
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier: XBXAEJjQ/CWjIPqxrLccteTocmwBf8qcTBtnzR8oTa8=
Subject key identifier: 06:B5:4B:C1:BD:92:46:CD:75:41:AF:1E:38:BD:3A:A7:A4:C1:01:6D
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number: 3C
Signing time: Thu 03 Sep 2026 08:48:07 +0000
Manifest this update: Thu 03 Sep 2026 08:48:06 +0000
Manifest next update: Thu 10 Sep 2026 08:48:06 +0000
Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: HCqCj3B9/hm8FpYOeMhrDUiLGpwQQE1oqEzi/agMMnk=)
2: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=)
3: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
4: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Validity
Not Before: Sep 3 08:48:06 2026 GMT
Not After : Sep 10 08:48:06 2026 GMT
Subject: CN=6a993447-e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:04:a1:a1:da:29:33:4d:b3:59:d7:3e:c2:
c6:6e:cc:b2:76:6b:71:56:b5:a9:53:4e:9e:49:af:
44:4d:16:cb:51:7d:cb:47:db:cc:3c:ad:69:51:08:
fa:92:c9:e3:7c:32:1c:6b:55:5e:29:f0:3c:53:e2:
74:93:f6:fb:5a:60:54:b3:9d:b8:73:1a:b5:43:34:
0f:06:bd:95:59:ad:55:d0:31:4a:92:b9:5a:bc:64:
33:b4:7a:a7:5e:46:8b:1b:66:96:3f:e4:7e:43:fc:
05:2a:12:72:94:f8:a3:54:bf:08:3b:f6:da:b8:5f:
6d:d6:fa:96:e6:02:74:a5:74:ee:bc:4d:9f:2b:7a:
65:f9:65:3b:f9:21:a0:b4:14:1e:9d:6b:5a:f1:a2:
5b:5e:a1:30:97:30:8c:4a:15:0a:47:28:da:78:ad:
9a:07:4e:00:b1:35:7d:70:03:cd:92:fa:80:f7:fb:
55:c4:c5:2c:02:f7:5c:ac:aa:10:60:4d:47:d2:0b:
c7:2a:a7:7e:1b:3e:38:ef:3e:64:31:09:4d:88:1a:
08:64:12:37:ef:da:81:8a:37:3e:ab:8b:32:0f:73:
04:ad:cd:f1:4a:38:4b:3c:91:d8:66:f9:1e:5f:93:
2c:1b:0f:33:f4:ac:bf:c6:5c:7c:4f:8e:d3:7c:03:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B5:4B:C1:BD:92:46:CD:75:41:AF:1E:38:BD:3A:A7:A4:C1:01:6D
X509v3 Authority Key Identifier:
keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:46:1a:97:83:35:94:ea:d5:e5:a8:ec:79:8e:55:28:2c:
fb:24:ce:f7:6f:00:73:eb:8d:64:c1:3a:b4:10:2b:56:29:68:
1a:88:0c:06:93:43:94:c5:42:d7:c8:6e:fb:79:70:1d:21:93:
38:f7:53:cd:c2:1a:5d:58:87:be:ba:49:ea:0c:80:1f:80:d0:
14:0a:bd:74:c7:9e:69:c4:52:25:6a:ac:8b:23:e5:de:09:9e:
d5:bf:2f:b2:e7:6d:a7:3e:3f:0e:dc:a0:6e:b8:37:52:85:f4:
f8:7b:44:26:dc:da:de:ce:12:87:97:a0:c2:a1:ed:5a:7c:24:
37:57:ec:05:4b:62:bc:82:ec:fa:79:cc:73:2e:c5:69:fe:19:
17:21:43:52:bb:3d:a8:07:6b:e8:b6:9c:05:7c:ba:91:7d:24:
90:f5:b4:ba:8a:73:ef:ee:dc:9e:02:8a:05:09:31:43:b6:d2:
d3:dc:75:04:c0:3b:83:0c:46:82:15:21:1a:7c:cf:8a:42:57:
fe:29:d4:23:75:e1:e3:df:5c:b3:6b:d7:3d:5a:02:dd:32:dc:
fe:63:6a:c5:96:6d:8a:46:64:56:24:ea:e5:40:53:7b:0b:e3:
e5:b8:6e:69:ee:88:14:af:f1:6f:dd:21:36:cd:09:5f:04:ed:
ab:53:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:52:12 2026 by rpki-client