
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier: QFskPnYSSNq+azQz7IlSzJkRPZR3++SsqRMRi2VD+AY=
Subject key identifier: 49:8D:83:EA:27:E5:ED:7A:13:CB:12:7A:33:B4:36:B4:CF:31:84:F1
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number: 042E
Signing time: Sun 05 Jul 2026 00:42:29 +0000
Manifest this update: Sun 05 Jul 2026 00:42:28 +0000
Manifest next update: Sun 12 Jul 2026 00:42:28 +0000
Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: FEjA7OPRtRhSzG3hMrxcIemwcepg7I3uKr1zrouHxBY=)
2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=)
3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 00:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Jul 5 00:42:28 2026 GMT
Not After : Jul 12 00:42:28 2026 GMT
Subject: CN=6a49a875-0942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:19:1e:be:92:bb:15:8f:3a:e3:4f:af:06:
60:dd:1a:41:92:17:a9:10:32:2b:08:8b:79:30:28:
2a:0b:4f:e4:0e:a7:77:db:4c:05:34:d6:bb:58:6f:
97:bb:7d:61:e1:15:9a:88:67:91:d0:2d:bc:d2:0d:
2a:23:61:2d:2b:38:70:d3:1d:d2:2a:72:cb:c2:cd:
22:93:4b:85:28:39:f9:7f:d5:f3:30:e6:fb:79:47:
7a:b2:00:29:96:ba:91:d2:d1:ff:a9:d5:08:2f:e7:
46:78:21:62:a3:2d:c5:eb:74:f3:d1:ac:12:16:34:
ba:db:42:a9:9d:51:9e:14:59:f1:8b:cf:6b:e5:64:
c3:de:d0:1a:4d:66:2c:b0:6e:f7:b4:9a:e0:b8:fe:
ef:63:07:8e:47:b5:09:29:73:08:b5:33:62:69:5d:
ec:e4:e2:7e:2b:97:03:ab:f5:84:e0:76:bc:17:29:
e2:e6:64:b9:3a:03:e7:59:42:98:f3:56:30:dc:5e:
41:38:c6:94:f5:98:72:6a:92:14:dc:94:b8:65:2f:
a1:73:c8:dc:87:6b:2c:88:c4:f1:ef:fb:57:76:f5:
13:47:0a:af:26:63:ec:f1:57:10:4b:ac:5f:74:93:
1b:21:17:67:23:8d:78:3f:f4:93:35:72:80:a9:96:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:83:EA:27:E5:ED:7A:13:CB:12:7A:33:B4:36:B4:CF:31:84:F1
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:2b:e3:b8:e8:bf:64:5b:9c:7f:b7:d3:c0:aa:70:67:b2:9f:
82:2c:f4:79:7b:31:bc:e7:60:a8:75:a8:cb:13:5b:c6:d9:91:
c2:66:3e:ed:a3:df:7d:ec:71:76:8f:8c:0a:97:06:29:34:89:
be:ec:9f:f5:fd:b9:1e:09:09:44:97:c9:70:86:2e:d5:00:0d:
15:87:e3:45:a7:82:8d:51:9b:63:f4:ca:c7:0a:6f:9f:7f:6b:
ce:3d:77:c8:84:ed:88:42:94:af:ca:9e:ce:3f:d1:8f:2d:bd:
05:c9:0c:a5:26:ee:0d:f9:55:cf:05:8f:3f:a6:32:53:b1:6f:
3e:95:b0:ce:04:cf:11:da:3d:30:b9:0e:98:5e:d4:43:d3:6c:
2a:71:b7:5b:fb:67:c7:79:eb:a7:31:13:b8:f9:33:72:f3:97:
01:32:aa:f3:b3:4c:d5:54:35:28:a5:1b:f6:6d:c8:a2:94:91:
f7:d5:5d:a6:80:68:d4:39:83:cc:c0:02:7b:4a:83:ec:ea:32:
60:a6:25:e4:66:69:52:8f:b2:68:58:1a:8f:e8:54:1a:e9:a0:
e4:b0:d6:d1:4f:dd:af:3d:cf:46:97:42:e8:17:a9:75:f5:19:
44:35:ea:ca:3e:b2:ee:23:88:41:d7:7f:55:a6:02:94:75:cf:
fb:21:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:14 2026 by rpki-client