
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier: shk5mXyaCNhfMtDtNEmsAQMEJvDTsctURPoTJywEZ8c=
Subject key identifier: 18:CA:94:1C:E5:1D:ED:1B:DF:20:B4:F9:55:26:F4:03:C5:24:60:8B
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number: 013A
Signing time: Mon 27 Jul 2026 07:48:52 +0000
Manifest this update: Mon 27 Jul 2026 07:48:51 +0000
Manifest next update: Mon 03 Aug 2026 07:48:51 +0000
Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: 4k5beoLCyHATW6HxgtKk9oi9fjNUCEkPXQr5Monh7O8=)
2: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
3: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jul 27 07:48:51 2026 GMT
Not After : Aug 3 07:48:51 2026 GMT
Subject: CN=6a670d64-9082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:e6:c0:0d:2f:a6:a7:dd:9f:2a:f5:9c:a2:
5d:dd:b5:8c:f5:ac:73:4f:f2:d2:e8:6d:dc:47:d2:
f7:90:00:d4:55:70:17:ca:56:d7:53:61:48:b3:24:
80:1c:ca:13:0a:88:f5:57:4f:4b:f5:0d:7d:b8:0f:
2d:69:7a:73:6e:22:33:af:43:64:cd:5c:49:c3:5e:
d6:c9:84:76:90:3c:ae:58:e2:41:34:c0:66:b0:db:
b9:a7:ec:d5:8e:9c:b4:d9:be:db:94:6d:01:49:7a:
da:00:2b:a3:db:b6:86:80:37:56:49:eb:50:de:52:
8a:aa:3a:bc:5e:11:33:7b:f6:19:b8:ee:76:ef:45:
d8:e2:68:50:bc:5c:0d:3b:a6:8b:46:ce:66:d0:9a:
8e:e5:d2:e7:da:b2:a5:ad:d3:de:f9:c6:61:3e:d7:
a6:e0:4f:82:a3:f3:91:69:b9:0e:b8:37:76:19:f8:
c4:ba:07:3d:cf:3c:1d:c8:44:d2:ea:a2:d1:d4:6f:
50:88:45:92:98:90:80:7e:44:60:e1:f4:c0:c0:30:
fb:b4:6e:5e:0d:66:63:da:be:cb:41:66:ff:71:f6:
e5:aa:5d:c2:47:50:7b:56:14:f7:ab:c5:dc:59:32:
b7:22:89:db:97:7b:e1:3e:ce:83:c8:97:38:63:5f:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CA:94:1C:E5:1D:ED:1B:DF:20:B4:F9:55:26:F4:03:C5:24:60:8B
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7a:21:e7:d0:16:94:e2:4a:c3:9e:ea:b3:b9:0a:74:55:da:
18:06:3b:f2:7a:bb:81:08:f2:5e:dc:df:3c:85:46:46:25:de:
74:f1:2c:03:46:2f:d0:51:5e:af:02:ba:21:89:02:b9:b8:2e:
f4:46:b7:de:11:58:32:e6:5c:2c:bd:27:08:ef:15:93:8a:30:
3e:50:e8:6d:27:15:ee:e0:41:e7:e9:ec:d3:5d:0d:23:39:1f:
f4:87:77:44:c8:07:df:ac:ba:1a:b5:26:0e:88:95:0f:c2:00:
22:3b:e6:a4:18:66:09:d8:98:fa:23:5e:79:02:7d:fd:2b:a1:
22:62:18:61:25:59:59:1c:d6:0d:fa:0a:f2:76:f2:df:ba:28:
f9:a1:20:d7:04:56:ab:b0:ba:ee:ad:9a:b9:c3:04:2d:a5:90:
07:9d:7d:0d:e8:eb:27:63:ee:59:d8:eb:2c:f1:fe:c0:3b:34:
5f:ad:80:fa:58:c1:5a:ad:c3:d1:5b:4a:80:9f:f5:74:3b:22:
3e:86:12:35:08:30:d3:23:ac:9e:c4:69:d3:d0:cb:2f:3b:5c:
fc:fc:11:96:d3:36:ae:aa:5f:1c:07:46:9b:f4:18:98:cb:c2:
e8:83:72:ba:a3:9c:77:60:97:33:23:8d:d5:c3:52:01:5b:2a:
c5:da:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:28 2026 by rpki-client