
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier: WqGxm9AlLd+w85HDYVj3ItoeBo7foWOYSVaFOgx9hpM=
Subject key identifier: 02:B8:FF:D9:05:3B:67:EE:D9:6D:96:22:CB:B5:2D:FB:36:77:94:2F
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number: 0C18
Signing time: Sun 20 Sep 2026 18:47:52 +0000
Manifest this update: Sun 20 Sep 2026 18:47:51 +0000
Manifest next update: Sun 27 Sep 2026 18:47:51 +0000
Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: 8CC7X+6GKauTq33pWs3ykas1sYtTzbRlaGW4vuV+DYY=)
2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: ZiiZYbmkg3n6zqgPw8ZXM9niSF2z+ejf3luh9TSJfQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Validity
Not Before: Sep 20 18:47:51 2026 GMT
Not After : Sep 27 18:47:51 2026 GMT
Subject: CN=6ab02a58-7de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:ba:9e:a9:ea:b9:e0:40:1c:28:8a:72:c0:
b3:80:26:b8:69:ff:bc:1a:24:24:25:e1:ca:e4:33:
2b:2f:ba:50:49:1c:24:97:72:47:06:98:c7:46:6a:
8c:92:fa:ad:87:9f:78:b1:82:8a:4c:5f:86:d0:de:
dd:dc:cf:d5:78:41:02:cc:84:65:f8:f6:dc:f8:11:
bc:bd:99:e3:2c:f9:56:eb:02:0a:e2:4f:06:1d:5f:
ed:de:f1:db:73:03:8f:c5:4e:fe:ee:f2:26:16:6a:
94:7b:f7:2e:8d:b7:7a:f1:28:9d:d9:f1:04:a6:c6:
3c:b2:57:7b:bb:3c:4e:b3:2c:8e:7e:42:5d:bd:51:
6b:50:60:a6:44:b8:d1:7c:85:15:4e:c3:e6:e1:2d:
94:f8:ca:72:a1:82:3c:1c:e3:66:ef:05:c8:d4:e6:
10:fd:95:6b:0a:47:51:6f:c7:71:13:cb:8e:91:d5:
b6:9f:06:df:72:ee:eb:e8:6b:10:7f:c6:40:40:fd:
b4:f5:ba:b0:07:6d:8e:1c:12:5a:52:2c:b6:46:4f:
fe:e0:7e:70:bd:77:72:d6:10:5a:92:d0:82:f7:6d:
41:2e:35:4d:33:22:cf:f8:e9:cb:25:b9:19:e4:35:
58:38:1a:58:71:9d:b1:ba:f7:48:dc:b7:be:8a:08:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:FF:D9:05:3B:67:EE:D9:6D:96:22:CB:B5:2D:FB:36:77:94:2F
X509v3 Authority Key Identifier:
keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:14:c8:d4:8b:27:b5:c4:36:ad:64:2d:1b:e1:0a:76:39:
4c:1d:8b:e9:c3:4a:d8:f4:5e:71:79:04:d2:12:d3:df:c8:eb:
b0:5e:a1:6e:08:74:12:2b:a5:8d:34:33:71:f9:5b:c2:74:23:
63:43:a0:87:04:07:ae:97:e9:0d:92:38:a4:f6:cf:cc:a4:0f:
d1:96:42:fb:e1:96:e4:ea:42:1b:c1:94:32:e8:13:74:f5:fd:
fc:ab:44:0b:d5:ba:ba:74:d3:76:2d:4b:c7:55:0e:8d:8d:7a:
a4:0d:d7:f7:12:e7:5e:53:82:6d:9d:aa:c5:27:10:f9:05:47:
6d:81:e8:f4:3a:ef:f9:75:9f:89:75:ec:6f:00:43:4d:0c:6d:
3b:5a:d0:d4:f3:64:c8:70:25:e8:9f:e5:c5:45:83:ea:93:49:
92:21:06:e5:bc:ab:d9:d3:58:64:d6:32:99:26:92:e8:11:87:
bc:67:1f:f8:6c:d9:98:64:9e:cf:6e:90:67:d7:3f:61:e7:5b:
46:ff:0e:31:3c:95:bf:19:81:40:73:96:f7:d0:9e:3f:f5:9d:
9e:80:eb:77:6f:41:56:be:2e:1f:ff:03:70:6d:85:b9:5c:96:
af:d1:55:fc:05:f3:8d:4a:1c:22:26:85:a3:cb:46:df:ec:8b:
e2:ff:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:58:27 2026 by rpki-client