
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: ugDW4v0zfv4Q/CsPQ84DIAl5W8/hzfYNbgxXrTEu1fg=
Subject key identifier: 0D:43:77:C3:87:E5:BE:55:31:1B:2F:1F:51:AF:B9:FE:2C:5A:DB:5F
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2B0C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2B0C
Signing time: Wed 22 Jul 2026 15:38:17 +0000
Manifest this update: Wed 22 Jul 2026 15:38:17 +0000
Manifest next update: Wed 29 Jul 2026 15:38:17 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: 1qo/wKe1NyijHK2GDnc7GWsOwX4vGWlJ8Jbk1WZA5fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11020 (0x2b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Jul 22 15:38:17 2026 GMT
Not After : Jul 29 15:38:17 2026 GMT
Subject: CN=6a60e3e9-9ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:3a:80:e1:f9:dc:e2:d8:20:0f:a6:1b:73:
7a:ca:8c:d4:90:03:e3:08:0c:41:a7:06:ec:4e:18:
68:0a:8c:b6:69:65:95:8e:68:ad:cf:b2:a6:67:ae:
d5:65:83:3a:6d:e7:94:fa:b8:1c:49:54:7d:51:b2:
1d:5a:c1:23:13:df:c2:3a:57:e8:31:61:01:8b:59:
7d:51:8a:05:2b:a1:28:50:e8:ed:3d:f1:34:a2:11:
54:f0:1b:d6:4b:65:f6:fb:97:bb:1a:88:a6:0a:ee:
23:67:99:a1:75:da:c3:9b:fc:f6:a3:74:c0:c8:3f:
e5:08:0b:b6:44:40:44:6f:a0:d3:0e:38:6f:d3:c7:
e1:65:50:3d:0c:f4:3e:84:76:63:f4:31:d5:71:c1:
1f:ff:27:98:e2:a6:39:1e:a6:44:84:a7:d0:fb:12:
71:c0:5f:da:39:16:cd:97:00:8e:9a:c9:25:03:97:
ea:e4:50:34:71:17:88:85:56:4c:b6:b6:b4:ad:22:
10:a8:43:e4:3b:2e:c2:10:61:e3:a9:a9:ee:d3:80:
ce:fa:83:3f:fc:87:8a:e0:89:db:bc:c1:5b:dc:e6:
1b:f6:2c:8c:ac:07:00:fe:f6:4f:c8:5d:10:bc:03:
f6:53:0c:9c:44:c7:60:92:4c:5d:c9:8a:d5:16:c2:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:77:C3:87:E5:BE:55:31:1B:2F:1F:51:AF:B9:FE:2C:5A:DB:5F
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:3f:7c:d3:65:a4:bd:42:8c:ec:cb:e5:0c:99:af:c5:b8:
b3:6f:d9:92:40:6c:c5:fe:a4:78:77:89:70:aa:cc:77:a0:d7:
61:27:c7:0b:f7:bb:05:1e:be:28:0d:a6:e9:7b:e5:70:cf:df:
a3:d4:d2:97:f4:60:74:5a:cd:b0:a6:19:7a:89:e7:39:50:41:
5f:e6:18:0b:f2:38:fa:82:10:74:6e:e9:ab:ff:5c:c1:7a:f0:
76:6d:c5:1f:13:a2:8d:ea:fa:2c:1d:a0:6b:f3:b2:ce:81:ad:
95:f6:7e:5a:5d:42:a6:d0:8d:73:ff:66:67:4b:b5:fd:2b:51:
e8:00:9c:8c:7b:29:11:85:e0:10:d4:aa:0a:99:e4:62:c6:7d:
ab:df:c9:1a:7e:7a:6f:7d:c9:c7:5f:66:3f:6e:74:26:4e:dc:
56:a6:d9:20:d2:4e:56:e3:e9:06:b0:c2:fa:b8:d5:df:bd:61:
06:7c:60:66:56:84:de:ab:97:3d:4a:cf:01:35:bc:df:b2:98:
47:2c:20:5b:93:0d:b5:dd:b6:bc:da:49:9a:64:2a:a9:ef:5c:
28:61:b5:3b:dc:58:b1:ab:0e:6c:56:7d:32:d8:0f:ff:5e:1d:
fa:ca:58:94:66:27:0a:66:c2:4d:27:97:bb:9d:8a:4e:ac:98:
86:43:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:44 2026 by rpki-client