
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
File: 3q8cjeT-PFHGkVP8r5_owq1vjiY.mft (raw, json)
Hash identifier: sadOlZk4g5g1eE790JnfPXFZ9ys4hxuUQnko/3j4GyA=
Subject key identifier: 94:14:C8:A2:F5:39:D6:6C:2D:63:46:46:D3:5C:1C:2F:52:3F:13:E9
Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
Manifest number: 01EF
Signing time: Thu 23 Jul 2026 04:39:28 +0000
Manifest this update: Thu 23 Jul 2026 04:39:27 +0000
Manifest next update: Thu 30 Jul 2026 04:39:27 +0000
Files and hashes: 1: 3q8cjeT-PFHGkVP8r5_owq1vjiY.crl (hash: TRa6yqF3UzvVJFvkC16ouPWkYUmJVjctm44V9xJ081s=)
2: 1C2EA330925011EE9571EE40C4F9AE02.roa (hash: XfdGm7eKGJG4mI4OlbsmvCWQLht74XpIFUZS0ZbYwl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Validity
Not Before: Jul 23 04:39:27 2026 GMT
Not After : Jul 30 04:39:27 2026 GMT
Subject: CN=6a619aff-2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:f6:f0:a7:56:ad:5d:fd:a1:53:56:37:b7:
ca:1d:27:0c:9f:eb:e0:4b:37:4f:d9:5f:3c:55:92:
cd:95:5f:f2:44:91:02:81:fe:e3:b6:54:65:49:96:
46:6c:04:1e:ea:94:1a:02:28:e9:de:81:a2:a9:75:
ea:57:f5:dd:31:9d:01:bd:ab:a8:43:3f:df:59:8f:
76:45:98:12:e6:b8:34:07:92:13:3e:bb:dc:eb:86:
e7:10:8d:12:b7:4b:74:92:04:2c:f9:0b:fd:9a:2c:
0e:fc:49:9d:a4:d9:3f:f8:08:3d:28:96:7f:6f:97:
96:24:22:67:2c:e4:f8:15:f3:cb:42:38:3b:9d:d9:
bf:69:22:56:ed:b9:40:03:30:e2:14:92:1f:ea:db:
f6:c3:19:50:6e:52:f6:33:14:7f:f6:9a:81:7c:04:
a9:00:42:a1:fc:c4:9f:c6:1f:b1:e5:30:77:32:39:
f8:e1:b0:2a:e5:6b:de:58:2c:24:c3:77:0c:b8:8e:
78:16:8e:d2:31:de:bc:9c:a6:ec:5d:95:bd:88:44:
4e:a5:d6:84:71:eb:f3:a4:4e:2c:cd:e6:e6:4e:0d:
85:8c:1d:48:41:79:38:e0:ab:4d:22:31:d9:7b:a1:
bf:7f:ae:b1:15:f4:ef:88:48:94:40:f6:3f:a4:6d:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:C8:A2:F5:39:D6:6C:2D:63:46:46:D3:5C:1C:2F:52:3F:13:E9
X509v3 Authority Key Identifier:
keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:15:66:ff:a5:4d:04:d9:94:5e:5e:46:6b:96:64:fa:46:35:
e7:47:dd:d3:d2:df:c5:74:99:4a:68:4f:de:87:ee:f8:fc:e3:
7d:14:2f:fd:1c:2a:b5:4d:2a:b4:d9:d3:21:53:31:8e:6f:dc:
b7:ff:37:3e:7a:77:70:71:23:ef:1c:2f:c7:c5:3a:f3:b1:b1:
6a:ed:3e:08:2d:ab:ab:0a:44:0b:67:8b:6d:c7:9c:fb:10:1e:
da:6f:0b:11:8b:6e:f2:47:e3:83:b4:81:b5:72:86:c9:68:db:
17:37:86:59:89:fc:2c:9c:68:eb:59:25:cb:fb:a4:b5:7a:06:
61:45:e9:1f:67:a4:10:94:36:0f:b6:66:ce:5a:c1:ae:90:cf:
82:ce:d5:92:7c:1a:24:2e:03:cc:f4:05:3a:0c:c5:d6:29:9d:
87:8d:9c:ba:b3:c7:2b:b8:81:0d:91:4a:b8:65:19:b7:36:ce:
42:10:88:08:00:3c:e5:3e:7d:eb:58:bd:4e:04:a8:7a:1c:67:
e3:01:2f:a3:e2:d8:4e:3d:b8:e8:60:9b:51:cc:4f:48:8f:43:
97:67:02:41:a1:ec:14:8b:c2:4b:07:f0:fe:2b:c7:3c:0c:13:
03:4d:93:f6:b3:a9:82:fc:28:23:5f:92:32:78:04:13:69:d8:
23:87:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:25 2026 by rpki-client