
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json)
Hash identifier: l8+vWjjNuT0fcL6F3kSCdceDCjV6rJ9EZkSCXX3qDag=
Subject key identifier: 4A:FC:8D:A6:8D:65:98:F7:B5:44:0A:1A:11:B5:9E:9E:E8:FA:17:FB
Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
Manifest number: 8E
Signing time: Mon 27 Jul 2026 09:39:30 +0000
Manifest this update: Mon 27 Jul 2026 09:39:29 +0000
Manifest next update: Mon 03 Aug 2026 09:39:29 +0000
Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: Bpq4Oc1nbXH8bMEX3NZDPigc4cWpWb1M3/AIzZJH8eE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Validity
Not Before: Jul 27 09:39:29 2026 GMT
Not After : Aug 3 09:39:29 2026 GMT
Subject: CN=6a672752-49ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:80:9d:28:7a:15:78:bc:19:22:e0:01:78:
f2:6d:7c:7d:c2:7c:98:8f:46:36:63:3d:6a:0b:9b:
22:56:34:c8:68:af:86:0a:27:39:eb:c6:47:5a:60:
d3:0e:fd:47:fc:6b:ae:b5:4c:06:42:8c:c4:20:13:
0c:40:83:a1:aa:71:a5:b4:b6:79:4b:04:5c:24:54:
38:80:f7:23:4c:bf:0a:f3:f9:32:1e:b4:84:35:f0:
1d:56:eb:a8:db:f0:78:2e:99:2d:33:7f:54:b2:4c:
d6:51:f9:3a:c8:ae:8a:b8:e5:30:28:c4:7e:69:b4:
1a:8c:4e:61:b1:9b:45:2d:58:f1:eb:fb:f4:38:ed:
db:2a:21:6b:ed:71:2b:17:11:f2:86:7b:f7:ab:36:
75:a1:4c:87:05:4a:72:cc:c2:21:cd:de:11:4e:15:
ad:e7:fc:c4:3a:99:ad:d7:5f:f3:76:f9:05:db:1b:
65:5b:b8:bf:f4:b5:47:53:bf:57:67:0e:f9:d3:11:
50:26:98:7b:30:21:c8:8a:c2:77:d7:8f:8e:f5:0d:
a4:e2:7c:46:d8:fb:8a:93:ea:3a:d7:b1:ed:d4:62:
67:fc:48:3a:c0:a7:21:c6:92:f5:03:36:74:8b:79:
05:ef:80:c7:f3:9e:35:61:8d:f2:66:0e:9b:b2:80:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:8D:A6:8D:65:98:F7:B5:44:0A:1A:11:B5:9E:9E:E8:FA:17:FB
X509v3 Authority Key Identifier:
keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ec:00:62:b0:ce:89:dc:a6:60:21:0a:8c:e8:ca:0e:37:e8:
8e:ab:6c:ee:3b:61:21:36:08:72:a2:fb:46:25:63:22:8c:3a:
6f:f4:95:f7:71:9b:21:d8:66:29:b6:b9:e8:fa:c1:69:7c:29:
1c:08:91:71:29:de:7a:96:c5:01:bd:41:cf:66:f9:ee:8a:55:
28:d4:50:6d:c3:6e:28:8c:47:d6:74:6a:bf:a6:eb:f8:a2:b5:
64:5b:92:31:67:a3:b8:48:bc:aa:bd:07:f2:a9:70:75:fc:16:
62:f1:ca:b1:69:ef:df:26:a6:89:76:4f:7c:19:38:95:94:35:
c7:ac:cd:96:a0:c2:49:70:d1:46:d6:6e:28:41:08:1a:db:cc:
b3:17:f1:a9:ce:3e:13:f3:99:82:67:0f:2a:3b:8a:d0:47:bf:
16:90:a8:0f:b5:05:27:c8:65:88:9a:8e:64:dc:ae:37:fa:3a:
3c:58:c8:af:1b:d4:84:17:1a:98:f0:99:c7:7b:e8:8a:ea:48:
39:c3:68:71:45:8f:70:ae:7b:3a:2f:58:59:60:82:9f:00:ed:
63:78:c6:fb:38:ff:05:b7:c1:4b:bd:8d:25:d4:cc:41:5c:04:
34:80:fc:66:9f:47:f7:a8:8c:d2:66:84:1e:2d:bf:2f:b3:ab:
20:66:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:11 2026 by rpki-client