
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json)
Hash identifier: 6ah+DyWGv9aEFn4wGFzZ4s4kfr2ICsmvUg+6y/HrCvw=
Subject key identifier: 60:E6:5C:F2:2D:60:A1:0A:56:8B:D6:6E:CE:AC:1F:66:4B:81:8D:DB
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 354B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
Manifest number: 353A
Signing time: Wed 06 May 2026 15:11:44 +0000
Manifest this update: Wed 06 May 2026 15:11:43 +0000
Manifest next update: Wed 13 May 2026 15:11:43 +0000
Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: +4uvGmnU4x+oLv16FIR1WWLV79ylkSOUKJcqoWZIZNw=)
2: 41623A12778111ED8F236A62C4F9AE02.roa (hash: oWvONdzVtdNZzN0GXwvLtJk1cQSVlxMNqPZEYE5ztwk=)
3: DE670A60679D11EEAFBA0A5DC4F9AE02.roa (hash: S+2nZ/LwiFl9lCGr/q1pgYuQMM2ksAuYCF9P9dTV9cI=)
4: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13643 (0x354b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: May 6 15:11:43 2026 GMT
Not After : May 13 15:11:43 2026 GMT
Subject: CN=69fb5a30-b300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:cf:6e:78:7b:7a:84:ff:d8:ab:b5:a2:32:
0a:11:e8:9e:08:3b:1f:51:0b:88:c3:f8:fe:14:f5:
82:2b:04:26:de:62:5d:22:1b:71:ed:9c:4d:be:54:
fb:98:29:0f:6b:91:b4:ee:09:c9:2b:97:a2:34:a5:
8b:ce:3f:a9:cf:7f:e3:67:35:a5:38:80:8a:ed:e3:
73:43:e4:26:8d:99:d7:a1:05:72:c8:19:06:2b:8f:
2e:e5:42:dc:4f:0e:73:d8:8d:74:93:2b:51:6f:ec:
70:27:ec:f4:27:8d:48:b9:20:f0:c0:6d:cb:23:d7:
1b:35:c1:9a:df:d9:01:8a:9c:72:2b:53:3f:a0:44:
e0:f1:ca:4f:bd:7b:18:3e:e6:06:b6:9d:0f:c5:74:
f2:42:ff:e6:d6:10:72:22:9a:b1:29:31:04:4e:1b:
88:04:97:90:83:6c:90:f5:a9:9d:ca:8a:5f:cd:1f:
fc:a9:fe:f0:ae:49:2c:6e:5a:69:db:62:47:bc:c7:
2e:7b:b2:6b:91:28:d7:ed:22:de:ed:6c:69:ff:b5:
d4:9b:9e:87:a2:d7:86:74:25:36:c6:8d:02:fa:20:
3f:c5:34:93:18:ea:9a:3a:f5:22:20:1e:d1:ca:a1:
2f:30:cd:25:77:81:eb:7d:2b:a2:9d:c1:fd:0c:2e:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:5C:F2:2D:60:A1:0A:56:8B:D6:6E:CE:AC:1F:66:4B:81:8D:DB
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:0b:70:30:6a:a7:b1:fe:c2:f6:af:f9:2f:10:67:55:4e:
a2:af:cd:71:05:62:2c:03:c6:01:0e:d0:e9:00:4b:b4:5e:5d:
72:32:6e:a7:00:3f:91:40:05:d4:13:73:7a:25:1a:fc:d8:05:
64:85:b9:dc:d5:eb:00:27:f5:aa:77:08:84:8f:78:6a:fb:1b:
a7:95:13:ae:89:bf:ae:0b:2c:2f:6f:9c:d8:bf:d9:47:8a:8d:
af:82:38:3e:7d:e9:04:d5:2f:14:34:3e:bf:58:76:6e:c8:85:
8f:5b:24:b2:8a:ad:72:ac:61:3a:3f:a1:e7:cf:05:32:0b:dc:
6f:3e:cd:67:3a:65:a8:45:78:f4:83:d1:3a:b6:a3:0f:c9:ff:
df:ef:6a:a8:e5:63:a5:f6:93:6d:45:05:e4:aa:44:0c:30:17:
59:d3:36:6f:09:9b:bc:d6:60:b5:98:1d:b1:26:14:d7:ce:8e:
5c:26:e1:41:61:23:06:4b:d7:20:d9:8e:5d:b9:c6:38:77:05:
bb:9a:84:62:fb:db:92:8e:09:6c:1d:c0:c5:18:c1:d6:f2:03:
e4:20:dd:16:21:d6:9f:31:39:75:ea:21:fb:82:a2:22:ad:46:
37:8c:5d:91:ff:04:b1:b7:e0:3c:e3:c1:e5:87:fb:36:e3:20:
01:ca:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:38:59 2026 by rpki-client