
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft
File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json)
Hash identifier: 1CtjuKqYPVWCnPdNhs8NqgxvfZptYeu3WU3/m4gjQx4=
Subject key identifier: AD:B6:EE:3B:5D:E6:D1:38:D2:09:D6:AE:AF:03:B6:F1:F7:95:18:5C
Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD
Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft
Manifest number: BE
Signing time: Mon 27 Jul 2026 09:10:52 +0000
Manifest this update: Mon 27 Jul 2026 09:10:51 +0000
Manifest next update: Mon 03 Aug 2026 09:10:51 +0000
Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: MaCa7HB6fZrut6Uy7kpLJaZPBWIKCpR+koe7+KuquXQ=)
2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl
rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD
Validity
Not Before: Jul 27 09:10:51 2026 GMT
Not After : Aug 3 09:10:51 2026 GMT
Subject: CN=6a67209b-c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:ee:14:b4:ab:1e:81:ab:57:b5:91:fb:b9:
d5:6b:aa:3e:82:61:aa:cb:b2:02:a0:ed:ae:33:4d:
ad:8f:a4:c0:41:c2:71:a6:07:1c:6e:d1:ce:9e:2a:
67:42:10:04:0e:34:7c:4e:30:87:61:2d:65:98:cc:
e1:8b:2d:92:00:3e:c7:1f:c4:28:f5:86:83:87:f6:
35:60:f2:67:84:00:a8:aa:38:f3:4c:eb:17:34:ac:
88:c0:cc:64:68:35:70:9c:c1:cc:15:6b:14:f8:2b:
6e:f3:24:6e:b0:8a:93:36:5b:e4:64:e5:f9:7d:7a:
a3:b2:3e:c5:f7:86:02:47:67:ec:33:0e:45:3a:b6:
bf:5f:5a:29:88:4d:67:f1:cb:7e:a6:72:41:1f:40:
20:a1:3e:13:b3:35:bf:0f:d1:40:ea:ff:a1:59:3e:
2a:10:76:f2:7d:3b:db:f7:31:bf:c6:71:5c:00:99:
17:fb:31:d0:c7:ea:8b:8b:0a:2a:47:20:56:05:a3:
b5:59:6a:c3:e4:ec:21:84:39:82:44:da:e0:c7:50:
24:80:27:ac:22:b6:67:a6:6c:b7:05:78:6f:36:01:
a0:f6:cc:de:d0:f4:df:77:74:2d:c2:0f:f2:76:fa:
87:69:39:66:2d:ba:aa:08:5a:f0:6e:20:1f:b7:39:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:EE:3B:5D:E6:D1:38:D2:09:D6:AE:AF:03:B6:F1:F7:95:18:5C
X509v3 Authority Key Identifier:
keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:d4:b6:62:00:2d:88:70:bf:97:61:6f:66:d0:f3:e1:ba:
f5:e9:a2:5c:e4:87:57:4d:b3:6e:9d:65:b4:cf:d5:a2:ea:d5:
a2:26:ae:f8:76:75:c3:00:0e:4a:a6:d3:33:69:c8:e0:74:ed:
6b:a4:c5:e9:5c:d7:52:c8:6b:39:ef:f8:80:6d:a9:71:9d:10:
61:c0:8d:7e:4a:b9:10:3d:28:19:5e:da:50:a3:8a:40:08:f0:
1d:dc:07:6d:0a:4f:e3:ef:88:25:a9:a4:8e:ba:75:91:a4:bc:
25:b7:4d:c6:5d:56:b3:3e:15:02:b8:83:7d:44:f8:ad:04:87:
59:a6:9f:f6:04:ea:ab:d8:41:85:4e:63:86:fd:23:d9:8c:84:
cc:e4:25:e3:f4:de:8f:7a:fd:1b:91:68:1f:be:0a:31:aa:e5:
c4:0d:dc:72:41:58:9a:b9:a6:09:8f:35:c4:02:98:bb:cc:f2:
97:48:2c:f1:c4:a8:47:53:d6:ca:2a:4b:a3:39:51:90:15:4a:
f6:0b:c4:e2:85:1b:2d:88:d1:f9:87:4d:8e:ff:b3:85:db:62:
70:2a:38:30:01:1d:07:90:d2:21:7b:8c:96:6e:53:aa:03:67:
74:2a:1b:5d:3b:5c:35:6b:3c:80:c8:dc:4b:8f:63:f6:21:e4:
42:e5:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:10:21 2026 by rpki-client