
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json)
Hash identifier: i5KeaZXyy+3tVN4h17IaiVswPxfNBi0V6Vx+C4sNEoA=
Subject key identifier: CC:FD:97:E8:56:ED:C3:63:62:D2:7C:68:9A:28:70:16:1E:D5:0A:82
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 07EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
Manifest number: 07D6
Signing time: Wed 20 May 2026 21:27:12 +0000
Manifest this update: Wed 20 May 2026 21:27:11 +0000
Manifest next update: Wed 27 May 2026 21:27:11 +0000
Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: FzzOJZCzt/ZMtPLO92mGFxVFDv60VqP4W2eBxB9/CeQ=)
2: 3576B330ABFA11F0A2E07C6AC4F9AE02.roa (hash: 0w3HfHH7UREiRpb2xtmCSCZqE3QWtDjCuYCvHhtDjnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Validity
Not Before: May 20 21:27:11 2026 GMT
Not After : May 27 21:27:11 2026 GMT
Subject: CN=6a0e2730-b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:1c:a5:dd:2d:5e:0f:80:8d:18:f4:df:bc:
97:34:f2:79:b5:e4:26:0f:76:ad:9d:10:41:ec:e0:
a0:a2:5b:c5:f0:46:0a:80:04:ff:45:f4:dd:b4:09:
f2:d3:e0:72:49:63:8b:c5:2a:65:07:22:40:a6:da:
54:15:4b:1a:05:49:86:83:35:8b:85:34:c7:58:92:
77:d0:2d:c9:a1:c0:ca:8d:8a:ca:23:67:c4:09:f6:
9d:1f:a6:7b:5c:e7:78:58:f0:f1:bf:1b:3f:33:6c:
49:7e:c1:6c:ae:23:33:98:53:eb:0d:39:90:66:55:
62:82:b2:0c:5d:c4:97:88:a7:51:e3:df:2b:ca:24:
b0:39:7e:9d:54:8c:4a:1d:77:e7:4c:8f:97:79:90:
19:2e:f9:2e:f2:44:ee:3a:7f:1c:54:94:53:14:d6:
fd:ba:e2:1a:d3:eb:3e:db:62:ed:14:da:10:f3:8d:
5b:79:ae:11:fc:bf:cb:5d:2b:3c:ad:88:e3:d7:dc:
e8:b1:82:e5:33:23:dc:c5:7a:8f:08:fa:b6:15:60:
c1:35:e8:51:a7:9d:eb:85:5e:5b:cb:18:2d:d8:c2:
46:33:35:f9:b0:3f:38:6b:f2:42:a4:d5:60:e4:b9:
2e:98:fe:ce:27:c0:5e:b7:44:6a:45:f5:a8:2c:94:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:97:E8:56:ED:C3:63:62:D2:7C:68:9A:28:70:16:1E:D5:0A:82
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ad:c3:6a:3b:b6:42:5a:0f:a2:19:5a:af:5e:46:70:af:7a:
93:5a:31:7e:76:0b:0e:79:8e:3d:b6:9c:84:ce:27:c8:d4:f7:
2d:3b:88:3a:61:45:22:44:70:9d:09:18:85:2b:64:a8:58:f0:
c1:a0:83:8c:ab:d3:df:95:45:f3:47:50:b5:9a:6a:b8:37:ce:
1b:78:5e:bc:f5:ee:c3:38:5a:13:8c:2b:ad:b5:04:b4:79:ad:
3e:e1:92:b2:d3:1e:d1:f8:50:10:31:ef:ce:75:51:9f:1b:49:
14:1d:85:03:ee:1b:6a:b9:a9:c1:8c:14:89:19:83:16:a1:68:
5f:fb:3d:d6:1f:77:1e:61:34:5c:21:44:12:a1:7c:0e:a2:fa:
51:2b:8d:f1:3a:58:d6:cd:13:07:c2:bd:75:83:fc:9d:d9:2d:
96:b6:5e:d9:b3:c8:d4:e1:20:53:30:c0:6a:0a:85:09:8b:03:
e6:da:88:0e:63:c7:7f:ae:92:a5:95:c4:08:25:22:56:6d:7d:
58:b7:de:9a:ef:7c:af:28:13:70:48:be:31:d2:fe:71:e7:62:
3a:88:6c:3e:e4:df:0c:a4:d8:7d:23:6e:ca:0c:16:7d:28:05:
94:ba:5b:77:2a:26:cc:6c:56:43:08:b0:18:33:c9:4d:08:52:
cf:2f:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:13:43 2026 by rpki-client