
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier: yfBicE2TBcslW4Pz4Utko1B36wxZA4fNxttSivPkmPI=
Subject key identifier: 78:F3:22:F7:0E:B0:2B:86:45:76:F3:07:04:F8:08:1F:95:40:FC:15
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial: 16F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number: 16DD
Signing time: Fri 12 Jun 2026 16:38:52 +0000
Manifest this update: Fri 12 Jun 2026 16:38:52 +0000
Manifest next update: Fri 19 Jun 2026 16:38:52 +0000
Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: PJeqdI6X9pbIDVfKtUjS3TJD/JPl1f4uHH4QGzbpSMw=)
2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5877 (0x16f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Validity
Not Before: Jun 12 16:38:52 2026 GMT
Not After : Jun 19 16:38:52 2026 GMT
Subject: CN=6a2c361c-3fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:b6:3a:3e:68:63:30:70:d9:a2:6b:ba:f3:
b5:e5:81:f8:dc:ab:c8:78:1a:ee:aa:79:c0:9b:f0:
f1:de:b5:e1:2c:97:e9:d3:4b:06:0f:30:53:ac:e2:
30:0d:67:b9:58:e8:3d:6e:3e:c9:71:5c:f5:11:5a:
f0:ce:b9:88:d4:de:eb:32:ed:61:93:fa:ff:da:50:
50:80:5c:ca:6d:bc:8a:20:b0:df:0c:2e:bb:e0:a2:
39:bf:71:fd:b6:4d:cf:67:2c:9c:c5:72:bf:9f:d0:
a7:92:16:bb:93:e0:f2:b0:7e:72:14:16:92:de:af:
f4:ed:b9:59:7f:39:86:51:f7:6f:a8:0b:c2:54:a1:
80:a6:86:47:52:9d:e0:ef:26:d0:57:3e:17:01:76:
2a:88:63:59:73:3b:33:f3:a0:5f:b1:a7:7d:6f:78:
eb:42:c0:58:3d:86:24:a6:cd:5c:de:5f:bb:af:32:
a0:51:ed:be:2f:cb:34:58:77:d4:8e:d3:98:f1:8f:
e8:df:68:5a:6c:cd:c6:0b:ef:4c:86:99:49:aa:16:
e8:a8:3a:4e:a3:1e:97:70:b1:29:5d:21:55:d1:61:
8b:1f:a5:5f:e4:61:61:64:a1:ea:90:f3:e4:5d:d1:
5b:cc:82:75:c6:0c:df:d5:5c:26:26:f2:7b:17:96:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:22:F7:0E:B0:2B:86:45:76:F3:07:04:F8:08:1F:95:40:FC:15
X509v3 Authority Key Identifier:
keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:e2:2d:72:fa:3b:f0:6d:c0:90:6d:cf:0f:8c:af:ec:06:
80:17:d4:de:5a:0b:d6:9c:34:9b:29:4a:35:a0:a5:9b:8f:c4:
0b:98:35:3f:bb:b2:52:6f:8d:e7:2a:ca:ca:d4:89:48:64:64:
9b:76:f4:f6:1b:2e:39:8d:90:aa:b6:48:d5:f1:a7:9a:fe:7f:
21:e7:35:b8:4a:30:26:a8:87:98:80:3a:c9:84:04:4c:41:c8:
2e:8e:b4:36:29:b5:03:7e:84:2d:0e:c8:2e:62:2b:11:11:88:
6a:e9:2e:f8:82:fb:f3:da:7a:ff:13:39:1b:7e:9f:88:aa:55:
37:20:d8:9f:32:b1:f8:57:6b:0a:e7:c5:2b:28:c4:0d:20:50:
70:c1:32:66:09:d2:c0:8d:54:71:53:8a:b5:bb:9b:66:9d:02:
30:eb:ff:c1:a6:53:93:41:c0:dd:84:31:69:ba:95:ec:21:20:
6a:bf:bb:eb:04:25:bd:61:0c:5a:2f:fa:ea:18:8a:3e:6a:af:
0e:26:db:dd:e6:4b:59:55:f9:f3:b7:8c:40:68:3c:b3:51:39:
65:70:44:43:ab:6e:d8:ff:51:de:28:4d:15:5c:e9:4f:9f:b8:
9b:83:c1:61:ec:e3:86:7f:5d:8b:7d:b8:fd:4a:77:54:e7:04:
33:13:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:18 2026 by rpki-client