
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File: M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier: RXFfQ++lQkyLFnhKnyhlIrcq3uGk6ufTECU0yLz2oPs=
Subject key identifier: B7:26:37:0E:23:DC:46:02:26:2B:CC:BA:BB:92:F1:C9:CA:EA:8D:E6
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number: 0147
Signing time: Mon 01 Jun 2026 06:01:37 +0000
Manifest this update: Mon 01 Jun 2026 06:01:36 +0000
Manifest next update: Mon 08 Jun 2026 06:01:36 +0000
Files and hashes: 1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: C56tJnI2iO/c+Aj/c/8W0kG58lxJ1RUO2iJu/3e+YSg=)
2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: SFRW6ZgLtC608yEa/dd47ZCBFLjksB/GM54AXvteWIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Validity
Not Before: Jun 1 06:01:36 2026 GMT
Not After : Jun 8 06:01:36 2026 GMT
Subject: CN=6a1d2040-0eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:0c:43:69:f7:2e:b6:32:a1:e9:d7:1c:e8:
cd:69:3b:eb:81:2d:4b:c8:7d:c9:f4:76:58:79:39:
a3:6d:21:0a:9a:39:af:3b:72:a7:e0:6c:bc:7b:e5:
ac:a8:de:ba:a9:6b:45:74:65:86:4d:f3:b9:81:f1:
7f:b6:a5:12:39:2b:eb:c2:84:55:7b:86:fe:f4:5e:
c1:35:32:07:b6:06:db:b6:2a:34:85:19:67:21:e3:
99:0d:74:6c:7f:e9:6e:76:ba:00:5d:cf:60:97:1a:
fe:67:e2:32:a4:87:52:95:ae:db:f2:c3:32:6e:65:
eb:b7:e2:9c:a8:99:7d:8b:26:a3:d4:c6:99:02:5e:
a8:0f:23:23:0e:63:08:c2:fc:79:d7:ea:20:2e:97:
0f:96:91:12:27:5d:13:96:4e:03:bf:ea:4e:80:80:
3f:ff:29:3b:70:af:f3:a3:db:ba:30:d1:4f:14:d7:
ad:39:76:16:ec:d4:1b:ae:26:eb:77:8c:da:a1:f6:
f0:d7:d3:df:2c:96:d9:51:ba:6e:4b:97:9e:1b:04:
08:e0:9d:31:01:be:50:52:1c:c0:3d:34:76:dc:af:
56:88:78:48:85:5e:cc:60:c8:aa:40:ba:a4:5b:9f:
4d:90:2e:d6:63:ab:8e:0e:62:0a:62:1b:0b:45:da:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:37:0E:23:DC:46:02:26:2B:CC:BA:BB:92:F1:C9:CA:EA:8D:E6
X509v3 Authority Key Identifier:
keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:05:99:d9:61:38:78:64:f7:33:57:51:ba:98:42:95:7a:
23:d1:09:08:9c:5c:59:05:0b:35:96:7d:f8:e5:5f:fa:e3:25:
bd:6d:44:d5:8f:74:dc:f8:eb:a8:58:e6:7c:94:1e:ee:91:70:
d6:b4:b6:97:11:c8:a4:e3:9c:87:31:7c:b0:96:45:27:47:cf:
74:a4:6d:81:d0:ec:75:52:c6:29:bd:20:20:c2:0f:6e:2f:20:
ab:4e:d6:91:67:0e:47:33:b4:b2:0e:a8:98:29:18:3c:aa:84:
69:3c:c1:54:90:84:a0:af:04:80:88:88:9f:f1:ac:b8:09:c1:
01:88:f5:ab:e5:b7:cd:d3:04:10:d5:17:ec:c7:19:6c:cc:32:
f6:af:44:3b:3a:ba:74:9f:a4:cc:65:56:9e:2e:a7:20:80:64:
ca:44:54:a0:25:ad:5d:1f:2b:d9:1f:27:87:60:8c:b0:a6:0b:
d1:72:24:09:e6:82:d6:d7:43:1a:9f:89:35:bd:2b:9d:25:44:
75:3a:99:72:e3:80:2f:93:54:6a:2c:f8:20:b9:86:95:b2:15:
4b:cb:43:89:90:3c:04:88:0e:33:de:39:4d:0b:20:ca:0c:e0:
80:e7:8e:3f:d6:d7:0a:20:77:b0:95:e3:54:e7:dd:f9:3e:be:
99:fb:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:50 2026 by rpki-client