
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier: r+dOk5VVQd+eyzzsDdzhaTvd3hRGT/et14oQpyTFsNY=
Subject key identifier: 8C:83:F3:D9:5D:2A:A4:36:B6:6C:BF:A4:57:33:38:9C:CF:17:C4:09
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer: /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:22:20 +0000
Manifest this update: Fri 17 Apr 2026 08:22:20 +0000
Manifest next update: Fri 24 Apr 2026 08:22:20 +0000
Files and hashes: 1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: QCJQPZqTMO+vMkNNh5tpFZKzMhPqm1h8RZMKnZWp3+o=)
2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: k8QEl3i1mj0JdrQoFekMU1jbFfjtjnZk+vYtYEngXQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Validity
Not Before: Apr 17 08:22:20 2026 GMT
Not After : Apr 24 08:22:20 2026 GMT
Subject: CN=69e1edbc-46d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:79:14:30:7b:4b:ed:93:d8:f0:6e:97:17:
bb:39:12:aa:c7:69:be:48:51:0e:e5:2a:e7:d2:da:
b9:24:c7:6f:52:c2:f1:80:ba:06:db:86:a3:aa:83:
88:22:39:89:81:ef:a9:12:6e:1c:c8:63:fa:70:af:
a9:35:b0:1e:15:cc:fd:85:14:6f:b4:6a:8a:94:44:
ca:af:34:a4:cb:9f:e7:70:b4:4d:95:7a:1a:fb:1d:
b4:e9:a7:a4:70:09:48:4a:41:e5:f0:99:14:5e:a6:
47:de:6c:c1:bc:8f:8c:2b:65:76:bd:f9:97:8e:e9:
82:82:7b:dd:d6:69:98:b0:d9:b7:95:94:33:98:38:
d5:03:fa:dc:47:8f:d0:ce:db:d7:bf:5a:3f:b3:ad:
c2:b9:5b:97:3d:83:2c:f7:45:bd:a2:a7:0c:b7:17:
2d:38:87:37:1c:a9:53:94:71:04:2f:36:10:2e:0c:
d5:2b:c0:fc:68:10:37:01:9c:db:cf:fa:e1:5f:56:
52:9b:62:1a:32:97:d1:11:08:6c:ab:76:ff:23:d7:
61:81:ef:7d:47:60:c1:72:32:09:b9:13:ff:16:5a:
9c:f5:e3:f5:a1:66:dc:be:5d:43:a7:11:ee:6b:ba:
89:97:79:14:99:ea:43:ca:5c:36:de:36:7e:a5:1d:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:F3:D9:5D:2A:A4:36:B6:6C:BF:A4:57:33:38:9C:CF:17:C4:09
X509v3 Authority Key Identifier:
keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:92:49:c9:64:e0:f1:68:03:41:e5:d5:97:7a:86:17:97:
59:bb:af:1b:41:36:4a:00:be:c4:b6:71:74:48:a2:24:1d:0c:
cc:44:8b:20:41:35:34:47:bf:cb:37:bc:28:6c:9d:45:28:e7:
b6:d5:7b:5c:f4:3c:d5:19:7b:11:ec:b2:48:c6:72:0c:8c:e0:
34:af:f5:59:14:2d:c0:5f:2e:32:fe:77:5c:70:87:22:83:b5:
64:46:8e:54:0a:1d:70:22:1e:f9:c0:cd:3a:2d:13:1a:48:5b:
ff:3b:a0:82:c2:e6:66:cd:06:85:94:71:7d:c5:4a:ab:33:69:
e9:2a:b6:9a:58:61:ef:4e:34:70:3a:c0:e6:c7:c9:a4:e9:dc:
f9:5b:f8:25:38:92:2f:34:57:5c:d0:14:17:a4:cf:a9:cc:98:
a7:62:bc:4c:bb:50:04:31:5a:aa:72:5f:0b:a5:4e:27:88:96:
33:20:05:23:4b:8b:4b:60:22:da:30:07:d7:39:7c:7d:d5:4e:
85:4f:77:5c:cc:6d:cd:fd:6d:7c:ca:47:ed:0f:7f:a9:6f:b4:
19:b6:38:9a:c3:6d:0d:40:2f:04:04:c2:03:6a:8e:80:24:5e:
84:c1:99:ac:0f:b6:09:0b:4d:4c:4b:bd:55:e6:86:0d:a9:bf:
4c:25:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:23 2026 by rpki-client