
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json)
Hash identifier: PlORGdZlaL5lgmwiRi64zEQbkAtA21m7TuQhvGHq5mY=
Subject key identifier: DD:86:AC:44:01:86:70:DD:64:FE:F4:39:41:68:68:D5:4D:00:B5:44
Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Certificate serial: 05D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
Manifest number: 05C0
Signing time: Sat 10 Oct 2026 23:11:22 +0000
Manifest this update: Sat 10 Oct 2026 23:11:21 +0000
Manifest next update: Sat 17 Oct 2026 23:11:21 +0000
Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: pEJirDKprNleG0GAc1udj5xKPEaGWIa0J3NXquNLjQY=)
2: 160CE08CB7C011F1B5CD72D65E11F970.roa (hash: /F54hueLFXXw1X3JstcORnLZqit7wcqFZL2ddPkBo5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Validity
Not Before: Oct 10 23:11:21 2026 GMT
Not After : Oct 17 23:11:21 2026 GMT
Subject: CN=6acac61a-263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:3e:6a:e1:c7:3b:39:83:56:6e:a9:26:30:
aa:9f:0f:1d:27:9e:8a:28:f2:17:1c:12:38:52:f5:
e9:6b:74:d0:19:c1:0c:31:60:d8:8c:8c:b8:aa:07:
05:17:79:4e:5e:f4:b9:d3:73:77:3b:f4:3d:45:30:
c5:44:46:cb:26:4a:7a:13:d1:78:6c:4f:0c:f7:42:
36:13:2c:70:4e:1d:e4:fd:19:44:c8:94:cb:74:6f:
bf:81:4b:ea:15:f1:1f:2a:7a:f0:f3:c8:93:c5:1a:
74:a2:78:1d:1b:5a:6e:f7:6a:f4:9d:c7:c3:67:77:
df:1b:44:dd:a1:42:a3:95:aa:a4:8f:16:43:dc:ce:
a1:bc:7b:3f:25:d8:9f:2b:a6:b9:af:47:6e:2a:a0:
2b:2d:79:84:41:a4:5d:50:d2:cd:4e:02:2c:6c:82:
a8:6f:95:7e:a5:d2:e2:0f:93:e4:67:ee:82:94:94:
a0:81:eb:bb:f3:66:d0:c4:b3:11:9d:69:7b:b4:f4:
26:f1:c8:50:75:64:19:63:72:5a:83:49:c4:65:ef:
e6:b4:b4:95:cb:a3:a6:46:d3:7b:fe:7a:15:69:5a:
4b:f4:fa:c0:d2:d6:c6:b4:1f:81:77:eb:af:8b:87:
7d:fa:7e:05:51:66:af:9e:06:66:09:76:49:03:5c:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:AC:44:01:86:70:DD:64:FE:F4:39:41:68:68:D5:4D:00:B5:44
X509v3 Authority Key Identifier:
keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:4b:1d:06:87:35:2c:fa:0d:59:1b:0a:c8:8f:1a:c9:08:4b:
30:09:7a:07:3a:88:62:a0:f2:fb:66:ca:d3:00:9a:e1:8a:be:
6c:ac:98:9c:ca:1f:1b:d9:3b:6f:0f:f0:51:5e:36:19:b2:8b:
a4:63:7a:a4:c3:84:7a:01:64:ed:fc:f7:e8:eb:7e:40:bf:fd:
2a:ac:e1:83:e9:9b:d5:b6:cc:db:4e:c2:39:f0:ed:28:24:4d:
e2:04:17:8e:ae:19:34:06:f5:b3:9c:b7:6d:60:be:6d:11:be:
b5:ba:bd:b8:a0:bd:26:7c:77:f9:f9:dc:a5:d1:b4:50:e8:f7:
90:2f:88:e9:9f:56:68:93:01:5e:83:f6:c4:86:c4:ac:2b:73:
28:80:23:40:26:3f:41:c9:f1:f8:30:0c:b8:28:36:2f:ee:e5:
6b:d0:cd:99:55:c3:cb:6e:4c:6c:9e:b7:64:14:e9:e3:7d:f8:
14:f6:c4:84:a5:35:db:21:0d:b9:83:bf:59:59:37:9c:91:16:
e6:a4:61:6a:df:c2:9f:1b:43:b2:a2:bb:22:29:a3:51:ed:66:
cb:77:4e:76:ee:ba:3c:a5:1f:db:a4:bf:a8:3c:2a:d4:89:9c:
e0:c7:59:91:aa:1c:5b:29:d7:3d:1e:24:be:2e:52:12:46:dc:
30:6b:30:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx
Njg1QkE2RjAwHhcNMjYxMDEwMjMxMTIxWhcNMjYxMDE3MjMxMTIxWjAYMRYwFAYD
VQQDEw02YWNhYzYxYS0yNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4Q+auHHOzmDVm6pJjCqnw8dJ56KKPIXHBI4UvXpa3TQGcEMMWDYjIy4qgcF
F3lOXvS503N3O/Q9RTDFREbLJkp6E9F4bE8M90I2EyxwTh3k/RlEyJTLdG+/gUvq
FfEfKnrw88iTxRp0ongdG1pu92r0ncfDZ3ffG0TdoUKjlaqkjxZD3M6hvHs/Jdif
K6a5r0duKqArLXmEQaRdUNLNTgIsbIKob5V+pdLiD5PkZ+6ClJSggeu782bQxLMR
nWl7tPQm8chQdWQZY3Jag0nEZe/mtLSVy6OmRtN7/noVaVpL9PrA0tbGtB+Bd+uv
i4d9+n4FUWavngZmCXZJA1z/FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2GrEQB
hnDdZP70OUFoaNVNALVEMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw
NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i
ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFEsdBoc1LPoNWRsKyI8ayQhLMAl6BzqIYqDy+2bK0wCa4Yq+bKyYnMofG9k7
bw/wUV42GbKLpGN6pMOEegFk7fz36Ot+QL/9Kqzhg+mb1bbM207COfDtKCRN4gQX
jq4ZNAb1s5y3bWC+bRG+tbq9uKC9Jnx3+fncpdG0UOj3kC+I6Z9WaJMBXoP2xIbE
rCtzKIAjQCY/Qcnx+DAMuCg2L+7la9DNmVXDy25MbJ63ZBTp4334FPbEhKU12yEN
uYO/WVk3nJEW5qRhat/CnxtDsqK7IimjUe1my3dOdu66PKUf26S/qDwq1Imc4MdZ
kaocWynXPR4kvi5SEkbcMGsw6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:42:49 2026 by rpki-client