
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: jsldLQD3zUW7HkB26mHExpqpOtNfom3ajzzD6OH9Tk8=
Subject key identifier: B3:B1:C0:C1:FE:84:B9:1F:40:F8:33:20:EA:95:58:D2:EC:E3:D1:74
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2AD1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2AD1
Signing time: Thu 16 Apr 2026 15:32:33 +0000
Manifest this update: Thu 16 Apr 2026 15:32:32 +0000
Manifest next update: Thu 23 Apr 2026 15:32:32 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: BfKjVhW3+hwJ/mef5ATfT5O2z2cW19z30f3EyZ1opzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10961 (0x2ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Apr 16 15:32:32 2026 GMT
Not After : Apr 23 15:32:32 2026 GMT
Subject: CN=69e10111-ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:5b:e7:06:4e:5e:e1:3a:46:ba:83:b1:1d:
71:ea:6a:bd:9e:f4:c5:3c:6a:26:6f:bc:dd:b0:8a:
93:08:60:02:61:b8:8c:41:61:6f:ff:87:29:d3:bd:
06:f7:0b:36:24:84:85:3f:06:af:a1:b8:d5:5d:20:
2f:d1:d9:bb:86:de:fd:e6:9b:57:32:48:bf:be:cb:
02:99:39:dd:8b:63:ac:60:3f:31:b7:ef:78:fa:19:
9d:96:50:08:08:8e:30:d0:0a:42:81:02:b4:91:96:
35:8d:18:52:ec:8a:1b:f9:45:49:4d:a6:d5:ff:ed:
78:20:7d:6e:29:d7:cf:3c:23:55:34:80:3c:33:39:
b1:0a:32:39:6e:65:26:0c:3f:d1:bf:89:73:4d:f8:
45:6a:0e:39:e1:9d:15:c3:2d:16:26:47:d5:dd:c4:
0f:87:cb:df:a4:58:b3:6a:85:0b:b7:53:e8:68:2e:
f7:38:31:1c:6e:d6:98:14:75:02:da:a7:00:58:d5:
8f:59:42:83:f3:98:d5:89:5e:ba:91:78:6c:35:96:
a7:93:a2:72:a6:be:1b:23:69:b0:bf:97:21:a7:61:
c1:29:fd:db:ff:be:52:a5:0a:9b:a6:77:7e:a9:37:
c0:68:a7:b1:cb:9e:ef:f4:d2:b6:73:1e:d8:df:68:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:C0:C1:FE:84:B9:1F:40:F8:33:20:EA:95:58:D2:EC:E3:D1:74
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:19:09:17:cc:23:e8:40:fd:8a:cb:8b:c0:fe:66:6e:3c:66:
59:fd:54:92:1b:60:66:e9:98:b7:fa:c3:27:70:29:c4:c5:38:
4d:f6:d2:8a:75:6c:4a:82:aa:3e:a0:fc:a0:c8:e0:05:91:fd:
cc:bb:f0:59:d6:79:3b:8f:81:e2:53:ce:a9:cd:83:21:d0:9c:
b7:e4:1b:ef:31:00:f9:ad:60:ea:08:f0:b3:bc:81:69:af:03:
f4:c5:4c:ed:cf:df:da:a5:60:24:6f:10:bc:5d:33:82:d8:13:
26:b8:95:a0:30:6d:0a:da:4b:96:44:04:f5:a2:b9:41:d9:2a:
bf:03:4a:46:76:ee:99:88:80:f4:8f:80:0a:1b:8c:6d:78:88:
a6:52:b9:bd:71:bf:2a:ea:78:10:30:04:7b:1d:0a:4a:f0:74:
74:e1:82:1c:0d:9a:27:67:17:b9:c9:83:45:3d:b2:54:01:11:
30:f5:8c:6b:bf:ab:cb:46:8b:72:62:4a:9f:ed:1a:c2:86:83:
37:1c:6e:9e:f1:0b:02:7a:b9:49:68:e7:a4:33:38:28:4e:fe:
27:c1:52:23:3b:70:02:ae:7d:d0:40:44:1a:84:e8:34:79:7a:
a7:97:6f:64:66:21:3c:72:ac:d5:ad:33:22:35:b7:4f:ee:3a:
27:2a:26:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB
QjE1NzVCQzMwHhcNMjYwNDE2MTUzMjMyWhcNMjYwNDIzMTUzMjMyWjAYMRYwFAYD
VQQDEw02OWUxMDExMS1lYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvR5b5wZOXuE6RrqDsR1x6mq9nvTFPGomb7zdsIqTCGACYbiMQWFv/4cp070G
9ws2JISFPwavobjVXSAv0dm7ht795ptXMki/vssCmTndi2OsYD8xt+94+hmdllAI
CI4w0ApCgQK0kZY1jRhS7Iob+UVJTabV/+14IH1uKdfPPCNVNIA8MzmxCjI5bmUm
DD/Rv4lzTfhFag454Z0Vwy0WJkfV3cQPh8vfpFizaoULt1PoaC73ODEcbtaYFHUC
2qcAWNWPWUKD85jViV66kXhsNZank6Jypr4bI2mwv5chp2HBKf3b/75SpQqbpnd+
qTfAaKexy57v9NK2cx7Y32ihRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOxwMH+
hLkfQPgzIOqVWNLs49F0MB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q
dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwBkJF8wj6ED9isuLwP5mbjxmWf1UkhtgZumYt/rDJ3ApxMU4TfbSinVsSoKq
PqD8oMjgBZH9zLvwWdZ5O4+B4lPOqc2DIdCct+Qb7zEA+a1g6gjws7yBaa8D9MVM
7c/f2qVgJG8QvF0zgtgTJriVoDBtCtpLlkQE9aK5QdkqvwNKRnbumYiA9I+AChuM
bXiIplK5vXG/Kup4EDAEex0KSvB0dOGCHA2aJ2cXucmDRT2yVAERMPWMa7+ry0aL
cmJKn+0awoaDNxxunvELAnq5SWjnpDM4KE7+J8FSIztwAq590EBEGoToNHl6p5dv
ZGYhPHKs1a0zIjW3T+46JyomgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:06 2026 by rpki-client