
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier: MnqQ9YQ1f999+A8ei0FPJAvXcVi11FPeef3uus5g8zg=
Subject key identifier: 87:78:34:DE:74:B9:32:B3:4A:4C:C3:3C:6A:11:2C:47:10:1B:08:A5
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial: 0D17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number: 0D0B
Signing time: Fri 02 Oct 2026 18:33:59 +0000
Manifest this update: Fri 02 Oct 2026 18:33:58 +0000
Manifest next update: Fri 09 Oct 2026 18:33:58 +0000
Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: 1LnsVRSl0OrHIPdwWeohDW1fAufJ4/ahUjPwufn1yRI=)
2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Validity
Not Before: Oct 2 18:33:58 2026 GMT
Not After : Oct 9 18:33:58 2026 GMT
Subject: CN=6abff916-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:fe:4d:c9:8c:b2:21:cc:1f:b4:a5:2a:0a:
e7:cf:3a:f4:20:09:7b:42:af:f9:e3:94:15:4d:50:
b5:bd:4c:99:95:96:c0:98:60:aa:b5:3b:e3:75:cd:
91:94:6e:46:bb:69:2e:9d:d3:2b:b2:51:99:ab:2c:
f3:a9:d2:d7:f0:f6:03:ae:7e:91:4a:03:46:ed:91:
7f:e2:c0:7f:a4:b6:55:2f:fa:f9:8c:9d:c1:b8:28:
46:a8:7f:bf:9d:be:8d:18:7f:42:1c:e4:cf:de:a6:
dd:9a:44:fa:2c:f0:45:06:39:d7:db:c0:cc:42:f3:
32:13:82:b6:64:bd:87:e0:d1:3f:82:31:f0:d3:2f:
f7:f5:c5:78:95:48:4e:9a:c5:8b:08:6f:0a:1c:6e:
55:bd:ca:fb:a5:8c:21:80:f6:4e:ae:1e:6b:24:06:
db:c2:b0:0a:09:45:67:f6:a3:44:eb:ec:a6:75:91:
a7:4b:d8:4a:f5:35:ac:f0:5f:cb:9a:69:c8:9d:16:
41:0a:9c:98:9e:ed:81:4b:69:b8:40:b7:2b:30:c3:
72:d1:5b:ad:56:fe:d9:d1:f5:b3:d4:74:26:af:14:
94:33:d1:ee:2a:67:d0:22:f8:c5:2f:44:a3:cf:23:
9a:17:b5:e7:d0:ec:10:ba:36:54:88:a8:48:1a:ab:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:34:DE:74:B9:32:B3:4A:4C:C3:3C:6A:11:2C:47:10:1B:08:A5
X509v3 Authority Key Identifier:
keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:6e:0d:c3:da:0d:49:78:a7:75:22:ce:94:25:11:ad:a7:b9:
79:3b:a9:a3:21:01:73:af:fc:e9:72:6e:b9:21:14:a8:cc:db:
80:f6:16:52:0a:c4:56:a4:14:a7:ab:7e:3d:ba:6a:24:a0:46:
16:d2:72:38:81:8c:bd:80:0c:5d:e4:13:99:16:cf:e7:4e:b5:
77:5f:2b:48:80:2a:93:97:2c:89:db:88:1a:ec:3f:9b:58:1a:
fc:c6:ce:96:44:5b:93:f4:07:d1:72:69:bd:40:e9:ec:3c:0e:
26:2b:f3:2d:e2:46:aa:ca:97:c2:77:23:24:97:02:c9:72:4b:
e4:90:50:23:48:09:c4:53:0e:27:ff:2b:2f:72:6c:9f:62:64:
0a:85:72:19:e3:f3:15:52:89:ee:ba:f7:cf:00:2a:a5:4e:e9:
94:cb:3d:4e:40:30:35:dc:63:1d:17:6f:13:37:c2:a1:05:21:
27:59:d8:2b:12:d4:04:40:9e:c4:6a:6b:b4:24:f5:e8:cb:c0:
87:cf:9d:d7:ed:68:90:02:8f:6a:a5:24:cd:06:bd:5b:8b:c6:
ea:82:3f:47:98:a3:bf:7b:a8:03:1d:4b:b5:73:cc:e9:a6:07:
01:61:dc:c0:39:da:22:04:28:28:c5:2b:12:9c:f2:4d:14:8d:
4a:50:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:37:25 2026 by rpki-client