
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier: QGWs9/HfCkq5kJcXk6ZEbU0r66E+pIm5mv9u89IRweA=
Subject key identifier: 4D:67:57:6F:B7:2D:91:6C:09:C4:F2:9A:63:55:70:D3:C9:81:94:51
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number: 01D4
Signing time: Fri 09 Oct 2026 04:13:50 +0000
Manifest this update: Fri 09 Oct 2026 04:13:50 +0000
Manifest next update: Fri 16 Oct 2026 04:13:50 +0000
Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: I4uNzkKCwCryXBjCRVIQOzAaMLwUm+oPBUsm15edqWE=)
2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Oct 9 04:13:50 2026 GMT
Not After : Oct 16 04:13:50 2026 GMT
Subject: CN=6ac869fe-089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:b5:ca:ab:c4:97:cc:37:d2:c4:12:b5:e7:
71:0e:de:59:0e:0f:87:d2:1e:ef:f6:d7:05:81:94:
53:51:f3:64:9e:36:d5:57:bd:67:3c:be:26:4a:09:
cb:94:3d:eb:b0:b3:1f:b0:52:ec:ce:58:46:4d:25:
8d:bb:29:69:54:9f:43:41:e9:33:7b:9a:21:59:07:
70:ce:a5:20:6e:3a:17:a2:24:0c:d3:41:ae:83:9f:
1b:46:13:ea:9b:d3:eb:5e:f2:81:be:67:d8:7c:e2:
3b:55:d0:a0:02:e1:45:f3:7f:31:18:19:1b:5f:5e:
bf:36:5c:42:7c:b6:45:91:68:1a:e4:44:05:d5:fc:
43:56:33:54:80:b7:84:e8:13:69:84:5b:38:d0:30:
a6:73:67:a3:a9:99:96:b6:dc:97:82:06:38:57:e2:
6c:92:f4:db:71:b8:15:3f:fa:28:36:a9:0d:90:93:
7f:ea:e0:25:91:cf:b7:44:ff:f7:d6:84:d6:75:37:
12:16:14:fc:4b:4a:72:1c:f5:c3:94:40:6d:04:33:
81:58:7a:8b:75:72:5c:54:db:fa:19:bd:c9:e0:76:
47:fa:9e:ea:10:41:3f:40:a2:d7:50:be:e5:11:54:
20:0b:f1:b3:3d:55:88:e1:98:15:af:bd:02:da:3c:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:57:6F:B7:2D:91:6C:09:C4:F2:9A:63:55:70:D3:C9:81:94:51
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:73:a8:aa:88:28:57:a9:4b:5f:93:9a:e8:45:a4:9f:43:
fb:ef:8c:17:f9:ae:e4:ee:bc:c9:17:db:f7:49:cc:6c:18:d0:
79:07:ad:32:b0:ec:5c:c3:78:57:eb:ad:b1:79:e3:39:a7:2b:
17:5a:43:e6:63:54:48:c4:0a:6d:ec:99:13:0c:b1:b2:49:40:
da:fd:c7:ea:0a:8c:81:09:46:10:d3:76:87:5f:5a:b6:9e:b6:
54:2b:7f:f2:ac:d7:52:e4:7e:54:02:63:51:d8:f8:27:99:4d:
d3:fc:ae:99:58:62:dd:f7:84:4c:95:d4:41:0b:aa:77:2e:ff:
4f:5a:cd:33:a6:24:a9:b2:f5:89:72:a2:3a:ef:cf:1d:11:e6:
1c:a3:24:78:ef:e6:6e:0c:9a:31:7c:41:08:a3:3b:6f:08:e3:
7e:88:c0:a0:1b:2a:34:03:11:7e:22:6f:fc:87:11:62:14:45:
b7:be:f6:c9:43:41:a1:4b:cd:f4:46:43:6e:3c:51:e5:76:e8:
84:5a:a1:21:19:2d:c1:7d:18:a9:bf:9f:f9:38:5f:70:d6:41:
34:7d:95:1e:94:98:bb:24:c2:5c:4f:bc:82:58:e0:2a:8b:47:
65:eb:c4:6b:71:e0:dc:20:ef:ae:9a:fb:8d:2f:17:c8:bb:7c:
15:da:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:56:31 2026 by rpki-client