
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json)
Hash identifier: mve5nQYExd31c2xA1x7qMeVxQxZ25MtWl8SJO9i91OQ=
Subject key identifier: 61:89:4C:19:7F:32:C8:98:18:E5:83:17:98:BF:89:C5:98:49:C5:1F
Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
Manifest number: 0123
Signing time: Wed 15 Apr 2026 05:16:59 +0000
Manifest this update: Wed 15 Apr 2026 05:16:58 +0000
Manifest next update: Wed 22 Apr 2026 05:16:58 +0000
Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: FUBz2HzN8KbFI+VJibrdVZTXNS/gmA+J9SE2xS404HE=)
2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: CxmUBgoG5/CyJ4oi5OpIVw7Gs4zM12EJJkWMArPlfVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Validity
Not Before: Apr 15 05:16:58 2026 GMT
Not After : Apr 22 05:16:58 2026 GMT
Subject: CN=69df1f4b-6e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:6e:68:79:0a:f0:6f:43:94:78:58:48:82:
ea:15:c8:2e:73:72:fe:cd:12:c6:3f:5a:6b:6c:0d:
f6:c3:28:58:3d:ce:a9:99:88:f4:57:15:44:7a:7e:
f0:c7:02:ad:88:7b:0b:94:30:3e:59:20:38:b8:6d:
de:8b:ef:d9:91:e9:00:1f:d1:7b:7d:8f:75:a9:0f:
5a:85:76:f0:82:65:41:9d:5a:47:e4:bf:7e:c4:22:
b2:a4:19:92:71:8a:35:56:74:b7:de:04:5c:ed:ff:
6d:64:0a:ae:8f:fc:c0:83:dc:0e:c8:3f:cf:c4:74:
1f:53:db:de:4f:a4:6d:e6:9c:49:58:c1:66:de:9c:
40:62:0f:19:b7:2c:cd:a4:fb:6a:06:d2:82:51:39:
d6:11:db:17:11:5a:b2:60:b0:d6:f1:2e:e3:fd:31:
60:dd:1a:88:7e:2f:a2:75:e9:51:93:6d:6d:b0:a0:
a1:42:c5:c7:40:ec:c7:45:a9:87:f6:e7:b3:3b:93:
0a:04:a9:ee:21:84:94:f2:74:b3:e6:20:1b:32:2d:
61:97:e0:74:6d:4e:bc:7d:eb:24:35:33:a3:58:12:
05:68:da:9c:45:e2:de:36:6b:b2:18:ce:40:3b:30:
82:0c:b4:f1:58:9f:00:ac:d8:be:30:db:b8:7c:ce:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:4C:19:7F:32:C8:98:18:E5:83:17:98:BF:89:C5:98:49:C5:1F
X509v3 Authority Key Identifier:
keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6b:a0:7e:a3:00:c4:a1:3a:30:dd:bb:5a:29:9b:ad:28:35:
9b:7e:08:f2:70:d8:c4:36:4a:93:55:38:6e:44:38:49:19:86:
ee:70:15:31:84:9e:c3:fd:85:1a:38:d4:67:0c:32:3d:a7:eb:
50:fc:9f:7d:c4:d6:8b:b9:27:2a:dd:36:8f:dc:dc:35:06:ab:
b1:08:40:04:f9:cc:70:49:78:f7:69:3a:e0:19:93:ab:34:07:
f3:e7:c7:03:a4:a6:c7:bd:84:fa:b4:3f:43:04:c1:c2:23:31:
d8:d9:80:ec:e5:79:42:0e:04:09:8b:de:6b:f7:02:09:14:04:
87:02:ee:90:7f:45:52:1f:33:8a:fd:a2:c3:0a:fa:cd:e4:83:
90:30:9e:98:9b:ec:58:15:ad:a0:b8:53:55:d5:5a:f1:03:9e:
7d:77:23:05:81:65:c2:44:62:85:32:ae:fb:cb:d1:86:0e:a9:
7c:98:6c:59:7d:9a:5c:fa:35:c9:aa:35:4e:f5:54:7c:60:96:
b1:d0:ba:f3:c4:9f:e8:88:b9:da:d0:6e:60:ed:85:d9:a1:e7:
6b:92:d2:eb:7b:3d:03:85:48:b2:00:87:ed:2d:1a:e0:56:b4:
82:1b:24:eb:24:f4:86:7e:e7:78:1e:d6:e1:96:35:85:ca:76:
5a:94:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:00 2026 by rpki-client