
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json)
Hash identifier: QFCxUdSidCyNoeimws1iqR+5EDbtAxD6Add1rOyHJqA=
Subject key identifier: 48:E7:6B:58:47:74:FE:4B:20:B5:40:A1:B9:56:8F:4C:0B:FD:01:35
Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Certificate serial: 05A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
Manifest number: 058D
Signing time: Mon 27 Jul 2026 00:10:30 +0000
Manifest this update: Mon 27 Jul 2026 00:10:29 +0000
Manifest next update: Mon 03 Aug 2026 00:10:29 +0000
Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: DNojcoIsfvKyLqY0Zd+aJCv4x4427PIQjZGThj46Uw8=)
2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: xZK353K857X3pyBMuTDvCs3K6j+a0kZMwNk0Xb/yi9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Validity
Not Before: Jul 27 00:10:29 2026 GMT
Not After : Aug 3 00:10:29 2026 GMT
Subject: CN=6a66a1f6-a433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:6c:25:5c:30:28:16:64:a3:34:87:fe:40:
2b:59:92:14:99:5c:51:1c:b1:53:ac:8a:0d:df:73:
b9:fb:09:17:b0:c3:31:fa:dc:25:34:4e:a2:00:78:
94:5e:47:66:ea:b0:8e:1d:17:ef:4d:31:02:2c:b9:
f5:99:94:53:ca:9d:25:b9:33:03:a7:c5:c5:25:ca:
4d:60:3f:4c:70:30:03:8c:2d:ba:5d:f0:df:fc:e2:
ac:4a:a0:bd:bb:bc:5f:40:50:e8:cd:09:cf:71:d1:
d3:de:8a:a3:db:ba:12:90:b9:a8:ba:0b:0f:2e:12:
15:01:9b:69:12:fb:b2:0e:3d:52:8e:b2:88:76:e8:
dc:1b:04:dd:81:6b:81:29:8c:31:cd:46:8b:29:68:
b3:00:be:8d:89:79:7e:b5:a4:e7:ed:f5:e4:01:1b:
27:71:e6:2d:6d:19:f6:ba:f0:a3:77:6e:79:aa:b4:
c6:e7:24:42:11:5f:4f:cd:77:dc:23:ac:0c:5e:33:
e8:32:d5:8a:fd:b8:04:5a:83:0c:85:e6:01:23:7d:
17:2b:d9:0f:dc:66:37:d7:39:69:e9:11:52:34:c2:
ee:e1:77:a7:71:a8:d5:c0:04:cc:32:4d:82:c7:2f:
4a:f1:44:a2:63:51:47:a8:b2:d1:a7:77:8f:de:d8:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:6B:58:47:74:FE:4B:20:B5:40:A1:B9:56:8F:4C:0B:FD:01:35
X509v3 Authority Key Identifier:
keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:07:44:16:37:1f:a1:31:ba:5f:ff:23:af:7e:36:f5:34:b7:
12:1f:92:26:ad:82:31:cd:7d:94:dd:02:b7:4c:f9:ce:84:ce:
6b:3c:69:57:75:a1:2a:b6:ce:6f:0b:a6:e9:97:d6:63:58:e8:
d1:e5:ce:01:21:46:5e:27:c2:18:ed:40:55:31:99:53:b4:31:
c5:4b:d1:af:90:c1:50:61:9d:bb:47:f0:c2:d0:c6:f2:a4:83:
64:ee:58:26:e9:87:ec:b4:f7:23:0c:f6:2c:95:4e:f1:19:7c:
5a:11:c3:3f:2d:f1:76:55:e1:c3:98:80:2f:d5:8f:db:10:8c:
79:16:0a:67:dd:92:48:49:24:ed:6f:4c:63:14:a4:5e:3d:55:
3c:a1:2e:51:0e:17:a4:bc:24:f6:af:0a:42:84:9c:15:0d:a8:
c5:2d:f1:08:b9:ea:ad:8a:60:cb:8f:94:7d:86:06:9b:d9:4f:
cd:00:2a:70:7f:c8:92:ed:34:92:45:29:98:4d:af:43:27:1a:
cc:cd:74:8a:92:a5:a4:1c:ee:d1:c8:c3:5d:b9:1e:ce:82:bb:
71:40:3e:84:e2:65:29:a9:36:d6:eb:57:b0:0b:31:b8:61:b6:
de:32:f0:dc:0a:2f:32:b0:e2:5c:2d:10:87:5b:fb:b1:39:14:
be:5b:3a:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx
Njg1QkE2RjAwHhcNMjYwNzI3MDAxMDI5WhcNMjYwODAzMDAxMDI5WjAYMRYwFAYD
VQQDEw02YTY2YTFmNi1hNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGRsJVwwKBZkozSH/kArWZIUmVxRHLFTrIoN33O5+wkXsMMx+twlNE6iAHiU
Xkdm6rCOHRfvTTECLLn1mZRTyp0luTMDp8XFJcpNYD9McDADjC26XfDf/OKsSqC9
u7xfQFDozQnPcdHT3oqj27oSkLmougsPLhIVAZtpEvuyDj1SjrKIdujcGwTdgWuB
KYwxzUaLKWizAL6NiXl+taTn7fXkARsnceYtbRn2uvCjd255qrTG5yRCEV9PzXfc
I6wMXjPoMtWK/bgEWoMMheYBI30XK9kP3GY31zlp6RFSNMLu4XencajVwATMMk2C
xy9K8USiY1FHqLLRp3eP3tjqrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjna1hH
dP5LILVAoblWj0wL/QE1MB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw
NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i
ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQwdEFjcfoTG6X/8jr3429TS3Eh+SJq2CMc19lN0Ct0z5zoTOazxpV3WhKrbO
bwum6ZfWY1jo0eXOASFGXifCGO1AVTGZU7QxxUvRr5DBUGGdu0fwwtDG8qSDZO5Y
JumH7LT3Iwz2LJVO8Rl8WhHDPy3xdlXhw5iAL9WP2xCMeRYKZ92SSEkk7W9MYxSk
Xj1VPKEuUQ4XpLwk9q8KQoScFQ2oxS3xCLnqrYpgy4+UfYYGm9lPzQAqcH/Iku00
kkUpmE2vQycazM10ipKlpBzu0cjDXbkezoK7cUA+hOJlKak21utXsAsxuGG23jLw
3AovMrDiXC0Qh1v7sTkUvls6iQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:02 2026 by rpki-client