
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier: ILa+cBYo1MRp7Ek8oul38e+k1Yk76i1DNBCNauCXHrM=
Subject key identifier: F3:FE:0C:43:52:95:BC:FD:2D:F3:A4:00:1A:96:EB:2A:0A:7B:19:48
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer: /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number: 86
Signing time: Mon 21 Sep 2026 07:43:00 +0000
Manifest this update: Mon 21 Sep 2026 07:42:59 +0000
Manifest next update: Mon 28 Sep 2026 07:42:59 +0000
Files and hashes: 1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: XgECV/DGJUBjjZmRGYhS+YuMcPIt0z83SmHVY8O9pEw=)
2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: k8QEl3i1mj0JdrQoFekMU1jbFfjtjnZk+vYtYEngXQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Validity
Not Before: Sep 21 07:42:59 2026 GMT
Not After : Sep 28 07:42:59 2026 GMT
Subject: CN=6ab0e004-5f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:b3:16:27:70:92:04:38:29:b4:cd:b8:e0:
e0:00:56:b3:89:6c:f6:90:9e:46:15:fd:6b:a5:44:
84:49:3e:e0:5e:f5:63:4f:4e:5f:31:bd:bb:54:ac:
ed:b2:d2:66:05:aa:ab:4f:e0:93:fc:c7:96:ff:1c:
01:35:c1:1e:05:12:24:90:73:9c:91:ff:c8:ae:c4:
95:b0:67:e3:ed:04:9f:16:ef:66:76:77:0a:e2:b7:
63:89:49:6e:e3:8c:a0:2f:28:3c:6e:b6:c8:3e:5c:
21:49:6d:5f:c7:49:01:9d:28:d9:8d:03:4b:7c:a8:
af:ee:d4:21:ab:d5:06:02:ee:ae:3e:61:e1:c6:5a:
04:43:3e:05:33:b9:ce:e7:97:e8:6a:d9:ae:66:1a:
64:ab:82:3a:46:ae:26:3f:fa:77:09:0f:bc:6a:a2:
ee:ff:72:ea:d0:b6:9e:32:60:cc:2d:a9:a3:7d:aa:
78:e4:7b:e2:fc:4e:e3:f7:ad:66:8a:15:6c:03:09:
63:91:2a:1d:d6:5f:72:31:b3:16:77:59:e1:49:6d:
a3:a9:25:7a:14:ae:e6:e0:1b:a4:18:79:1b:99:e8:
0d:a2:8e:ff:45:4d:90:4f:ce:d1:0f:6e:1f:54:80:
ac:f7:ce:d2:37:9a:6f:ba:77:78:b0:8e:2d:ee:fb:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:0C:43:52:95:BC:FD:2D:F3:A4:00:1A:96:EB:2A:0A:7B:19:48
X509v3 Authority Key Identifier:
keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7f:0d:6d:b5:ca:09:db:c0:fd:93:ff:06:b9:af:2f:e1:a9:
ef:34:62:ba:77:00:41:bd:36:ef:50:ce:5c:b3:37:6c:d0:3e:
60:8a:42:34:33:9d:ee:94:5b:51:24:ab:75:99:6a:d9:ed:65:
a4:b1:14:20:f9:bf:5e:07:48:ca:e1:d7:b9:2e:ce:e1:01:75:
82:d7:70:fc:12:6a:03:52:fc:ab:14:3d:9b:d3:84:49:8e:1b:
14:df:5f:26:98:ea:27:82:5d:a6:95:b8:ca:bb:86:5b:e8:15:
d5:ac:48:37:8a:40:16:85:dc:20:44:d6:41:ad:c9:18:1d:dc:
04:9b:7a:89:12:53:34:42:f8:4e:26:e4:0d:67:44:45:94:4e:
77:c5:26:70:3c:c8:85:23:ca:e0:77:c6:09:2f:51:47:ef:cf:
ea:b9:55:11:69:3f:95:59:12:2f:7f:96:18:38:75:b3:dd:a7:
cd:86:87:74:39:60:1a:1b:c0:ce:5d:2c:fe:fb:76:14:d7:b1:
b8:38:e7:53:68:95:3d:ac:0d:4e:35:08:6f:0c:0d:c2:6f:34:
5b:d6:2c:b4:33:f1:70:41:57:a4:a5:f7:bd:a0:3c:43:a6:ad:
e6:1b:36:94:bc:ef:55:2a:99:6c:ce:fd:20:f1:fe:62:07:29:
24:8e:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:39 2026 by rpki-client