
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: hHjA+Q3sIx+U+QlLLzNVxwavmYjX/WI4BjV0is8S7M4=
Subject key identifier: 46:44:84:60:A3:AC:51:34:64:E3:5B:EB:B7:17:4B:20:A3:77:88:C9
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 01E0
Signing time: Mon 27 Jul 2026 05:13:03 +0000
Manifest this update: Mon 27 Jul 2026 05:13:02 +0000
Manifest next update: Mon 03 Aug 2026 05:13:02 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: lsvJ9tQIuA4GlH7lu6CXLjQ2/hl57NqFHMlciZDD5C4=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: Jul 27 05:13:02 2026 GMT
Not After : Aug 3 05:13:02 2026 GMT
Subject: CN=6a66e8df-44ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:4c:37:3f:2e:91:39:10:f3:2e:e1:71:6f:
ec:5f:5a:e0:fd:aa:8c:12:13:cb:49:ad:d1:eb:33:
35:8d:62:be:1a:90:58:cd:20:04:3e:b3:67:8c:8a:
18:48:43:f9:39:de:7f:07:cb:0c:c5:10:5a:44:8e:
fe:7d:3b:27:15:c0:88:3e:16:8f:f7:bc:1d:73:7f:
02:80:3d:4a:75:42:10:48:56:51:29:85:15:16:3e:
1e:ec:01:c5:2d:52:d8:3c:1e:84:fd:c3:37:90:5d:
b6:f0:66:32:df:b0:47:36:91:66:0a:c5:e0:de:62:
25:93:7d:5c:eb:12:5d:d6:75:f6:68:0f:fe:fb:0d:
7f:e9:6e:d2:16:29:60:83:e5:7a:d0:23:26:6f:6b:
57:d8:b3:2c:f4:8f:9f:48:b6:f0:24:e5:3c:c4:d1:
92:7f:7f:75:1a:44:6d:ee:c0:fe:7a:00:b4:53:f3:
80:65:a3:b0:d1:2a:a0:6b:4e:e8:62:7e:70:66:1d:
30:9f:65:e3:71:91:9b:ba:b4:d9:7c:0d:06:ed:6a:
d4:c6:74:65:e1:7c:90:8c:ce:a6:62:5a:b5:e1:15:
2a:c5:54:2f:76:5c:03:f3:86:ce:79:26:07:f3:54:
df:55:10:22:34:42:d4:ff:9b:59:28:de:86:a9:de:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:84:60:A3:AC:51:34:64:E3:5B:EB:B7:17:4B:20:A3:77:88:C9
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c0:b2:f4:53:a3:6e:fb:6f:d4:ee:31:5b:14:4f:38:82:cc:
4e:de:0d:4c:d4:50:c0:dc:30:65:38:55:f5:c1:39:3c:dc:36:
78:d3:3f:4b:36:29:6c:1d:c0:de:a4:fe:51:1a:a5:06:3c:b7:
e4:bb:9d:53:3d:60:39:87:e4:19:5e:c1:be:8f:41:68:c6:5e:
99:79:21:7e:2e:5c:4c:9a:0f:eb:66:99:ae:ab:ac:58:75:ca:
fe:72:bd:24:63:e4:17:c5:c2:7f:4c:ae:19:40:2f:a2:e4:fc:
db:4f:3f:c3:39:c7:87:9d:6b:32:75:0c:3d:f4:ad:67:80:d2:
ef:ac:a1:4f:10:ac:cb:55:88:e1:ca:8a:ed:3f:51:fa:cf:8f:
55:71:df:2c:00:5c:f5:8c:e3:f6:85:92:b5:a5:e5:e5:2b:4b:
56:dd:ed:7c:3b:3a:98:1d:73:56:8c:83:ea:53:ed:76:f6:97:
d4:9f:a4:be:5a:17:47:f6:82:ac:78:12:06:46:a0:c4:18:c4:
d9:4c:2d:bc:49:02:9a:10:05:83:eb:b0:33:2e:1d:00:44:0b:
18:44:67:0b:bb:06:d4:b1:ac:02:10:7a:e0:84:27:5b:0e:4f:
a7:7d:e6:56:82:e1:5e:07:3d:2f:de:43:f3:b2:49:cc:1a:cf:
e0:52:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:40 2026 by rpki-client