
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier: AKaLyGyEKOw2l0VfC2HCZRh78K8nc591BEwu4oBwTOk=
Subject key identifier: C2:A0:E9:8B:19:31:A3:7E:74:57:72:5D:7A:E6:27:AB:4C:72:37:CF
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number: 01CB
Signing time: Mon 21 Sep 2026 03:44:57 +0000
Manifest this update: Mon 21 Sep 2026 03:44:57 +0000
Manifest next update: Mon 28 Sep 2026 03:44:57 +0000
Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: DiU8D3vUy3Kr+p1YtPZXG5UdzEpDOKi01THHJ3LYNGs=)
2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Sep 21 03:44:57 2026 GMT
Not After : Sep 28 03:44:57 2026 GMT
Subject: CN=6ab0a839-c536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:9c:9b:13:1c:e4:4e:28:b8:6d:92:eb:16:
0d:89:d6:7a:2c:b1:67:92:24:31:8c:67:21:64:f7:
44:c7:03:0e:35:37:29:7a:27:6e:f3:ad:68:5d:59:
ca:3c:26:31:41:6a:d3:d3:83:08:96:8b:52:d6:a1:
72:05:2b:26:1d:0f:87:b2:b2:0f:97:e7:e8:8e:ba:
23:07:e8:35:8a:d4:01:69:5f:33:03:56:d5:1b:c4:
a9:51:d3:bf:c5:9e:a3:95:60:d5:14:a0:1a:db:a1:
12:6a:50:d4:1c:2d:e8:5a:63:2d:b1:74:a5:2a:3c:
cf:40:69:e9:41:b8:0a:1b:47:ef:eb:3a:be:85:81:
74:85:ba:86:0e:a1:e5:1f:f4:8c:55:79:ae:18:b2:
e8:9d:eb:3f:65:ea:42:dd:b3:48:13:39:23:e1:5d:
c7:ef:80:97:f4:71:ef:61:d7:fd:da:d0:11:07:54:
58:e6:fc:cc:21:26:0d:04:2d:60:08:e8:30:8d:3d:
ae:05:8f:c9:23:69:8b:f2:9b:83:b3:1b:66:86:bb:
cf:5a:fc:99:f9:71:56:93:bd:a6:d7:e7:b2:42:8b:
d8:a3:65:9e:b1:ef:d8:a6:bd:8c:2c:e3:7c:c4:6e:
6d:4d:e4:d6:e7:4e:cc:6a:73:9d:76:15:e3:a8:19:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:E9:8B:19:31:A3:7E:74:57:72:5D:7A:E6:27:AB:4C:72:37:CF
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:1e:33:ef:37:23:e6:6b:be:23:d9:62:4d:59:67:95:93:
c2:75:de:72:23:c5:d0:ac:a4:6f:b3:8d:d2:41:b6:7c:84:b4:
ff:a0:70:0b:b8:98:01:b1:31:e9:23:e0:e1:78:67:bf:ce:4f:
7b:ac:e7:ab:e5:4f:b6:26:e0:1b:bc:45:67:a1:65:f2:f8:3e:
0c:1c:7e:95:6f:c0:1c:39:00:c7:53:5f:2f:70:68:32:dd:9a:
00:dd:55:05:7a:c2:e0:0b:c2:57:4e:7b:63:06:2a:76:15:f9:
1a:c2:cc:67:63:2e:ce:8a:d0:f2:49:dd:f9:19:5a:65:28:ce:
de:e6:c4:d6:db:27:b3:8f:4d:bb:f1:7e:00:7d:da:54:30:7e:
25:f4:9d:ad:be:21:07:fe:03:fc:f9:8e:64:c5:34:dd:26:c2:
3c:58:3f:cf:53:4c:6e:57:da:16:71:6b:5b:e3:44:83:c7:5d:
a7:18:d4:61:67:97:57:2d:2a:78:b3:40:d1:a1:e4:48:49:f1:
f7:f8:1e:be:d1:bf:ad:8c:4e:af:0f:48:92:1d:38:76:02:05:
79:6c:dc:95:ec:11:9c:46:a4:81:3c:e7:c2:9f:d6:c5:c0:70:
5c:5b:87:97:ee:86:82:45:6d:3e:12:13:fe:d7:09:05:8f:18:
8a:67:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:22 2026 by rpki-client