
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: Ps7YzXrjzDgSv97varrLVaSQYMdw6mwIf+EsKpz/dQg=
Subject key identifier: 00:37:39:74:CE:77:AC:71:9C:07:1D:3E:67:CB:17:8B:51:0F:D7:7C
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2AC5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2AC5
Signing time: Thu 26 Mar 2026 15:35:02 +0000
Manifest this update: Thu 26 Mar 2026 15:35:01 +0000
Manifest next update: Thu 02 Apr 2026 15:35:01 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: PHs7Gm1x0CUzqZYvnKamVAVcoE+BSdONPwZAMyyBNIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10949 (0x2ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Mar 26 15:35:01 2026 GMT
Not After : Apr 2 15:35:01 2026 GMT
Subject: CN=69c55226-5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:fc:6c:33:c3:72:d2:c1:b0:c5:43:ff:92:
a1:d7:41:eb:23:e4:3c:f7:85:09:5b:a8:2b:9a:03:
f7:8c:0a:0b:62:d9:be:9b:56:b4:0d:e6:40:de:44:
6d:53:47:e2:0f:85:42:39:b4:9e:6b:ba:39:7d:8d:
2d:65:aa:b2:64:0e:56:f4:9d:14:70:68:0f:d6:4b:
98:8c:d3:59:9f:a3:8a:2e:11:e2:65:e0:f0:44:41:
6f:d1:2a:39:ac:91:8a:81:65:11:58:fd:a0:43:c2:
c3:f2:76:bb:4a:62:0d:6a:de:d2:de:d4:7a:c6:34:
94:15:84:12:d2:95:1d:f5:b0:f2:84:70:b1:5d:34:
28:77:20:8b:4e:47:cb:32:5c:14:23:1e:b2:16:19:
fb:46:9e:41:e8:11:47:51:5d:81:9a:38:7e:b2:d7:
22:5d:6b:5a:42:ee:f6:ac:22:76:a3:1a:c9:39:65:
e8:9c:cd:29:be:28:ce:29:2e:ad:33:0c:60:a5:42:
f3:2b:8e:0f:b2:15:e4:ce:7a:a5:c4:7b:c8:65:b8:
ed:ea:a6:43:23:63:0d:f0:c6:37:8f:26:5a:0c:4e:
19:5c:81:81:64:e9:80:52:7c:4c:45:26:01:fc:d8:
8a:95:c6:c6:8b:4f:a0:53:c1:19:53:af:3d:7d:d2:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:39:74:CE:77:AC:71:9C:07:1D:3E:67:CB:17:8B:51:0F:D7:7C
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:7c:64:aa:1a:5b:6e:cb:61:4b:8d:45:9b:11:09:01:36:
eb:ff:4c:bd:62:82:46:f0:5d:65:da:e0:c5:f2:f4:f3:b7:4d:
c7:83:ce:31:ab:bb:7d:fe:ac:4f:af:1f:1f:f3:08:3f:6f:66:
3a:5a:1b:48:06:34:e5:89:e5:5d:cf:8f:b5:94:96:c7:2f:bf:
51:cd:f7:9f:e6:8e:82:c9:f1:23:e2:39:d4:55:05:1f:19:c2:
74:4b:c8:74:d5:71:76:7b:05:4d:87:e6:dc:6e:0d:15:c6:ec:
8a:01:cb:e0:a8:ec:7d:d9:2e:9f:4c:70:7d:76:ff:c1:a1:49:
91:c6:a6:2c:c2:d8:5f:f6:77:b3:dd:9e:f6:1c:3c:63:44:5b:
a4:3a:82:df:8e:28:0b:ec:3b:b4:6a:45:b0:0c:f4:6f:0b:7d:
69:84:6b:83:c7:c0:d3:54:d4:2d:6d:71:3a:ba:83:13:f6:21:
22:e7:fe:75:ff:1d:72:39:93:2e:c8:7a:e0:3e:70:c7:f0:9d:
ed:f3:fa:29:ef:6a:67:f3:3a:ea:a1:40:19:fb:87:30:f6:cf:
d2:e0:d8:d6:3c:de:2f:26:2e:1c:1f:0f:08:1d:ea:ec:63:03:
27:07:77:ca:32:ab:ee:fe:0d:cb:71:61:65:9e:08:2e:ab:af:
2d:23:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:38 2026 by rpki-client