
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: S/WoZigTv1H0m5LgFz9FjIFYl4wPt78sWcB1RmCbJCE=
Subject key identifier: 8E:1F:64:4B:5B:54:F3:10:94:67:A5:78:97:95:63:40:24:69:13:CA
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2B0F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2B0F
Signing time: Tue 28 Jul 2026 15:39:29 +0000
Manifest this update: Tue 28 Jul 2026 15:39:29 +0000
Manifest next update: Tue 04 Aug 2026 15:39:29 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: hxieNMsTzsrYGYSlXbtkYrmKdmJaBL9OOr+SK5YGvL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11023 (0x2b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Jul 28 15:39:29 2026 GMT
Not After : Aug 4 15:39:29 2026 GMT
Subject: CN=6a68cd31-07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:3e:52:56:06:f0:f9:43:10:eb:7f:5f:cf:
d2:b2:02:81:1e:09:8d:7b:c6:32:ab:cd:58:f0:67:
39:28:95:9c:9d:c2:8a:20:5a:e9:69:3c:da:7d:ca:
e3:99:d3:b4:f8:20:4b:62:25:66:a7:82:0b:79:69:
7d:1d:29:99:ad:ba:bf:60:4f:dc:01:75:cb:cf:b1:
7c:68:88:8a:bc:bc:40:bf:dd:06:90:97:18:14:ea:
5d:77:73:b4:b5:b3:89:ec:4f:1b:61:08:73:c0:a5:
cb:e6:ff:6d:ac:fd:33:dc:56:6a:48:57:11:27:52:
34:16:d2:3d:34:d7:c8:bf:2f:ac:ee:5d:56:07:bf:
b5:7a:a7:ca:44:88:ea:35:23:68:a0:0c:a3:da:d0:
ad:85:f3:ab:1e:12:c7:8e:28:d7:4c:30:4f:06:1e:
75:60:51:87:3c:e9:dd:15:d0:70:ad:12:3c:fb:b6:
0a:88:2c:d8:c1:51:71:09:ed:1e:b4:ce:ee:4e:48:
48:44:58:05:b3:e2:92:4f:e0:7f:5a:80:08:bc:79:
c3:f5:2c:9f:54:5c:d5:dc:16:40:3d:cb:34:42:4c:
c3:3e:45:f6:7b:82:29:57:bb:0d:76:8d:29:8c:1f:
f2:ba:7e:fb:1d:18:76:dd:6c:c5:74:2e:cb:a0:33:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:64:4B:5B:54:F3:10:94:67:A5:78:97:95:63:40:24:69:13:CA
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:b7:ee:fc:c5:f9:bc:e2:55:eb:bd:27:77:2e:79:23:d3:
62:43:b1:fb:4e:95:c8:a6:1a:89:48:f0:c7:d2:dd:09:a2:e3:
87:e2:ea:b9:ef:1b:e0:87:5a:26:b1:f6:6b:97:56:ef:f1:d8:
4e:c1:92:3e:ff:2d:28:a7:ec:28:58:18:28:0a:c3:c2:db:15:
8e:54:2c:1b:ae:1f:d5:6a:6e:6b:2c:09:01:87:7a:66:32:07:
63:d2:09:f6:0e:47:bb:cb:5e:35:0a:7b:67:86:82:eb:a7:3d:
7e:3d:ab:c6:76:b2:e5:6b:42:9c:90:98:e9:4c:92:5d:79:5e:
2a:be:f6:eb:e0:44:e4:07:98:b4:3c:ae:5a:67:83:2d:37:e4:
cd:40:e3:5d:59:47:c1:67:c9:c6:cf:54:d3:d6:77:3b:28:62:
0b:ea:47:8c:62:ba:d0:ff:40:b8:c0:fa:53:14:e6:e0:4b:ff:
8b:7f:ce:1b:c0:ba:54:48:d1:9c:21:76:0f:c5:1e:ae:63:20:
41:b8:ca:ff:6c:8b:05:2c:8d:e1:0d:64:3d:95:c5:41:9d:82:
6e:1a:cf:f1:cb:e0:9b:60:44:71:38:ed:82:16:2a:b6:26:71:
01:1a:0e:1a:44:48:c7:a3:cc:62:51:f2:e8:c5:f0:6e:ed:16:
2f:81:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:19 2026 by rpki-client