
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier: kso0Bx4pZ5vMCs8SjhsJNPusYB3ILw1iHAhcHCMV3cM=
Subject key identifier: 5A:5A:A9:30:33:6B:5B:6D:5F:80:44:B7:9A:6D:59:96:9C:91:63:1E
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial: 0743
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number: 073C
Signing time: Tue 06 Oct 2026 22:04:25 +0000
Manifest this update: Tue 06 Oct 2026 22:04:25 +0000
Manifest next update: Tue 13 Oct 2026 22:04:25 +0000
Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: ShLSE0JJ0Zp+6aYtBzeHRRBj3VKhCAWDjOQYfW2QFoY=)
2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Validity
Not Before: Oct 6 22:04:25 2026 GMT
Not After : Oct 13 22:04:25 2026 GMT
Subject: CN=6ac57069-c9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:b0:39:f0:ff:0f:bb:b4:8f:47:52:89:53:
ab:e9:0e:a1:2a:eb:90:6a:16:f9:23:08:6a:32:bf:
88:d3:8c:e5:77:d6:6a:51:e1:33:99:8d:eb:e3:e2:
b7:03:e6:0c:60:13:d5:3f:f5:46:97:b5:1d:65:76:
e3:52:86:20:6d:28:75:75:e5:a1:55:8f:13:9d:b4:
16:56:02:18:13:1c:d6:bd:38:a5:86:9f:6b:45:5b:
50:b6:05:3a:69:1c:cc:fe:6c:44:19:ae:fe:2c:89:
8d:9d:29:2f:a2:e0:1a:33:7d:85:2d:3f:65:7c:ca:
fd:72:d9:10:de:5b:0a:4f:62:32:d5:16:05:fd:8a:
c3:dc:17:b9:3e:30:d1:0e:1d:dc:7b:2c:63:fb:d2:
95:0d:86:d5:11:17:0a:42:f2:32:62:da:6a:85:be:
47:2f:28:a6:2f:f4:43:ee:6c:2b:25:44:36:5b:c2:
a3:a4:a5:11:fd:9d:80:6f:10:b5:42:b6:fd:bd:71:
9d:08:cc:a3:3e:d3:d5:b9:03:f4:c4:d9:be:d4:fd:
81:28:13:b3:58:45:a2:fb:26:46:9d:8b:0b:bc:cb:
e5:65:5d:40:c1:50:a2:b5:0b:2f:25:a8:4f:70:29:
8a:90:08:c4:75:c3:cf:02:17:13:96:8f:c6:53:1c:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5A:A9:30:33:6B:5B:6D:5F:80:44:B7:9A:6D:59:96:9C:91:63:1E
X509v3 Authority Key Identifier:
keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:74:43:90:f3:7a:27:27:1e:b1:f2:5f:51:ea:4e:2b:07:29:
09:7f:05:c7:8b:45:2a:da:fb:c4:e7:85:59:1d:2b:ce:27:cd:
3b:16:67:8c:d5:45:e5:7a:c1:90:8d:68:e5:d1:1e:25:89:2c:
35:58:16:f9:78:db:98:4a:e5:d4:d4:80:cd:f7:72:e0:53:c7:
b2:3c:19:d4:d1:d3:1a:a7:63:58:e2:88:74:3e:93:02:fd:27:
17:8a:9c:ca:6e:88:31:85:2f:e2:ee:4b:8b:85:1f:4d:a0:b5:
74:d2:a5:15:98:e4:67:b7:f9:54:33:95:77:e9:f5:f3:84:06:
72:e0:61:3f:d8:7e:7d:d0:e0:c3:d9:0a:d1:5e:51:35:4b:02:
fe:c6:4e:60:ba:74:0a:89:61:9f:db:34:d8:f9:0e:8f:58:5f:
22:4c:9f:6d:1a:c6:0e:1e:82:18:da:66:ae:c6:04:8e:fe:0f:
da:c6:d3:1b:cc:94:77:fc:93:70:80:8e:e8:f7:02:e8:ad:67:
27:f7:2f:8a:d2:3d:26:1d:43:09:82:c5:f6:52:4b:ad:68:9a:
16:20:25:45:fc:fa:89:27:bf:3b:57:a4:2a:f1:de:76:6d:c4:
e4:2a:b4:4e:22:56:c3:bd:66:f6:f7:0a:6f:84:be:36:6d:43:
3a:9b:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:27:16 2026 by rpki-client