
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json)
Hash identifier: uaCJ00Ffj25ETSkFNlSdN9I/uG5cHMsGS3a0qvKgeI0=
Subject key identifier: 83:3D:B9:D4:2C:A0:FC:E1:AB:07:C7:FD:1D:24:E3:7C:C4:92:B4:2E
Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Certificate serial: 05A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
Manifest number: 059C
Signing time: Wed 22 Jul 2026 23:57:51 +0000
Manifest this update: Wed 22 Jul 2026 23:57:51 +0000
Manifest next update: Wed 29 Jul 2026 23:57:51 +0000
Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: OQbIVUMeN2810h99DSwElt1d4GC79Rv5wgxaGnrDNgo=)
2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: 5wECY0S1TItQf52Puzm7/lHfnEoyS0N/i319+RZPTPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Validity
Not Before: Jul 22 23:57:51 2026 GMT
Not After : Jul 29 23:57:51 2026 GMT
Subject: CN=6a6158ff-e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:03:f0:aa:30:8e:9b:4b:19:13:75:65:a0:
88:dd:b4:b8:01:b1:9e:a6:04:ae:62:04:cc:f1:2d:
8c:40:59:e1:de:ad:41:20:0f:8a:d4:58:d4:1d:d6:
44:24:80:97:06:a5:5e:24:44:9f:da:a0:84:9e:9c:
89:de:a4:fb:ab:20:58:f4:7b:38:64:3c:0d:9b:ea:
46:7f:d1:82:44:47:55:5f:d8:f8:18:a9:5c:e6:36:
2c:d2:dc:58:89:77:d4:ed:cc:f5:18:63:8d:58:50:
eb:54:e0:17:32:1d:ed:70:ab:f6:36:7f:59:10:16:
71:61:6e:85:cb:8f:c3:a7:a4:6d:07:cf:4e:9d:dd:
1e:cb:62:e6:a6:0f:07:ca:80:4c:88:5d:15:cc:15:
87:61:1f:8d:17:36:0c:97:0a:75:db:66:e8:ef:ee:
98:b4:91:b8:8c:86:eb:bd:bf:5b:ce:95:1e:46:09:
dd:92:ad:8b:81:0a:05:4e:71:ab:3c:92:f6:44:0a:
1f:e4:1d:a5:0f:12:cd:a1:6e:bd:d8:a2:b9:df:7c:
43:d9:61:6d:4b:a6:37:f7:a2:2c:b3:2a:74:97:63:
f3:b5:24:dc:93:6d:a9:d4:1b:78:51:79:64:16:41:
c6:17:11:9f:78:6b:0f:59:20:a5:1d:93:17:73:51:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3D:B9:D4:2C:A0:FC:E1:AB:07:C7:FD:1D:24:E3:7C:C4:92:B4:2E
X509v3 Authority Key Identifier:
keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:17:47:1c:25:96:49:77:bf:88:5e:fe:c4:2c:72:13:21:
3a:e0:db:27:42:9c:fa:61:f1:5c:1f:9a:ab:8e:16:d1:c2:99:
36:24:2a:49:a3:b7:53:af:04:8d:ce:37:39:d5:d5:6f:1c:9f:
30:31:8e:35:7b:d2:d1:26:f7:9f:95:03:41:77:0b:c6:63:5e:
b1:f0:37:e3:c3:0e:d3:58:65:71:1a:0c:a6:7f:a3:1d:a6:99:
12:66:f9:5c:d8:06:62:b3:77:6b:11:24:d7:73:2b:0d:bd:b1:
45:7c:86:2a:52:96:d4:04:2f:2e:ca:d4:a9:f3:a7:54:ff:fc:
bc:8f:e9:11:28:5b:ef:66:08:79:2d:cb:b2:1d:8b:bc:70:0c:
09:5f:c5:94:96:96:8d:2c:6c:a4:72:e1:01:25:fe:bf:ef:fb:
97:66:05:a4:3a:e0:59:aa:45:c4:21:8b:b2:0d:5f:ed:b2:10:
8e:5d:69:90:1c:78:e5:0c:93:66:63:81:a5:0e:83:c4:d4:7d:
62:25:4b:72:6d:c9:36:14:aa:ec:23:07:e8:42:6c:69:df:bc:
de:7e:0b:87:be:90:fa:a1:c0:39:e4:f7:2d:c5:be:0a:de:52:
64:ab:d1:cb:9b:89:84:41:f8:4f:16:c2:ae:18:10:98:8d:68:
e9:d3:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:50 2026 by rpki-client