
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json)
Hash identifier: N8QGOIkcBRSKfyWN5eRXRWHQ/yMW/lEv7YBvvmqBNM4=
Subject key identifier: 7F:F3:FA:1A:A0:35:9E:9C:ED:4C:88:86:01:AB:A9:4C:D4:DF:B3:30
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 3569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
Manifest number: 3553
Signing time: Sat 20 Jun 2026 15:10:10 +0000
Manifest this update: Sat 20 Jun 2026 15:10:10 +0000
Manifest next update: Sat 27 Jun 2026 15:10:10 +0000
Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: 1/HsfuAbKvEGA/yeeFXJugrUnHAMbCPNr12svRbwXSQ=)
2: 1A1E4A7A6A6911F18287CF148C47A888.roa (hash: e7t3O1Ah3VYUL0Ck1v22QjBJxwwkiYn3N9EsqIZTSF4=)
3: 1998442A6A6911F18287CF148C47A888.roa (hash: E1gzRvDtOR1NNFuUzMYgLtnJy3x9g/2L0y6Ej2KdGug=)
4: 41623A12778111ED8F236A62C4F9AE02.roa (hash: YVBnkcJ0cIydZf/1Ah586DlROxB/mVc+54dX96q/hrs=)
5: 18DC10026A6911F18287CF148C47A888.roa (hash: ymTn2h6brHuaBs4v4Aw0KYm7jZAqJ38QtwYI300/OGU=)
6: DE670A60679D11EEAFBA0A5DC4F9AE02.roa (hash: hLiFwAy4wMBM35shHiRCq6rLulD6SSj4z9p7YraqScs=)
7: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 15:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jun 20 15:10:10 2026 GMT
Not After : Jun 27 15:10:10 2026 GMT
Subject: CN=6a36ad52-2774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:24:6e:30:d5:6f:93:5a:a9:35:f1:c8:e8:
ff:cc:7c:89:1d:d6:fb:f0:85:67:a5:a1:5e:9f:58:
b8:7e:07:ae:ba:0c:39:65:c6:49:2d:04:37:aa:c4:
0b:74:57:f7:f8:f0:e6:a8:a5:49:dc:08:e7:d7:ae:
d0:0d:9a:04:c2:41:26:ca:a8:90:49:9d:7e:79:ca:
65:df:57:01:09:3a:26:cd:45:02:e7:55:fe:3e:5c:
e4:21:5b:01:08:7f:4a:d7:42:16:50:52:01:df:4c:
75:a6:52:38:6f:73:f7:02:8c:c1:87:3d:5c:c5:1d:
3e:8a:e3:89:24:e7:1a:17:32:e8:4c:98:e1:4d:4b:
73:22:52:f7:e0:3d:36:67:47:91:80:9b:bb:ae:ca:
59:10:36:17:db:c6:e8:ba:ba:85:0b:7e:9a:64:63:
13:68:82:23:50:ba:04:db:1e:24:ff:25:2a:8a:d4:
46:36:2f:72:f7:c4:a5:cb:6b:99:f3:9d:c9:bf:82:
ef:d0:aa:20:03:3c:b5:e2:af:52:b5:90:79:5e:4a:
55:83:a8:a4:93:48:1c:51:13:b6:44:30:6c:be:a8:
dc:f8:b3:9a:08:78:7a:77:43:fc:0f:a9:50:0b:85:
78:78:8f:e8:d9:65:22:03:e5:84:f5:87:ac:f5:81:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:FA:1A:A0:35:9E:9C:ED:4C:88:86:01:AB:A9:4C:D4:DF:B3:30
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:55:25:a2:09:19:f0:37:b9:a9:35:21:06:31:26:3e:6e:1c:
9d:92:9f:7c:bc:42:3b:62:ba:e7:bc:8d:ba:0e:f7:5c:93:da:
9c:f8:0c:f5:1e:39:dc:46:f1:89:36:87:2b:5e:05:8f:78:f8:
bb:4d:7d:d9:fc:1a:c5:5c:63:12:ed:32:a7:de:ab:1b:e3:f8:
a2:ea:b2:c2:96:d0:82:bf:6d:40:04:de:81:05:9c:e2:f1:84:
2b:c3:4c:e5:03:0d:83:6a:57:cb:de:91:3f:1b:ac:6e:0a:d4:
a7:4b:8c:ea:dc:c0:5c:bc:ce:9c:06:95:7f:54:90:b7:8f:0a:
da:9c:c7:ab:f5:cc:38:02:70:7b:c2:50:3f:d9:98:bd:45:7e:
8a:72:63:92:8f:3d:49:53:ea:e6:b2:6f:9b:00:c6:81:3a:e8:
b5:aa:75:d2:aa:31:79:b8:2c:a8:f0:4d:37:4d:41:c5:33:2a:
c8:8e:8e:ab:74:40:c4:2e:90:d9:a4:d6:e2:7a:52:d7:d7:09:
2f:09:c9:4b:54:ac:ee:45:4d:7e:d4:71:89:00:9a:fe:b9:1c:
d0:5d:ff:58:a6:02:8b:27:db:ba:d2:1c:d5:56:c2:29:90:38:
cb:71:41:ad:ec:c6:5c:d7:06:90:fa:43:34:be:22:b8:83:39:
a8:a0:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:08:00 2026 by rpki-client