
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: pl3NlUCPxQzNNKo24R8zCiYSdWH3KPQG6Rle2jAL0Kk=
Subject key identifier: 5B:7B:36:90:E5:1F:71:10:56:79:91:E5:82:EA:43:27:98:11:64:36
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 01FD
Signing time: Mon 21 Sep 2026 03:17:15 +0000
Manifest this update: Mon 21 Sep 2026 03:17:15 +0000
Manifest next update: Mon 28 Sep 2026 03:17:15 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: V1NyjVocPPiwmG6Kt/aBBKIqLr3w1U3jIQnEk0YAWz8=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: Sep 21 03:17:15 2026 GMT
Not After : Sep 28 03:17:15 2026 GMT
Subject: CN=6ab0a1bb-779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:ff:27:0a:b9:0a:03:23:98:44:69:cf:cc:
fb:42:80:5f:12:a7:fc:ee:0a:1b:d9:94:28:fc:65:
2f:25:13:ba:a4:d6:8e:b6:9c:e6:21:0b:51:02:92:
e3:16:03:6e:11:ca:5e:26:d2:37:b2:10:be:c0:26:
b0:8b:24:a8:b7:21:32:36:28:87:33:e3:dc:4f:c2:
46:d8:d1:a9:7d:9f:a6:8c:77:d1:1d:fb:69:af:41:
26:00:56:47:3a:e3:d0:d5:34:6f:a7:ee:71:01:49:
42:6b:6d:26:87:8b:07:9a:e1:c6:68:0c:02:dc:82:
54:fc:c5:86:b2:a9:93:f9:62:48:4b:1b:2c:2b:77:
a2:ed:96:d3:cd:06:9c:48:e2:52:98:2f:1c:54:5c:
0c:e0:a4:da:b0:cf:fb:28:d5:5f:2a:01:6d:06:28:
02:9c:b3:f3:87:26:8d:8a:32:d0:3a:58:52:47:30:
ab:61:d8:d2:43:14:d5:14:95:b7:1b:92:2d:f6:3f:
28:6e:f4:52:5e:db:16:b6:7b:29:5e:e3:2c:ef:fd:
d6:3b:93:ee:44:60:77:19:77:04:33:f7:78:6c:3d:
f8:cb:48:ac:ed:f6:6b:f9:2b:e6:96:01:37:60:59:
d6:11:7a:29:b7:14:55:90:28:3b:b1:be:2e:49:4f:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:36:90:E5:1F:71:10:56:79:91:E5:82:EA:43:27:98:11:64:36
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:0e:01:5c:08:db:cd:d2:2f:a1:6e:5f:2f:61:6f:c6:78:
6b:f5:2a:eb:c1:6b:92:79:fc:da:f8:7a:70:3c:d3:23:83:9b:
1d:7a:f0:d0:94:7a:25:36:c1:a4:40:18:6a:eb:56:54:02:55:
ec:a4:56:0a:16:ea:3d:8d:10:35:08:bc:9a:e2:01:99:99:59:
af:ed:23:58:f3:88:34:7d:04:2b:79:8f:4f:6b:5a:91:49:e2:
6d:3b:96:dc:de:66:95:10:83:6c:51:93:3a:9b:35:75:0f:b0:
f8:e4:5b:58:44:dd:ac:c6:f8:a1:35:1e:16:9a:d4:e3:a2:35:
66:1b:e4:22:ec:cf:ba:d2:dd:0e:58:97:ca:7d:75:49:91:2c:
2b:99:63:03:12:4e:eb:53:82:51:3d:f6:42:2b:dd:d6:16:52:
33:e7:33:f9:23:5f:bd:24:63:a4:23:1d:dd:13:4c:6a:41:11:
73:11:db:57:1c:30:ef:4f:fe:33:21:55:21:a8:61:67:d5:80:
97:ed:5a:6f:ba:4a:37:a9:50:2e:2f:1c:9f:9b:af:cd:00:c9:
d1:37:b3:f1:ad:e1:df:9b:69:ea:e4:82:0d:43:f7:9d:c0:63:
2b:80:f4:73:bf:96:74:ea:92:38:03:a1:81:5c:37:d0:93:37:
bb:3c:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:15 2026 by rpki-client