
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: bO28jCeIptZbCudHinJ/d1HgN1azTU/qB+MJSpUea6g=
Subject key identifier: C4:92:A0:A3:27:34:E0:C0:C4:B1:47:21:E5:51:C7:B6:DF:94:18:99
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 01BA
Signing time: Mon 11 May 2026 04:00:42 +0000
Manifest this update: Mon 11 May 2026 04:00:41 +0000
Manifest next update: Mon 18 May 2026 04:00:41 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: nmzgqFBlagfwfLDDOfOnYa2aZXZMC7BXIZRqk8C1TLw=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: May 11 04:00:41 2026 GMT
Not After : May 18 04:00:41 2026 GMT
Subject: CN=6a01546a-ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:c3:7e:be:90:2d:82:7f:a2:ee:07:98:2f:
73:ef:9a:8b:e3:af:2b:0b:82:9d:01:99:54:11:62:
84:cd:6d:a0:01:40:0a:87:10:3a:8e:52:b4:91:f2:
99:ad:23:90:86:cf:f0:94:54:83:84:a4:30:7d:5d:
97:e5:67:81:d6:18:4b:ac:38:f0:34:16:85:66:e4:
16:b2:b6:3d:65:b8:49:6a:6b:42:06:a0:8c:ff:59:
7b:3f:0e:c0:21:de:4b:1e:1d:41:05:fd:b5:18:9f:
6c:0a:36:cc:aa:d3:1b:93:1f:1a:ad:1b:06:98:49:
fd:3d:5e:ac:b8:1f:60:97:20:b6:7a:93:6b:31:38:
0a:ba:ed:9b:36:70:14:5f:11:fd:5a:87:9b:ee:e7:
95:dc:72:05:19:9e:84:10:6d:cc:18:d8:86:16:c6:
0f:6e:20:4a:da:4b:81:08:b6:bd:7d:9b:3e:7a:4d:
93:83:99:f1:83:c7:91:fb:4c:48:ab:82:e5:f3:b7:
ae:3f:f9:ea:89:6c:c4:30:74:51:42:1e:78:cf:af:
86:43:c0:c0:c5:2f:30:cd:a2:87:df:f7:44:ba:f7:
b2:69:37:0f:df:e6:6d:35:09:1b:5d:c0:96:6e:a3:
53:26:4b:70:a1:09:2f:cf:8d:60:ae:f8:64:50:13:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:A0:A3:27:34:E0:C0:C4:B1:47:21:E5:51:C7:B6:DF:94:18:99
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:0f:e7:ae:38:5d:bb:bb:7e:bc:fa:57:cd:66:37:13:c5:5d:
e6:b3:02:f0:31:02:24:8d:65:99:73:8c:c8:b1:c8:3e:15:f3:
83:b5:59:26:eb:90:39:5d:a0:b8:ad:da:51:89:5d:73:49:97:
83:c0:bb:c1:d0:ef:1a:c6:47:75:de:01:5a:e0:53:34:9d:da:
ea:3c:d3:7c:c0:a5:5c:c3:50:02:bd:3d:40:98:12:c2:46:4e:
09:39:44:31:4f:d8:33:e7:67:1b:71:50:9f:0f:ca:8e:27:61:
47:59:1f:c1:a8:1e:d7:e0:c9:ec:e1:9a:38:33:79:3a:74:79:
0d:c5:4a:66:a6:c3:91:92:8d:b9:31:c7:45:15:0b:fe:f9:a8:
05:80:11:ad:e8:45:40:e4:85:74:20:46:77:60:2f:0b:b0:3b:
1e:26:c5:ce:a3:04:e2:12:73:cf:2f:ae:15:86:6d:79:27:6a:
da:ed:db:75:76:e6:ac:c7:ab:6a:fe:c3:10:06:df:d4:3d:a6:
54:c9:2b:e0:b9:15:0b:52:15:29:1e:ba:6c:7a:30:38:69:63:
96:0d:f1:1c:fd:fc:c6:f1:72:5f:20:91:1e:6d:dc:cc:f5:9a:
c5:47:03:a9:f2:42:e8:47:5c:37:71:1a:65:77:ae:2b:a8:ad:
a7:21:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:01 2026 by rpki-client