
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json)
Hash identifier: /MWAHylPf0czVwLafktpO8fPYG9YMYIjhkEHTZqdqQQ=
Subject key identifier: 9F:AC:E5:8E:09:F1:2B:C3:60:94:59:C9:03:40:EE:DE:0C:6F:F3:5A
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
Manifest number: 0832
Signing time: Sun 08 Nov 2026 21:05:03 +0000
Manifest this update: Sun 08 Nov 2026 21:05:03 +0000
Manifest next update: Sun 15 Nov 2026 21:05:03 +0000
Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: jQOqWCvXbNO7HrK+tyW5bsd7Pb5y46FJ/zPewWWqPPQ=)
2: D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa (hash: L1BQlodbLjWzbDTDZTd+cJJ3MiEG96Az6Cag05j+tjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Validity
Not Before: Nov 8 21:05:03 2026 GMT
Not After : Nov 15 21:05:03 2026 GMT
Subject: CN=6af0e3ff-c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:c4:d5:b4:d3:8c:6a:48:71:83:ca:c7:1a:
c9:0c:3a:8d:f4:dc:4b:b3:8d:07:e1:f8:26:1e:c1:
b2:f7:56:f3:e6:88:50:bc:2a:fd:92:11:f3:2d:e4:
65:64:bf:49:6d:7f:bc:3c:58:c6:2e:11:62:21:02:
e1:9b:56:1b:e4:56:b3:cc:5b:80:a6:1f:b4:c3:90:
7b:e3:97:0b:bb:c8:32:19:2a:e0:03:ae:58:63:95:
29:37:29:e7:3b:81:ad:55:34:c8:4b:0e:5e:75:21:
ad:00:f0:88:bd:fb:65:6d:6d:38:ed:62:86:3e:df:
21:1c:65:11:f8:4e:7c:6e:63:87:cf:5f:88:3f:18:
a0:94:c3:33:59:cb:21:6c:b8:e1:2c:e2:40:f6:90:
64:e3:26:a0:06:8d:8b:5f:16:2d:2a:2d:5e:25:1b:
ef:43:30:2d:cd:b9:82:ad:91:b7:2d:ae:dd:27:d1:
49:62:f2:e2:96:cb:20:c8:fa:a9:98:fa:ac:e3:00:
57:c3:bc:f4:1c:3e:fe:bc:93:c9:c5:eb:09:4e:14:
40:00:0b:7c:c9:f1:29:e2:52:86:be:8f:8c:c4:f3:
75:a2:12:1b:1b:b0:2a:8e:e1:95:db:a9:2a:68:84:
ca:11:0a:ef:f6:5b:a2:98:0d:81:e1:25:c1:2a:d2:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:E5:8E:09:F1:2B:C3:60:94:59:C9:03:40:EE:DE:0C:6F:F3:5A
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:40:23:8e:50:76:8c:ce:cc:1a:30:d1:54:ae:b5:42:46:00:
4d:ba:1a:15:13:85:f1:40:0e:61:8b:58:fb:41:30:c6:a0:f8:
a2:38:21:d5:5b:aa:86:a9:26:77:12:79:8a:c3:82:51:81:c8:
0e:77:95:20:48:70:b5:95:6e:85:98:a7:ed:23:9e:89:13:be:
6d:c0:85:18:e0:04:5e:ad:20:c5:ac:86:97:7b:cb:fb:98:a7:
bc:62:ad:9b:85:67:cf:43:e6:cd:ca:50:e1:76:39:be:32:df:
5c:5a:76:09:92:cd:19:ad:cd:3b:cb:f6:b9:ad:54:56:5a:f6:
67:47:9c:04:bb:33:ca:b9:58:ef:b9:5a:9b:a0:33:64:2d:03:
eb:8d:df:38:78:20:76:2c:2c:d1:2f:80:5a:d7:37:35:50:ad:
f7:d0:c7:d6:07:68:70:ff:3d:50:8e:fc:b3:04:e4:19:3c:27:
30:dc:e6:0f:6c:43:54:9a:46:94:95:a9:14:93:14:6e:35:51:
ac:14:31:71:f3:c3:04:c1:c1:13:54:d2:c1:a4:ad:57:70:28:
17:4f:ef:bb:ba:48:52:b5:82:9f:0b:07:87:96:22:ee:2a:ca:
54:35:73:33:e4:51:18:65:85:d6:51:90:74:23:dd:fc:f5:4b:
8b:87:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:09:02 2026 by rpki-client