
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json)
Hash identifier: 5MmNeJ8IrPOa70DdnVhkcjTrVkTYHw5DhMCStevuC50=
Subject key identifier: 3E:22:30:34:77:71:71:EC:F4:30:C2:D8:42:8A:6D:AB:DF:0D:9B:B8
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
Manifest number: 0256
Signing time: Sat 19 Sep 2026 02:22:48 +0000
Manifest this update: Sat 19 Sep 2026 02:22:47 +0000
Manifest next update: Sat 26 Sep 2026 02:22:47 +0000
Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: GbZVwhR76fqSlvMNbiGvUhGmpBtxWvCzUp/qlMte/NU=)
2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: axIru7MKX6ecXQsiWBKjZkKaXNLS528jv/SfOGQ616U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Validity
Not Before: Sep 19 02:22:47 2026 GMT
Not After : Sep 26 02:22:47 2026 GMT
Subject: CN=6aadf1f8-b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:33:b6:01:ee:83:a4:3f:95:a8:8b:b1:aa:
23:49:52:07:cd:31:f0:61:48:09:d5:b1:9a:ab:19:
80:3a:b7:39:29:f6:16:5b:0b:be:33:a0:fd:a5:7f:
de:30:b0:b3:f0:9b:19:d6:d3:6c:2b:de:4d:9e:4d:
9c:12:45:9d:78:45:af:1d:6a:cd:61:d3:67:fa:25:
74:7c:86:4a:95:9d:bd:80:e9:38:e1:51:2d:ca:cc:
ed:d3:f5:19:0c:89:42:62:cb:1c:db:59:aa:66:39:
73:28:37:6a:88:8a:b1:e6:dc:10:8f:0b:4e:d3:49:
49:ea:6f:f6:6e:32:cb:bf:19:c2:8c:2a:1c:7a:43:
6f:d2:08:92:de:db:4e:e7:db:e0:4b:b2:0b:0f:b3:
da:90:d0:c5:d6:68:05:61:87:46:1b:c6:16:d5:30:
75:9c:d4:55:55:76:9d:a8:fc:84:1c:3f:96:b5:1c:
85:6b:b6:8e:4f:02:eb:25:70:f5:42:ea:cc:17:b5:
c5:cb:b1:b8:73:d5:a9:24:d4:33:84:73:7a:a4:2f:
47:bb:08:1b:78:1c:2e:49:cb:e2:86:ee:e7:bf:49:
1b:72:4a:8e:3c:8d:f3:9f:a2:f0:c5:ba:b2:d5:55:
af:b8:d7:d3:05:1d:0f:d7:17:35:8f:b9:71:41:3a:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:30:34:77:71:71:EC:F4:30:C2:D8:42:8A:6D:AB:DF:0D:9B:B8
X509v3 Authority Key Identifier:
keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:0f:8b:94:bf:b0:7e:b2:18:4c:4f:cd:f0:c9:ec:61:3b:
3a:2d:bc:6b:97:6b:41:d9:2a:12:09:94:d0:15:db:82:2d:0b:
45:14:5a:3a:4d:56:bf:25:ed:f9:e7:ee:2d:cf:78:b2:aa:52:
5f:55:3e:71:b8:95:89:98:88:74:8c:30:84:fd:7d:32:04:18:
78:cc:b3:fc:77:bc:3e:53:75:1b:98:01:88:93:a2:78:f7:2e:
93:f2:20:41:7d:1d:a8:7c:c8:47:b1:83:b7:8a:02:61:8c:3d:
43:17:42:99:81:c2:9f:fc:0c:ef:1d:75:78:2d:de:97:16:1c:
b2:25:c3:4f:68:23:b2:a5:55:24:b0:28:af:d8:44:7e:82:c0:
e0:9e:76:6a:de:f5:b6:ed:5a:79:c3:5a:77:11:12:2d:c9:35:
df:81:4e:3b:78:0d:60:72:c6:92:90:15:b9:ce:64:16:be:c0:
5f:d1:6c:0c:37:aa:aa:c4:41:94:5e:85:d8:ca:8f:55:81:b1:
21:80:43:d9:0a:9e:92:08:c6:9b:6a:c3:d1:d8:9d:b1:5a:dd:
10:e8:c4:bc:5a:f9:34:fe:5d:8e:68:93:19:49:a2:15:44:1f:
db:24:25:a0:cf:14:d0:3a:f8:6d:42:8a:20:c3:0e:85:2b:5c:
d6:7b:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:16:06 2026 by rpki-client