
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: nDbeAr9Cn3JrZUdw5NBOnHNM46rUyLjFu6i3SwUtayo=
Subject key identifier: B7:F4:7E:75:B3:68:09:EB:32:79:21:1B:7A:FC:36:1B:48:59:C5:09
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: D2
Signing time: Fri 03 Jul 2026 07:37:25 +0000
Manifest this update: Fri 03 Jul 2026 07:37:24 +0000
Manifest next update: Fri 10 Jul 2026 07:37:24 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: lDoI8L8lRe6OPXPse7YLU14m2ni6yKH/PO+9e6ZDh0E=)
2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 07:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Jul 3 07:37:24 2026 GMT
Not After : Jul 10 07:37:24 2026 GMT
Subject: CN=6a4766b5-56fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:77:ae:d2:9f:6b:b9:94:e4:34:db:de:4a:
e9:27:66:c2:d8:2c:e4:c8:6d:c5:0f:bf:ca:43:78:
b3:50:e0:29:8a:cf:3d:c4:ec:63:1c:08:67:c9:f8:
ee:70:17:46:55:8d:67:c1:46:1e:50:38:8b:5f:a7:
d6:70:94:66:5b:7d:27:0f:1f:90:75:ee:8a:14:a7:
c0:1b:25:f1:c8:f7:04:37:3c:29:8d:f7:ef:74:db:
4c:c1:89:de:b4:19:a9:f5:4c:96:e9:6d:ef:35:62:
2d:84:8a:94:50:63:ed:6e:fb:b5:3a:e9:0f:2a:75:
20:7d:42:61:6b:f5:75:1c:77:cf:ba:67:7f:a8:9e:
cd:44:42:78:21:11:8a:e0:43:be:85:ef:ef:a7:00:
08:06:ed:81:a5:7c:d2:57:21:2a:c8:a1:06:d8:13:
12:c1:f4:18:c8:d4:5c:5a:37:1a:5c:36:0a:6a:61:
bd:47:74:12:38:97:69:96:ca:20:d6:58:7e:27:64:
02:f0:10:99:79:2e:d6:c9:53:a2:a0:7e:14:30:b2:
95:dc:25:14:f2:ce:48:5c:99:5a:d0:3e:b4:04:36:
74:1d:ab:d8:79:e6:31:85:07:94:9e:ed:cd:ef:0d:
53:4e:32:1f:d5:8f:20:0e:9d:8f:2c:e3:94:72:27:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:7E:75:B3:68:09:EB:32:79:21:1B:7A:FC:36:1B:48:59:C5:09
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:b4:0c:54:70:00:bd:73:65:65:e2:3f:38:ba:39:f5:bf:
c6:31:d7:bc:fa:22:52:95:a5:b3:b8:03:56:8a:0d:ac:95:cd:
40:79:64:35:0b:ed:aa:05:af:fe:76:52:48:f3:28:36:56:a0:
5e:34:63:08:58:65:d3:02:41:07:07:33:5e:0f:bb:9e:59:c5:
ae:87:5c:4d:d9:a2:eb:28:85:ae:05:6a:4e:e1:9f:90:3c:ac:
22:37:34:16:03:91:c3:a6:44:ed:4b:7a:88:87:dc:8f:1a:89:
78:9b:dc:b5:78:0d:e2:3f:f2:28:39:10:87:69:c5:9b:3c:1d:
4d:0e:9b:b3:23:d1:20:5b:4b:3b:1f:8a:e2:9d:ec:a3:d1:e0:
a6:30:02:b5:41:fc:43:89:2c:8c:43:42:ae:b6:69:c1:5d:8f:
a9:b9:3d:81:cd:3e:f5:7c:b8:e5:1a:b8:09:06:b0:ad:f7:48:
88:38:9c:1c:9f:8c:a4:87:86:93:0d:d4:8e:12:f6:5a:1c:ce:
46:e4:ab:d4:89:13:62:31:0b:be:e7:e0:c4:4f:ff:67:5d:31:
0e:c7:d4:1b:1c:6e:bb:08:97:29:d3:18:f0:a4:a9:70:1b:81:
79:08:98:71:0e:71:1c:d9:44:d9:97:db:d6:b9:c4:9a:13:c1:
64:c4:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:22:29 2026 by rpki-client