
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: v6MM5xyAAn47hapRFTiuhPSBesj0paJ0DzXHfjA/erA=
Subject key identifier: 28:46:AA:C2:03:0A:07:8B:1D:FF:35:38:3B:FC:16:0C:F2:3B:28:E0
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: 0102
Signing time: Mon 05 Oct 2026 06:37:57 +0000
Manifest this update: Mon 05 Oct 2026 06:37:57 +0000
Manifest next update: Mon 12 Oct 2026 06:37:57 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: IW64zIXumR12Bul7dmHvU1tlOAZfmYAKNushxYwxm9c=)
2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Oct 5 06:37:57 2026 GMT
Not After : Oct 12 06:37:57 2026 GMT
Subject: CN=6ac345c5-7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:ba:13:80:5d:38:01:08:26:83:25:4d:72:
ad:18:73:f0:cf:06:77:b5:c2:65:36:f3:31:45:77:
79:05:d8:4e:47:73:be:6c:6f:08:0f:8d:56:fd:6b:
04:a2:43:9a:77:73:01:40:50:38:a8:7e:d4:02:7a:
23:f3:b5:fe:fc:b3:f1:81:db:5e:99:f2:4d:88:29:
15:39:26:b0:d7:90:44:b0:11:d6:9f:a3:81:5c:78:
53:ef:c5:71:85:c2:95:25:95:0f:0f:65:cb:86:0f:
65:2a:6d:65:ad:ba:c2:7b:5a:e9:d6:4f:bf:5b:26:
19:e5:eb:7d:51:02:58:3b:bf:af:0d:36:a5:63:f9:
68:3b:22:84:53:f9:5b:9c:80:bd:7c:47:13:26:32:
82:65:50:58:69:22:99:3d:22:d2:43:ae:e0:a2:4b:
2f:99:9e:e7:94:55:87:02:c8:c4:ea:ad:7a:54:d0:
62:c2:93:55:cf:b3:a7:33:5e:84:41:b3:31:06:a0:
0c:af:db:27:4b:e1:19:55:5b:2c:e6:06:1d:80:cf:
e7:ae:f0:9b:98:73:a2:ae:3f:0e:06:74:49:41:63:
7b:90:ce:1f:ee:2c:5f:c3:96:be:82:19:46:c5:b7:
3d:32:a0:f4:58:87:22:f3:63:e6:7b:64:2e:17:e9:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:AA:C2:03:0A:07:8B:1D:FF:35:38:3B:FC:16:0C:F2:3B:28:E0
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:bc:b6:5a:99:25:a8:69:f5:b7:e0:67:78:1c:3a:f9:a5:
1e:bd:bb:23:da:4e:c0:57:ae:aa:b7:f7:d1:ae:4e:40:38:d5:
0a:0e:0f:bb:06:6f:28:e7:04:95:11:19:ba:76:be:a7:60:94:
90:a7:11:0b:30:cf:68:0a:88:40:96:d8:b5:57:83:17:42:20:
68:e2:79:91:32:3f:73:d4:20:30:db:9e:79:a1:5f:ca:d0:b8:
78:86:35:64:db:8a:4c:84:02:8c:92:ee:fc:c9:4f:05:68:cb:
f7:b9:03:f5:89:95:6d:8f:bd:f3:ed:ad:9b:dc:da:59:93:3f:
2d:58:a6:29:2c:c0:0c:ef:9f:d3:a4:f0:67:3f:9a:db:8d:6e:
ff:08:90:08:c6:ad:dd:62:67:39:54:66:f3:71:2e:2b:20:b8:
53:ae:0b:ef:22:41:2b:e6:5c:13:59:5a:7b:aa:c3:5f:db:12:
21:95:9a:e8:21:ac:5e:ef:b8:23:9d:5a:2e:5f:4d:b5:51:53:
f4:ab:15:08:6d:83:cf:e9:b7:30:ca:6a:8e:04:63:42:c8:70:
83:07:80:18:52:ff:07:6c:61:4a:4d:6a:79:c5:07:f8:ef:55:
32:df:b7:9c:3f:5e:28:e8:0e:c4:4b:c0:52:f9:a8:35:62:6c:
88:7c:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:33:19 2026 by rpki-client