
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json)
Hash identifier: Fi2ANttKE7gKJC4hbu9MaSkz6D72+gM0Cp7sAEn9v8g=
Subject key identifier: 2A:F9:18:2C:E9:65:4A:A4:1C:58:F3:DC:FE:55:06:B9:36:1A:F5:41
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial: 24B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
Manifest number: 24A3
Signing time: Mon 22 Jun 2026 15:45:46 +0000
Manifest this update: Mon 22 Jun 2026 15:45:45 +0000
Manifest next update: Mon 29 Jun 2026 15:45:45 +0000
Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: VXeiA1ojcAC23XpjAym6HmJ0szP+/+F/IP1vJd+dN8I=)
2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: a3sXsdVgG1aczhVzJi7/Rf+WzCpYYZ6XbQ0iWZCw3CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9399 (0x24b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Validity
Not Before: Jun 22 15:45:45 2026 GMT
Not After : Jun 29 15:45:45 2026 GMT
Subject: CN=6a3958aa-b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:6f:a3:c6:f2:a2:53:fd:2d:6e:ea:f4:aa:
e9:ea:13:3c:cc:d3:01:2c:10:b3:8b:90:04:55:38:
ec:18:17:a7:bf:26:cc:01:30:0d:a1:32:68:0d:10:
97:96:02:ca:11:80:1d:fe:99:ae:b2:58:0e:b3:2b:
2d:30:72:2a:ad:9d:da:d6:28:82:76:23:19:cc:3d:
ed:6c:fa:d9:fd:8f:36:71:56:e1:2c:63:73:30:ae:
04:c7:e3:8e:88:04:67:84:7b:69:d7:24:7f:cb:ce:
78:1f:f1:27:ab:b8:a2:9a:c8:02:2e:37:57:c2:6e:
f1:65:d6:b6:ef:95:d4:e0:be:e7:e2:2e:6f:45:58:
5e:1e:92:c4:82:0f:35:3f:00:b0:e4:07:55:82:8b:
78:68:04:fe:52:1c:ae:41:aa:70:ab:43:8c:3b:d2:
82:39:d0:f7:1d:44:f8:ce:ea:eb:ba:9f:f7:63:ef:
bc:cf:04:00:78:17:e1:e2:ad:1e:0e:f5:36:6b:14:
df:57:1e:1f:ac:f0:00:ed:6e:9b:94:6a:0e:e4:ed:
78:c5:dc:94:31:ab:9a:26:d3:38:2a:9b:8f:69:64:
1b:62:77:39:ff:b9:98:1e:ea:19:64:0b:8d:46:5b:
45:5d:64:8e:99:fe:8f:ef:91:d4:67:83:2c:b2:0c:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:18:2C:E9:65:4A:A4:1C:58:F3:DC:FE:55:06:B9:36:1A:F5:41
X509v3 Authority Key Identifier:
keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:c1:d0:13:e5:40:ad:fe:b9:ad:53:8e:c0:48:15:31:91:32:
8e:5d:e6:17:54:d2:da:0b:17:62:3d:1f:1c:b2:21:79:aa:a5:
a4:11:b9:52:5d:ce:eb:bd:24:20:73:3c:f8:14:59:11:bb:a4:
81:b2:cc:ae:88:ab:ec:e6:c8:c3:38:35:2c:af:48:bd:51:08:
12:12:f7:e5:8f:25:58:b2:9f:d9:d5:f7:b3:43:bc:9d:1b:ec:
17:ae:18:01:93:5f:28:87:0b:1b:bd:8a:30:3e:ea:ff:33:eb:
af:d1:5f:3c:be:b2:0a:43:03:00:21:2e:9a:c6:d9:a5:c7:b0:
c1:7d:e0:22:02:0c:88:e4:59:19:17:6d:ff:2a:ab:74:52:ba:
2a:98:22:a8:48:b9:ec:7a:fd:d1:1f:f6:89:34:74:ac:3a:d4:
e2:4d:4a:d7:56:d0:ed:bf:e1:6f:d3:77:67:cd:be:6d:2f:73:
b5:b8:ff:99:9b:c6:18:25:dd:07:bb:0c:cb:a7:a1:99:dd:10:
34:dc:81:10:50:d1:95:b9:97:0d:5b:c6:24:8b:a4:cd:41:45:
d3:45:96:05:72:c1:ef:e7:dc:11:77:e4:b5:f7:08:42:e6:d5:
46:78:ca:63:e0:7c:a5:f4:a9:68:08:34:6a:db:75:97:f6:02:
95:b0:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:32 2026 by rpki-client