
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: zZgvcWU6N+pJm/wNHUhDDfiHJkQ4n4M6cEoM6L2Tz/M=
Subject key identifier: 53:6F:E9:44:F4:A2:F2:DC:29:7E:89:70:A1:E6:89:12:E5:56:20:33
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2B34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2B34
Signing time: Sun 20 Sep 2026 15:31:39 +0000
Manifest this update: Sun 20 Sep 2026 15:31:38 +0000
Manifest next update: Sun 27 Sep 2026 15:31:38 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: A4KzfrvO/i4JvmcoVFpSMhHSbxLdRt2z2JnbNSZbqBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11060 (0x2b34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Sep 20 15:31:38 2026 GMT
Not After : Sep 27 15:31:38 2026 GMT
Subject: CN=6aaffc5a-b060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:35:2a:4e:60:2f:ad:28:27:17:18:f1:ab:
ad:8a:f4:5d:db:b4:47:74:8e:6f:1e:b5:2a:f7:ec:
a5:fd:f9:5e:46:0b:ea:aa:f7:88:99:e4:3e:44:f8:
e6:96:43:cb:e2:44:a3:13:54:60:8e:fe:34:29:8c:
8d:7b:bc:cd:92:9d:bd:cf:e8:66:23:cc:a0:73:b9:
20:6d:7a:00:e3:00:8a:0e:1d:24:43:42:56:b8:7b:
85:38:96:a1:05:c2:1c:a0:69:29:5a:3a:57:57:4b:
81:20:7e:7c:87:d7:e6:e2:76:cb:85:b0:84:22:0d:
74:b8:aa:9a:fb:c4:52:1b:93:81:48:3a:9a:4f:52:
ad:d5:2b:01:56:c4:01:12:3f:85:d3:1b:1e:ce:61:
95:72:a8:ca:6b:cf:78:9b:cb:3d:64:1e:49:60:2d:
cd:cd:3f:6f:41:53:5c:88:fe:8a:dd:ae:40:f2:56:
a5:c0:80:19:01:c1:3c:10:4a:1c:af:a2:62:aa:a1:
1c:3c:16:13:1f:22:30:73:24:d5:34:a6:73:e7:4c:
a6:21:6a:9a:65:f0:f2:b8:5a:29:96:6c:45:f4:8f:
85:84:d0:e5:9f:0f:dc:33:3f:0b:03:c3:75:02:34:
1d:b1:25:37:29:aa:b3:06:7d:7a:8e:8e:43:cc:05:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:E9:44:F4:A2:F2:DC:29:7E:89:70:A1:E6:89:12:E5:56:20:33
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a2:4b:27:b4:1c:81:29:8b:38:50:8f:29:29:b6:af:c0:e8:
bc:67:79:ca:47:dd:e5:8c:7c:fd:0f:a6:eb:42:64:97:3a:1e:
cd:90:b6:74:8e:0c:d8:c1:35:64:0e:15:3d:c2:5e:b6:94:47:
9c:7c:a2:25:ed:7a:4c:17:0a:1b:3e:45:8b:c9:d2:28:57:87:
1d:49:2d:e2:74:f6:9b:0f:f7:bf:a3:de:95:c5:33:54:64:43:
98:b5:48:59:2d:8c:1d:99:03:f7:d1:d1:e3:af:ee:b6:3a:4c:
9d:55:64:5c:4f:a6:a6:a3:04:37:03:8c:d0:47:46:9a:66:d8:
04:fd:f5:27:79:77:99:7b:2d:e0:e1:fe:d6:b7:51:d4:d0:e2:
54:95:41:cd:4a:b2:3f:41:bf:33:0f:0e:45:42:83:cc:e6:f3:
2e:f7:56:4a:7a:0a:8a:b3:b4:7c:c9:63:11:15:e9:15:a9:2b:
47:c0:b2:b3:37:76:1e:b3:48:af:d9:fd:93:6d:57:df:6b:1b:
dd:39:15:91:a4:e8:ba:ba:57:d9:f0:9a:fc:aa:2e:df:d4:e6:
a3:e3:d2:1b:0f:16:c3:c7:ad:5b:9b:14:05:cc:ec:34:6d:86:
83:0e:3d:04:51:37:07:40:e3:5a:a6:ac:cd:3d:10:a8:88:d7:
12:80:6a:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB
QjE1NzVCQzMwHhcNMjYwOTIwMTUzMTM4WhcNMjYwOTI3MTUzMTM4WjAYMRYwFAYD
VQQDEw02YWFmZmM1YS1iMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwg81Kk5gL60oJxcY8autivRd27RHdI5vHrUq9+yl/fleRgvqqveImeQ+RPjm
lkPL4kSjE1Rgjv40KYyNe7zNkp29z+hmI8ygc7kgbXoA4wCKDh0kQ0JWuHuFOJah
BcIcoGkpWjpXV0uBIH58h9fm4nbLhbCEIg10uKqa+8RSG5OBSDqaT1Kt1SsBVsQB
Ej+F0xsezmGVcqjKa894m8s9ZB5JYC3NzT9vQVNciP6K3a5A8lalwIAZAcE8EEoc
r6JiqqEcPBYTHyIwcyTVNKZz50ymIWqaZfDyuFoplmxF9I+FhNDlnw/cMz8LA8N1
AjQdsSU3KaqzBn16jo5DzAXanwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNv6UT0
ovLcKX6JcKHmiRLlViAzMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q
dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwKJLJ7QcgSmLOFCPKSm2r8DovGd5ykfd5Yx8/Q+m60JklzoezZC2dI4M2ME1
ZA4VPcJetpRHnHyiJe16TBcKGz5Fi8nSKFeHHUkt4nT2mw/3v6PelcUzVGRDmLVI
WS2MHZkD99HR46/utjpMnVVkXE+mpqMENwOM0EdGmmbYBP31J3l3mXst4OH+1rdR
1NDiVJVBzUqyP0G/Mw8ORUKDzObzLvdWSnoKirO0fMljERXpFakrR8Cyszd2HrNI
r9n9k21X32sb3TkVkaTourpX2fCa/Kou39Tmo+PSGw8Ww8etW5sUBczsNG2Ggw49
BFE3B0DjWqaszT0QqIjXEoBq+A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:07 2026 by rpki-client