
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier: /J2/Qpv2wetd+THlPXXFAgI7KPWcv5pfe2CbvOJ7U30=
Subject key identifier: A0:92:9A:75:3A:10:98:15:F1:C0:C1:72:49:E1:26:B3:54:C6:A1:14
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number: 0723
Signing time: Tue 18 Aug 2026 22:21:15 +0000
Manifest this update: Tue 18 Aug 2026 22:21:15 +0000
Manifest next update: Tue 25 Aug 2026 22:21:15 +0000
Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: gdwb6wAqXMTBJk8nvu25EMBJvaJnGdA56g0XLV0Tkj8=)
2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Validity
Not Before: Aug 18 22:21:15 2026 GMT
Not After : Aug 25 22:21:15 2026 GMT
Subject: CN=6a84dadb-571e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:29:68:55:53:89:b8:c4:74:74:3b:72:b8:
f8:17:53:1a:ba:22:53:86:54:21:57:05:13:55:bb:
ef:2d:2c:0d:ad:36:05:dd:2c:72:e7:b7:4e:30:ae:
49:91:cf:08:b7:19:0b:19:57:2f:ce:3c:ef:a3:8f:
66:5f:57:a8:33:04:62:d9:2a:73:68:e7:e1:04:f2:
77:b8:97:53:0a:fb:4c:ae:7c:06:0f:bf:7a:7b:c7:
52:a0:00:f6:6c:b8:d4:59:98:4e:e9:df:ca:cc:22:
57:7d:24:76:46:aa:08:d2:37:c7:a4:b0:14:02:2e:
a2:48:33:e2:09:dc:7c:76:08:9f:c0:76:33:05:f0:
59:96:36:e7:62:d5:e1:93:bb:a9:a9:ab:cc:40:ad:
9f:3d:4f:4c:a1:66:2a:39:95:6a:42:16:74:a0:3f:
7b:ca:40:70:8e:c2:c6:a3:0f:1a:4e:ad:fb:12:e4:
a6:28:10:dc:d0:66:26:9d:58:f7:0b:69:8f:74:30:
7c:a8:8d:3d:6b:79:8f:65:2a:24:3c:f5:91:cb:bf:
cb:95:1b:37:f2:4f:18:9a:5f:37:c0:46:33:88:ea:
fd:91:b4:de:a0:fe:ff:5f:0a:4a:b0:5f:a9:73:78:
f3:30:a9:f4:1a:45:b7:30:da:eb:84:e0:a4:75:ea:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:9A:75:3A:10:98:15:F1:C0:C1:72:49:E1:26:B3:54:C6:A1:14
X509v3 Authority Key Identifier:
keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:30:0c:48:dc:92:86:40:49:20:20:5d:1d:68:75:27:a7:
db:1e:e0:fd:32:a0:38:3a:3f:11:70:e7:1e:35:24:bb:36:d7:
dd:04:8d:71:fa:c3:91:8b:ba:47:01:fd:aa:27:f3:21:b5:b9:
ec:94:69:79:aa:47:f6:b7:e6:cf:cc:72:42:c6:08:94:a9:78:
28:0d:2a:b6:1a:a3:eb:d5:fe:ae:08:d0:92:5c:03:6c:ae:d7:
0c:b1:59:e7:cc:14:ed:58:8a:70:b3:b3:d7:4d:36:f4:9f:f8:
c5:4b:b1:59:6b:ee:8c:d6:97:72:ea:de:45:33:8d:b6:cd:50:
96:04:9d:8b:15:24:bd:94:88:d1:67:a5:d8:b2:30:1f:b1:75:
34:fa:86:c6:06:85:a3:fc:41:91:59:68:ce:b8:e3:7e:ec:50:
e0:b4:b4:05:27:a2:23:26:23:8a:f8:2a:dc:22:23:ea:ae:2c:
a1:02:75:84:6d:42:f0:d0:8a:3a:16:5a:eb:07:65:61:cd:d6:
bf:2d:d3:b8:08:19:e8:0f:d5:27:86:80:2f:96:29:3c:07:96:
32:68:c2:f7:34:b6:69:aa:61:d4:0f:26:8a:bd:d9:63:22:50:
1f:88:f8:6b:0d:e6:5b:53:99:e8:0b:43:17:d1:76:b2:a2:8c:
09:39:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:10 2026 by rpki-client