkrDay8zjth0V1lG/kZd/C6BIueT/ReUwbtLOpeoAg=)
4: 1A1E4A7A6A6911F18287CF148C47A888.roa (hash: PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=)
5: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=)
6: 1998442A6A6911F18287CF148C47A888.roa (hash: M/p8XcwCACjksBG0lPH9EKkwR4b9TAusIscrzIwTeTY=)
7: ADC4AF7A794C11F183C8766D79A30FBC.roa (hash: REZG1hbCbWcLjdEWLIy80wtl+wdmwwM8/vxZUIlggVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13711 (0x358f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jul 22 15:15:57 2026 GMT
Not After : Jul 29 15:15:57 2026 GMT
Subject: CN=6a60dead-18b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:05:c9:36:18:94:70:1d:f9:f1:da:6a:5f:
2b:92:a6:a6:94:c8:69:77:4e:f9:23:7b:70:6a:db:
bc:57:e2:23:66:4a:f0:0a:fa:25:b6:bd:5f:b9:fa:
c2:f8:71:4b:6b:cb:db:75:d1:e7:55:be:90:a8:b8:
3d:8b:c9:a3:c0:50:77:b9:b0:88:ee:7c:18:6e:df:
9a:38:99:c5:3a:b0:32:ed:ee:91:ec:dc:29:85:6d:
67:a5:8c:7c:ef:fb:7f:b1:14:53:bd:af:f7:7a:3a:
d2:12:51:e9:b8:46:d9:cd:e9:28:f2:c3:9a:70:47:
bb:4c:a1:54:e0:d8:93:ae:dd:b0:10:c2:b5:3b:2e:
95:f9:89:a8:e0:fc:11:6e:b0:35:f9:b6:91:b1:9c:
44:6a:25:58:1b:f2:e2:9c:30:51:59:45:4a:a7:e2:
ed:55:19:ae:96:8d:52:42:d0:4e:10:aa:4a:98:56:
c2:20:13:d1:1d:21:72:39:fd:5d:96:ca:dc:0d:59:
93:c1:95:c5:45:48:98:55:4c:f9:2c:9c:cd:6f:2d:
08:5e:90:c2:dc:b5:75:e5:93:23:b0:46:25:ed:ee:
43:43:90:aa:a1:0f:ad:2c:2c:0e:3e:31:93:cb:03:
34:99:6f:b5:bc:5f:f5:fc:f2:e7:24:96:bb:51:3a:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:8B:A7:17:39:23:3D:AA:9B:A3:CC:98:CF:41:51:51:B6:1D:41
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c3:59:73:d8:c3:b2:9e:e0:51:73:19:0b:ba:54:20:54:73:
de:9e:ec:93:f5:0a:28:8a:71:85:09:f5:2b:9f:2d:9b:06:bf:
64:8e:75:f6:6e:f1:63:38:f1:bd:7d:5b:78:22:35:74:ac:46:
e7:d7:d4:03:79:4c:bf:3a:e5:92:4a:9c:45:74:fd:cd:3d:8d:
16:88:9c:8e:3c:ae:41:4b:30:86:94:24:3d:e7:fa:52:d4:9b:
5d:84:22:df:65:f1:34:b5:7e:2e:6c:f3:7f:f7:c7:9b:5d:70:
da:64:e0:e1:f3:9b:b8:6a:4e:89:a6:dd:49:d4:7b:91:44:89:
cb:06:64:8a:fc:96:10:37:bc:23:1d:0b:ac:90:66:0f:9a:df:
3e:ea:af:97:60:c9:5a:b9:83:2a:45:98:eb:0a:14:71:0f:af:
90:5a:a5:b9:ab:bd:45:21:ec:07:13:e1:07:47:bb:22:d6:a5:
6a:57:b2:de:4a:b2:e2:b2:d2:32:57:26:79:41:88:50:17:87:
c8:54:da:98:64:86:2d:0c:f1:c5:76:24:ec:ad:0d:98:66:9c:
f7:ed:3d:9f:90:c3:78:71:a5:50:1c:fa:55:6b:8d:97:a1:cb:
6c:3b:eb:31:9e:c5:fb:99:79:38:e9:9d:43:8d:79:36:a3:85:
a1:5f:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:33:17 2026 by rpki-client