
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier: eHJOdmV0Fm4wH76Pfa/0vEVaicviDrHV9fddXz8CvDQ=
Subject key identifier: 75:F1:60:47:1B:51:6E:46:1C:D4:23:F0:00:F7:98:1B:FB:A2:B3:FC
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number: 0459
Signing time: Sun 27 Sep 2026 00:12:50 +0000
Manifest this update: Sun 27 Sep 2026 00:12:50 +0000
Manifest next update: Sun 04 Oct 2026 00:12:50 +0000
Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: ZaGBz2100YGsyOScBFJHLB2ZOopLbOYKwb/f3timXsw=)
2: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=)
3: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Sep 27 00:12:50 2026 GMT
Not After : Oct 4 00:12:50 2026 GMT
Subject: CN=6ab85f82-0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:8f:13:2f:4f:90:64:ec:74:da:aa:97:20:
a1:81:e8:ca:cf:6f:dc:54:e3:4e:d3:7f:cc:70:8a:
f7:6a:f9:d4:a8:7e:f4:2b:17:65:bb:b5:46:b3:cc:
e2:ec:a0:3a:d6:f2:9f:c6:9b:93:0e:65:e1:de:2d:
f2:05:fd:4a:37:97:56:10:65:18:c6:f6:c2:97:ab:
04:8a:d8:41:a3:5e:3f:a4:c9:cd:e2:4f:f9:9e:e4:
33:69:ac:65:4a:fc:05:a6:cc:b2:2d:b7:cd:f7:26:
78:3e:9d:2e:46:5e:d0:ed:97:cf:50:50:35:44:6a:
02:ca:7a:e3:a3:0b:6d:8d:57:aa:73:59:37:2e:c6:
f0:45:d3:d7:a7:bd:ff:ea:11:0b:88:00:92:1c:30:
ad:6b:ee:16:a5:39:58:3e:82:2f:be:08:cc:b5:73:
f3:eb:e8:ba:4d:a0:47:74:5e:d8:60:1f:c3:26:7f:
8d:4a:9e:2e:91:2b:17:c0:f0:6d:5c:ca:3e:38:7b:
87:7f:91:49:9e:43:fb:59:70:e4:ca:50:b6:8b:ff:
4c:7e:49:7e:8f:05:3c:a6:da:89:19:0d:ce:82:a2:
54:b4:14:ce:94:5b:c9:d3:61:1b:d0:c0:60:75:bc:
1d:7c:d4:97:ab:ee:2e:4b:c8:0c:65:ac:ed:b4:30:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F1:60:47:1B:51:6E:46:1C:D4:23:F0:00:F7:98:1B:FB:A2:B3:FC
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:3c:4f:3d:f0:20:56:4c:51:03:9c:f8:80:f3:3e:fd:e9:
2a:ee:2a:38:04:cf:37:40:5c:bf:f3:67:9d:7b:25:05:7d:95:
6c:c6:cf:7d:d4:c1:dc:02:e8:58:e3:fa:67:d0:c9:7d:1c:13:
c3:b1:78:92:f1:30:a5:0e:9a:a7:48:23:60:3b:44:9b:6d:79:
cc:4d:92:97:c8:cf:6c:2b:87:68:d7:07:0a:45:79:4a:b3:ff:
32:2f:1d:41:21:d8:69:0a:15:be:ed:aa:dc:e7:a4:a8:0e:90:
d4:4c:5f:bd:32:e6:af:88:8a:2b:d6:7a:8b:48:f2:bf:b0:39:
b1:14:ee:cc:68:25:db:f7:05:a5:8a:16:1f:5b:e1:86:a0:75:
91:63:0e:e0:4d:e2:ee:af:51:58:e0:1b:6d:fa:b2:64:cb:16:
ca:44:35:65:f3:9e:4b:98:de:b1:dc:49:f8:6a:e8:e1:a4:1c:
2f:97:fe:1e:c5:47:f4:2e:a1:68:b7:78:98:63:e5:fe:18:09:
d3:10:1a:a5:af:e8:e4:a3:33:ce:28:95:57:c9:37:d9:76:bc:
6e:77:25:26:60:14:e2:1a:25:64:3d:21:76:b0:79:f7:8b:1c:
02:45:4c:99:78:d1:0f:54:9d:3b:f5:ef:b2:7c:0b:3f:cf:cf:
c6:24:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:40:42 2026 by rpki-client