
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File: M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier: +ylgVy1xBdHRVKo3YkqI235tupezvUta3M9T0JoCpSQ=
Subject key identifier: AD:C3:AD:55:C5:C7:2E:52:47:54:83:54:C9:BB:A6:50:FC:EF:48:0A
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number: 0116
Signing time: Sun 01 Mar 2026 06:53:55 +0000
Manifest this update: Sun 01 Mar 2026 06:53:54 +0000
Manifest next update: Sun 08 Mar 2026 06:53:54 +0000
Files and hashes: 1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: Fb2aJ/8JxLRQWrRSOs6BiGxG2nq3iD2ysFwCHBVwwTA=)
2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: /b8c3NYiRoYt5VnH0mNcKwqwOmBEVRecdoyF1gyL4+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Validity
Not Before: Mar 1 06:53:54 2026 GMT
Not After : Mar 8 06:53:54 2026 GMT
Subject: CN=69a3e283-b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:24:da:8d:28:f6:ef:58:a0:2d:21:62:6b:
3b:98:f1:25:d5:18:17:8f:d0:82:c4:7e:2b:56:49:
83:63:e4:d2:0c:04:3c:82:0d:94:75:ec:51:27:7a:
de:a4:4c:99:fb:89:d8:93:4b:0b:26:bd:5a:de:3d:
9c:da:89:48:2e:ed:72:d3:7e:4f:4e:62:cd:bb:77:
2c:c7:d6:e3:6e:23:cc:b7:f5:44:75:90:c7:94:a2:
73:0f:14:53:1a:2f:09:f9:1f:e1:58:18:2b:72:e2:
87:1a:0e:b0:42:ae:19:07:18:a8:03:50:ce:31:46:
f0:43:3b:45:97:51:8f:dc:fe:65:8f:e8:12:6d:a0:
d9:95:a2:35:18:a9:c7:99:91:37:10:4b:82:47:c8:
49:d3:c1:17:49:70:f9:29:f5:37:8b:22:69:22:79:
bb:0b:bd:9c:67:49:f6:e9:73:e4:6c:89:7a:1c:0f:
ee:6b:ce:ce:d0:a0:0c:f3:83:12:58:16:2b:fa:84:
11:7c:eb:ec:34:77:1b:18:70:c9:3b:83:e3:7e:39:
88:bc:25:a0:9e:b7:66:c7:0b:34:8e:e3:f6:aa:da:
85:9c:29:3d:43:fa:18:cf:b0:09:0c:88:58:79:fd:
eb:7e:ab:45:50:f1:57:bf:68:cd:b0:d8:58:4a:9c:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:AD:55:C5:C7:2E:52:47:54:83:54:C9:BB:A6:50:FC:EF:48:0A
X509v3 Authority Key Identifier:
keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:71:3f:86:c2:74:f3:e2:1b:48:ee:fa:46:0b:5e:18:ec:
da:9d:30:fd:e4:e6:fe:ea:22:24:e3:37:89:ef:19:7a:3c:34:
2b:df:f5:b8:78:95:ae:8c:75:47:d6:7b:c4:98:fe:58:66:a4:
bc:24:20:54:f7:ee:af:b5:d7:48:2f:a9:db:ef:bf:5d:e3:50:
11:b6:9a:c5:66:52:e9:ff:3c:26:cb:ac:13:ce:a8:b7:08:fd:
66:0e:c1:02:98:3e:37:18:00:02:2d:13:7e:17:2d:6a:b5:1d:
2f:0b:4f:0f:cd:ff:a4:2a:a8:79:98:eb:38:cb:4b:45:0f:a6:
cc:85:57:60:a0:40:49:99:44:60:b1:d8:9a:0d:1f:6a:15:cf:
da:93:4b:34:09:ba:75:48:19:af:39:5d:56:03:1e:44:75:1d:
47:93:ed:c9:a8:36:75:1f:60:b7:75:07:54:20:7e:34:31:ac:
b7:db:8f:85:9c:6e:4f:a8:f8:7d:29:1b:32:89:04:e6:4d:08:
7e:d2:d0:db:c9:b4:14:ba:a3:60:c6:07:25:d6:5e:2c:c9:2c:
2a:f3:7f:54:2d:22:c6:4b:ba:4b:45:fd:a6:24:f1:8c:38:37:
e5:57:5d:0e:27:23:8f:03:f1:93:63:c2:c9:61:99:73:5d:d2:
84:21:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:41 2026 by rpki-client