
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: PRMCVNsumn87iMvTL6sUSfwTBjIEv/8iolJQEsV1xps=
Subject key identifier: 21:9A:56:68:5A:94:79:24:18:0F:D9:6F:85:13:3E:1F:00:0D:D4:6E
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 01CA
Signing time: Sat 13 Jun 2026 03:49:07 +0000
Manifest this update: Sat 13 Jun 2026 03:49:07 +0000
Manifest next update: Sat 20 Jun 2026 03:49:07 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: xyW/kJBgHZZjOOHXNjy9OzXSi+wlH/0HZWr38/xp8/M=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: Jun 13 03:49:07 2026 GMT
Not After : Jun 20 03:49:07 2026 GMT
Subject: CN=6a2cd333-388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:b7:60:05:c4:f3:4a:1f:ab:b5:86:f3:b0:
8b:5a:e5:90:ae:d1:c3:5c:0b:44:27:52:92:1c:3d:
1a:f4:9e:45:12:9a:4b:28:1a:ff:3c:91:6a:1b:78:
c2:c0:23:07:2c:56:5e:85:95:24:80:ab:90:1b:9d:
0d:bf:ef:06:aa:55:ae:3f:12:df:70:78:d5:cb:93:
14:e3:18:22:ea:86:51:b4:8f:5f:df:77:b7:ce:38:
5c:33:21:a6:aa:58:a6:68:6f:68:d6:9a:05:d6:0b:
b6:7c:db:81:ec:25:6e:d2:82:0d:2f:40:88:5f:2e:
a5:62:d2:61:61:d7:a6:3c:06:9b:91:33:0e:fb:b4:
47:b3:69:ec:eb:65:06:a9:70:5c:8b:f3:c3:e3:df:
20:f3:8e:4e:b1:0d:62:5a:63:0a:e5:d9:33:f0:42:
a5:f7:2c:37:35:1f:d1:01:bc:4b:34:6d:05:80:56:
79:45:07:ac:2b:69:aa:7f:7d:5b:36:a4:34:b9:16:
38:bf:10:d1:47:c8:ff:8f:e5:43:21:bd:ae:67:d4:
3b:48:89:8e:d2:f0:f3:22:7d:fa:01:4f:e6:2a:19:
42:5a:80:54:85:c5:e1:a7:cc:d2:7c:1c:f2:31:6c:
82:63:19:55:59:0e:e9:2d:37:d5:af:40:e8:8a:15:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:56:68:5A:94:79:24:18:0F:D9:6F:85:13:3E:1F:00:0D:D4:6E
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:30:8d:db:6b:7e:9f:eb:ac:8b:7c:36:d0:f5:ef:44:37:
f3:c3:35:b2:fa:12:59:31:36:a4:75:f9:52:f1:30:b3:56:c3:
6a:4d:6b:ee:04:3c:69:22:ee:9d:c5:03:c2:6b:1b:77:d3:2d:
ea:02:3d:ab:b6:e9:e6:63:cc:a7:f8:7f:e3:d2:ae:94:da:a5:
1e:8f:74:00:9a:a7:9a:2e:54:e7:ae:72:19:06:de:f4:28:e4:
7c:fb:f1:25:1c:d7:c1:d1:24:f3:1c:c3:4b:d4:a1:9b:45:3f:
60:08:aa:65:4c:36:38:a4:64:fc:cb:fd:c9:78:6b:4a:c5:36:
75:ba:6d:3d:36:26:13:5b:b0:31:ce:da:ac:0c:ee:f9:cf:9c:
6f:f4:5c:9c:f7:ed:c2:3a:6c:89:cd:6d:56:5d:5b:49:23:9f:
86:3d:0f:86:f0:b5:0d:db:ba:44:95:f2:8a:ba:0f:6b:78:a7:
e4:ba:cd:a9:ad:6d:ca:f8:a2:ae:d5:59:cd:d3:26:73:e3:f2:
e2:c9:f7:62:2f:f6:93:b6:8f:b3:8d:16:bb:bd:8a:72:ea:c1:
af:e7:2d:15:14:e2:f8:40:9f:32:10:a2:36:70:a5:df:92:5e:
8e:26:7a:0f:b3:d9:27:51:3b:a7:2b:4f:34:aa:ae:2f:4c:dc:
4a:50:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:57 2026 by rpki-client