
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json)
Hash identifier: rGLeC5WHyrlISoUEsRUbyxtoiSScYx5W/OTfjJ9A1rg=
Subject key identifier: 28:F2:BF:D7:99:86:49:16:C3:9F:AF:46:9F:0F:54:4B:AD:8A:F6:AF
Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D
Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
Manifest number: C6
Signing time: Wed 23 Sep 2026 06:39:10 +0000
Manifest this update: Wed 23 Sep 2026 06:39:10 +0000
Manifest next update: Wed 30 Sep 2026 06:39:10 +0000
Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: tMg/hq0LkjAeGgmQzJmuW30qVZ7SzpbHw8Yuu4T52S0=)
2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: Yhm7+m6I9lWu4bRq4rLXmeSCG3dRSGkgkhbHl5g6RH0=)
3: 3FC9B39A85F311F1B9F14C6174A30FBC.roa (hash: qJ2bVAouoKIVfVIofWHiZscX7T1VX94hLapNol1xSzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl
rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D
Validity
Not Before: Sep 23 06:39:10 2026 GMT
Not After : Sep 30 06:39:10 2026 GMT
Subject: CN=6ab3740e-58fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:c7:8b:14:49:17:d3:78:53:63:40:ac:3e:
e4:8d:62:88:8d:a0:43:d9:16:08:ef:5d:a2:08:ca:
1e:54:5a:e6:3c:21:2f:2f:7b:ef:5c:13:a0:4c:ca:
88:b2:50:fa:b9:1f:d2:07:0a:24:38:a8:93:32:53:
52:68:8a:44:bf:43:54:e0:6a:76:35:76:05:c0:53:
ef:38:98:38:35:63:e2:b7:c5:0c:4b:55:2a:eb:39:
d2:6f:e2:f4:b4:38:80:4a:f5:dd:f8:33:55:91:b3:
55:e8:dc:90:0a:ca:86:01:18:cb:7f:f2:5f:f6:1c:
f3:1d:29:3b:0f:16:a3:27:ce:90:59:c1:96:b8:5a:
96:ae:60:6d:e1:53:a8:d6:ab:c7:73:7d:a1:7c:5c:
f1:0c:2a:5c:e1:0e:28:c8:c6:1a:f6:83:86:ec:58:
87:bf:9f:bf:33:48:14:76:65:24:8d:85:97:93:77:
06:68:e8:d6:93:d8:65:63:fd:d9:39:94:3c:f8:08:
f9:0e:3f:db:4c:0e:f1:e2:84:d2:3c:b1:13:07:4a:
08:a6:0a:06:62:09:a9:d2:e4:b9:e4:96:cf:5b:0f:
de:1a:84:d0:83:8f:ae:aa:4b:97:8d:6b:43:12:72:
73:0e:c0:e7:fa:13:77:8c:b5:1f:a5:55:72:36:15:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F2:BF:D7:99:86:49:16:C3:9F:AF:46:9F:0F:54:4B:AD:8A:F6:AF
X509v3 Authority Key Identifier:
keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:8e:da:49:73:d6:22:22:af:1a:d0:5f:55:53:16:ad:ff:55:
4d:0a:d6:d5:74:0f:93:c3:24:68:0f:dd:2b:39:94:19:07:f9:
c7:2d:81:45:cf:e9:51:5d:78:1a:4a:40:e5:5d:a1:13:76:c1:
97:6b:54:6e:5c:47:aa:94:67:da:f5:bf:a7:de:d2:24:1f:56:
3d:81:81:73:12:64:1f:50:aa:ff:fa:65:50:fc:d6:2e:9a:44:
51:a1:7f:be:32:0a:fa:c5:2e:bd:3f:e3:c9:7a:dd:66:12:1d:
99:2b:68:69:ba:c2:e0:a6:71:5c:a1:f8:78:75:49:6a:19:f1:
9f:c5:07:cc:1e:a2:03:f3:7b:17:da:2d:0c:3d:a2:84:bb:6e:
7f:7d:ce:fb:8c:34:84:36:f8:cf:b0:dd:17:ef:a0:a2:e6:cd:
e0:4a:2c:53:10:a4:e6:ac:2c:45:39:e6:11:46:6c:99:b7:bd:
16:9c:07:df:79:e9:2a:72:aa:f9:d1:89:16:3c:f6:a0:55:51:
87:97:3c:f7:38:62:20:4a:02:6d:86:85:d1:e7:d4:c4:1c:ab:
97:ae:cb:f8:39:46:1d:95:76:15:6a:db:ce:65:7d:b2:72:af:
ce:ad:78:ca:ed:0e:9c:03:ce:d4:59:8b:d2:4a:0f:be:2a:2e:
7c:ba:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:17 2026 by rpki-client