
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier: iRiQbMgMrpVRm7SIa6gk3BzeTdeHZObQp/HhNHvu288=
Subject key identifier: 4A:E4:F0:AC:05:67:D7:4A:A7:62:9C:5A:B5:FE:17:43:79:63:73:61
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number: 0218
Signing time: Sun 05 Jul 2026 03:26:51 +0000
Manifest this update: Sun 05 Jul 2026 03:26:50 +0000
Manifest next update: Sun 12 Jul 2026 03:26:50 +0000
Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: CtjPEJQT0EEnXpCm0QgJOyb9B2TRuZqf8WN5VL6jf/c=)
2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Validity
Not Before: Jul 5 03:26:50 2026 GMT
Not After : Jul 12 03:26:50 2026 GMT
Subject: CN=6a49cefa-4e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:38:fb:f9:ef:cf:a7:27:93:bc:3c:81:e9:
c0:8f:18:81:2f:78:05:b5:c8:9a:28:ff:5b:d1:63:
8f:af:78:83:b2:aa:7e:68:0d:67:8b:99:9a:72:1c:
d1:0b:da:ae:48:7d:41:ee:38:ba:f4:32:3d:17:4e:
0c:ec:7a:7d:43:75:c1:c4:19:82:4d:e6:c2:c1:bf:
38:6b:19:bc:b0:3d:b4:30:ef:48:43:8d:b2:71:53:
f6:98:13:1b:3a:93:07:d4:b5:6c:30:3a:34:e6:02:
7a:8f:0c:0c:8e:41:62:8c:b1:35:59:7d:e7:db:94:
9b:fe:b2:7d:f5:c9:c4:78:6f:1c:c3:94:a4:f0:63:
ef:d1:43:bc:f5:2d:b0:c9:f0:3b:e2:c4:6a:f9:75:
d8:a2:33:4a:da:f4:73:e6:32:ce:2a:ef:d8:a8:dd:
e9:07:8f:14:d2:aa:b7:18:3d:97:20:eb:84:31:cd:
9f:d9:98:da:04:56:51:b4:53:7f:b8:8e:a4:db:15:
14:44:9d:c7:e4:a5:98:b6:72:ac:6b:14:b2:58:50:
8d:50:ca:50:31:5a:21:d8:84:96:dd:0a:12:81:90:
06:bd:ad:75:56:f9:e3:27:20:b7:fd:1f:b7:a4:5f:
0a:10:ce:7d:f2:13:94:8b:b7:9e:53:2c:84:e1:04:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:F0:AC:05:67:D7:4A:A7:62:9C:5A:B5:FE:17:43:79:63:73:61
X509v3 Authority Key Identifier:
keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b2:00:0b:dd:c4:bc:2b:04:af:f8:ea:b8:7b:24:02:a7:7c:
db:80:f8:36:94:21:82:7f:73:99:93:a9:a6:ae:7a:6f:ce:c9:
34:5c:9f:7b:9d:fb:0b:35:62:8b:bb:52:cf:50:86:11:b4:6e:
ab:31:f0:bc:77:19:aa:55:a9:5b:d4:54:b1:4f:6b:2c:35:78:
15:8c:83:50:c9:fe:8c:13:69:d5:59:6b:17:49:91:a8:16:12:
3b:97:e8:db:62:77:44:29:bf:e0:13:67:48:2c:25:e0:1c:bd:
59:d4:88:73:2d:b0:95:82:ce:62:05:70:26:2d:ac:05:f0:92:
cb:d4:ef:82:c5:10:63:e0:3d:7d:c0:a2:57:22:9f:70:e4:34:
ee:83:f3:c3:3e:89:1f:bb:fb:28:df:10:93:64:ad:02:77:b6:
f6:b5:f6:3a:fe:8b:60:48:e2:49:7b:b0:84:dd:43:86:57:9d:
f8:a0:d6:d6:cc:30:8d:ca:2e:87:1c:ac:e8:e8:79:ce:f7:62:
bd:b8:31:f4:fb:af:f3:c5:d8:7d:7c:4c:d3:0b:9f:f0:7f:53:
e4:d6:de:7e:d8:d3:b2:d3:80:d1:38:d8:d7:8d:a5:3c:02:d2:
79:04:26:4d:e4:0d:fc:67:63:d9:dc:c9:99:25:97:98:ac:42:
44:96:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:45 2026 by rpki-client