
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json)
Hash identifier: KrzUrfWI0jKN/8LUR7T1ejULWfi4Hy2etCiBa/1O4NU=
Subject key identifier: 46:70:FF:53:A3:3D:56:21:63:56:9C:C8:CC:88:E2:6B:A0:DD:D4:AA
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial: 247D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
Manifest number: 2469
Signing time: Mon 02 Mar 2026 01:32:36 +0000
Manifest this update: Mon 02 Mar 2026 01:32:34 +0000
Manifest next update: Mon 09 Mar 2026 01:32:34 +0000
Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: IbsUrLlxj0lnIG1J2DyJHD+IXNhs4Mfs9xVjmUvO6KI=)
2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: a3sXsdVgG1aczhVzJi7/Rf+WzCpYYZ6XbQ0iWZCw3CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9341 (0x247d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Validity
Not Before: Mar 2 01:32:34 2026 GMT
Not After : Mar 9 01:32:34 2026 GMT
Subject: CN=69a4e8b3-8a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:11:9e:14:01:b8:59:86:d2:d5:25:54:a7:
87:07:b2:ec:14:eb:b9:3e:12:53:6d:9d:77:0a:4a:
be:5a:95:bc:ca:08:e8:d8:7a:b2:83:84:c5:e8:71:
24:5a:09:69:16:1d:29:9d:45:93:d2:45:53:0d:e5:
5c:de:c1:5b:f9:d1:c6:62:02:33:f0:fe:c6:f2:b7:
40:72:28:d1:a6:d9:24:3a:68:9d:d3:86:5e:e9:06:
f7:b2:4f:0e:0d:9a:a5:e1:77:60:3b:66:0f:41:2e:
a7:3b:47:5d:bd:92:d3:5b:97:60:6f:b4:27:4d:06:
c4:ed:dd:6f:6d:a6:3e:59:d0:22:b9:4a:9c:6a:d1:
a1:90:ca:c2:0a:29:27:c0:1f:80:46:ae:f7:44:fd:
a5:a7:e7:0a:d9:7e:2e:1d:df:82:83:91:90:ef:03:
8e:b8:82:74:a5:c4:3b:3d:3e:c0:bb:7c:cd:c1:be:
4b:90:6b:00:77:90:dc:23:1a:35:93:77:e4:ee:00:
2e:a9:69:e0:44:42:02:33:0e:66:96:09:00:44:e7:
9b:ee:e0:b1:10:40:74:ce:7e:71:55:11:23:d0:ae:
9c:1d:c6:92:21:f6:e1:2a:d6:30:5c:5e:91:fe:cc:
a5:fc:85:74:13:a9:66:9f:72:3f:da:4a:d2:fc:d8:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:FF:53:A3:3D:56:21:63:56:9C:C8:CC:88:E2:6B:A0:DD:D4:AA
X509v3 Authority Key Identifier:
keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:95:80:c1:a5:e1:96:2e:73:55:22:a6:9a:54:3e:7c:cd:eb:
2a:55:0d:8c:e6:e9:34:bc:7f:4d:e9:22:89:e7:0f:58:d2:54:
d8:1d:6f:31:53:16:6d:95:27:f0:2c:ba:a4:03:20:7b:b5:54:
23:87:1a:01:7e:bc:15:34:79:d5:f0:a7:bc:a8:66:68:fc:98:
56:17:b7:77:8f:74:0d:75:73:98:b1:e1:df:51:b0:17:ca:c4:
15:d8:b0:fc:4c:b3:88:dd:7a:9c:fd:c7:a5:88:be:9e:77:86:
76:50:e8:f8:91:dc:76:30:94:0e:0f:ed:ff:63:67:b4:51:98:
fa:40:cd:c3:f6:48:83:52:47:6e:64:da:38:52:0c:10:96:26:
1e:ef:eb:d9:c1:d4:d7:bc:60:1a:31:ef:ff:4c:f4:fa:16:ed:
b9:ce:ed:8e:e9:52:7e:2f:92:ac:3a:d2:a1:a0:3d:43:9d:9a:
b4:5e:65:4c:78:7c:00:8c:4d:34:d1:1a:32:23:07:bd:fd:f8:
b9:c7:4e:e6:a7:74:33:2f:c6:97:4a:81:f9:ab:b6:5c:23:6b:
1a:8c:c8:bf:0d:ed:a5:8f:2c:32:fa:d4:54:01:b9:d9:20:92:
2f:81:66:93:1f:55:a6:5d:e1:8e:cf:5a:6b:40:79:4b:1a:10:
49:7b:18:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0
NUNDNjdGQTQwHhcNMjYwMzAyMDEzMjM0WhcNMjYwMzA5MDEzMjM0WjAYMRYwFAYD
VQQDEw02OWE0ZThiMy04YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xIRnhQBuFmG0tUlVKeHB7LsFOu5PhJTbZ13Ckq+WpW8ygjo2Hqyg4TF6HEk
WglpFh0pnUWT0kVTDeVc3sFb+dHGYgIz8P7G8rdAcijRptkkOmid04Ze6Qb3sk8O
DZql4XdgO2YPQS6nO0ddvZLTW5dgb7QnTQbE7d1vbaY+WdAiuUqcatGhkMrCCikn
wB+ARq73RP2lp+cK2X4uHd+Cg5GQ7wOOuIJ0pcQ7PT7Au3zNwb5LkGsAd5DcIxo1
k3fk7gAuqWngREICMw5mlgkAROeb7uCxEEB0zn5xVREj0K6cHcaSIfbhKtYwXF6R
/syl/IV0E6lmn3I/2krS/NireQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZw/1Oj
PVYhY1acyMyI4mug3dSqMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3
NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs
RV9kcGk4MmgyanhGekdmNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1pWAwaXhli5zVSKmmlQ+fM3rKlUNjObpNLx/TekiiecPWNJU2B1vMVMWbZUn
8Cy6pAMge7VUI4caAX68FTR51fCnvKhmaPyYVhe3d490DXVzmLHh31GwF8rEFdiw
/EyziN16nP3HpYi+nneGdlDo+JHcdjCUDg/t/2NntFGY+kDNw/ZIg1JHbmTaOFIM
EJYmHu/r2cHU17xgGjHv/0z0+hbtuc7tjulSfi+SrDrSoaA9Q52atF5lTHh8AIxN
NNEaMiMHvf34ucdO5qd0My/Gl0qB+au2XCNrGozIvw3tpY8sMvrUVAG52SCSL4Fm
kx9Vpl3hjs9aa0B5SxoQSXsY1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:39 2026 by rpki-client