
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier: RZqdRjKhD+cd2WFwsHscHzK4oi4uswuLpM3WGhicLm4=
Subject key identifier: DD:B6:85:CC:C6:7F:9B:3E:01:12:74:3F:16:19:84:89:DA:08:32:F9
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number: 0119
Signing time: Thu 21 May 2026 06:18:07 +0000
Manifest this update: Thu 21 May 2026 06:18:06 +0000
Manifest next update: Thu 28 May 2026 06:18:06 +0000
Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: umR0MGcuACA6hzYFnj4Oky+4GmO7+4036jJeS0oQkbM=)
2: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
3: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: May 21 06:18:06 2026 GMT
Not After : May 28 06:18:06 2026 GMT
Subject: CN=6a0ea39f-8d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:ac:31:3d:01:96:be:51:d6:b2:61:ba:6a:
5a:13:6f:2f:fa:c8:9b:13:b4:e7:91:12:c1:69:e4:
a8:78:be:7b:a4:25:4d:af:cf:bb:28:ac:ea:2b:73:
5a:8e:ea:80:3a:8d:8e:59:cb:d1:37:e2:7a:42:ae:
b9:69:dd:ba:9e:da:d9:d5:d7:bb:4b:54:1e:50:fd:
90:7a:fd:20:cd:b3:70:c5:86:fa:22:74:6b:d9:db:
c0:53:71:16:49:5f:84:e9:43:ee:26:38:8a:17:45:
1a:64:8a:f0:97:6a:6a:a4:e5:b4:3c:37:0e:69:59:
86:21:5b:65:96:9f:9b:5b:a1:e0:ff:6b:f3:fb:57:
ed:44:62:7d:99:71:00:3f:1d:8e:b8:36:6f:e1:49:
06:ee:b3:41:f0:d8:98:4b:a9:22:79:48:4a:67:4d:
37:1b:e7:5e:c7:17:5e:6b:1f:63:ce:ae:c9:41:49:
ce:e1:da:d2:31:48:23:12:e9:08:bc:24:69:ee:08:
61:b6:80:df:2d:28:3c:87:db:b7:c5:0e:79:20:72:
da:2b:3f:e5:5e:09:79:46:40:24:3b:3d:f8:43:42:
fe:02:04:84:62:57:ec:f4:d9:a4:2b:9f:3e:f3:8c:
75:9f:a8:51:8f:f1:cb:aa:28:ff:ec:cd:34:05:a2:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:85:CC:C6:7F:9B:3E:01:12:74:3F:16:19:84:89:DA:08:32:F9
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:1c:43:db:26:bd:72:3e:8c:32:b4:1e:80:2d:44:00:11:
b1:37:62:61:ad:98:e3:1e:51:c3:d4:20:54:47:b3:bd:e4:b8:
b9:d1:90:69:ba:72:e3:30:0a:36:45:02:4a:d9:c8:a6:35:59:
c2:25:fc:cd:a5:4b:e4:8c:07:02:85:d2:90:2a:1d:a4:6a:bb:
de:f3:19:74:67:5b:29:7d:38:74:3d:cc:8d:e2:19:56:5e:eb:
13:85:1b:3d:db:74:7a:56:7e:92:ed:7c:6e:3a:d3:37:f3:94:
33:94:c2:8e:2b:b7:fb:86:32:65:dd:45:56:bb:7f:13:19:4d:
d7:28:57:bf:d1:3b:35:70:14:65:2c:2d:cb:33:0d:0e:57:f9:
43:6d:80:e0:c7:1d:52:53:bc:25:8d:8e:5d:6f:c5:9c:05:68:
f2:0b:b4:c1:bc:71:ed:61:e4:f5:40:21:f7:8d:54:fa:3c:61:
99:1c:eb:d1:62:91:65:04:01:82:df:ca:b8:4f:f1:e6:07:36:
43:68:a6:4d:ea:4e:c7:30:21:06:92:1e:5d:61:50:ea:75:ea:
5c:77:7a:9a:48:9e:9d:e2:de:cc:03:88:62:14:b3:a2:a0:6d:
5e:33:04:53:fc:80:e6:58:0b:20:94:85:1e:96:cc:2a:a4:07:
4e:af:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:14 2026 by rpki-client