
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: gPmzDsTi1q1ihIQVjDb1t3frWMSuRFELq8E51OmbQnA=
Subject key identifier: 4D:A8:66:94:48:28:DC:E9:39:B7:AC:68:2C:A7:44:A9:CE:3F:8F:DD
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 0760
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 0756
Signing time: Thu 10 Sep 2026 21:41:29 +0000
Manifest this update: Thu 10 Sep 2026 21:41:28 +0000
Manifest next update: Thu 17 Sep 2026 21:41:28 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: 0wS/92N+GVwjzOWyovt0DJepM/c/s1Pr49DyVfFcg9I=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Sep 10 21:41:28 2026 GMT
Not After : Sep 17 21:41:28 2026 GMT
Subject: CN=6aa32409-4c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:0a:a3:c0:4d:b7:f7:4b:8f:2e:41:f6:38:
b2:59:87:ca:2e:0f:05:6d:4e:b5:1f:20:bf:5b:ac:
13:33:cd:36:2d:0d:db:48:8b:da:1a:6e:1e:f7:cd:
bc:b4:fc:14:30:fa:0a:c7:6c:b8:dc:83:9e:2b:07:
90:48:95:4f:af:88:f6:6a:32:49:64:64:61:ae:7f:
37:f4:e6:03:65:a1:83:74:8f:f2:87:83:e0:08:cb:
57:ef:cd:d9:a9:4b:02:43:a9:b2:48:22:f4:62:b5:
42:88:d8:45:2b:44:72:79:ff:46:90:f7:98:54:5d:
4a:28:72:6f:a1:e2:0e:9d:d3:46:84:59:68:b0:44:
8e:3a:38:bf:fe:06:72:bd:f7:ac:5e:6f:7d:f8:3e:
f1:b8:ff:a2:47:42:fc:49:51:17:f3:2d:8e:85:44:
da:4f:b8:29:57:3a:09:00:aa:90:5c:d5:5a:8d:87:
db:cb:4d:a1:a9:31:e8:12:50:cc:5d:b1:5a:44:0e:
24:5c:26:5b:18:de:7e:58:67:8f:44:ff:03:22:77:
8b:96:9b:a3:f2:b6:7f:27:25:3c:c3:40:8d:90:ea:
8e:c4:a5:1f:ac:68:03:60:54:f9:0a:44:fc:63:7a:
6c:4e:cb:3c:92:bb:c4:14:c5:66:88:1f:74:db:ca:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:66:94:48:28:DC:E9:39:B7:AC:68:2C:A7:44:A9:CE:3F:8F:DD
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:81:05:64:d7:39:e2:62:28:89:92:1f:6d:b1:bf:a2:b3:
f0:cb:bb:b7:ca:3f:44:e5:6b:f1:00:f8:54:13:71:6e:9e:9c:
58:64:3b:85:a1:89:d1:8e:b7:76:52:b4:96:b6:2c:39:e5:46:
6e:25:e4:99:91:af:f0:22:2f:98:10:f8:17:80:4b:86:53:37:
ce:e0:e5:20:37:af:79:07:fb:92:93:7d:cb:5c:0b:79:46:e0:
e1:78:fa:d9:16:d5:13:f5:67:e0:47:54:15:fe:4b:e3:b3:aa:
03:3f:bf:4a:4e:6f:af:ec:08:bf:9d:38:de:ff:ec:12:03:61:
e4:d4:5c:79:b9:6a:ba:a0:d3:eb:f5:17:b0:f6:3b:ef:8f:78:
aa:c8:d6:46:93:39:68:66:6b:50:e3:a3:6e:25:0b:78:c5:8f:
34:b0:4b:ae:fc:7b:60:d0:16:6d:9f:7b:7c:30:9a:39:02:5f:
52:f7:d1:54:72:3e:a4:d9:53:16:32:3c:a3:48:cf:f1:e8:75:
c7:37:55:eb:94:98:86:80:f8:f6:8a:2c:47:fb:8e:14:f6:91:
9f:41:21:f8:97:72:38:57:c9:18:5d:7b:00:13:6f:a3:f3:00:
93:a4:4a:d2:73:ca:4e:b7:d9:87:76:8b:a2:c1:e9:4a:94:36:
b4:a9:f8:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3
NEVERUJCQkYwHhcNMjYwOTEwMjE0MTI4WhcNMjYwOTE3MjE0MTI4WjAYMRYwFAYD
VQQDEw02YWEzMjQwOS00Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4kKo8BNt/dLjy5B9jiyWYfKLg8FbU61HyC/W6wTM802LQ3bSIvaGm4e9828
tPwUMPoKx2y43IOeKweQSJVPr4j2ajJJZGRhrn839OYDZaGDdI/yh4PgCMtX783Z
qUsCQ6mySCL0YrVCiNhFK0Ryef9GkPeYVF1KKHJvoeIOndNGhFlosESOOji//gZy
vfesXm99+D7xuP+iR0L8SVEX8y2OhUTaT7gpVzoJAKqQXNVajYfby02hqTHoElDM
XbFaRA4kXCZbGN5+WGePRP8DIneLlpuj8rZ/JyU8w0CNkOqOxKUfrGgDYFT5CkT8
Y3psTss8krvEFMVmiB9028pFdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2oZpRI
KNzpObesaCynRKnOP4/dMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy
M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy
ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF26BBWTXOeJiKImSH22xv6Kz8Mu7t8o/ROVr8QD4VBNxbp6cWGQ7haGJ0Y63
dlK0lrYsOeVGbiXkmZGv8CIvmBD4F4BLhlM3zuDlIDeveQf7kpN9y1wLeUbg4Xj6
2RbVE/Vn4EdUFf5L47OqAz+/Sk5vr+wIv5043v/sEgNh5NRceblquqDT6/UXsPY7
7494qsjWRpM5aGZrUOOjbiULeMWPNLBLrvx7YNAWbZ97fDCaOQJfUvfRVHI+pNlT
FjI8o0jP8eh1xzdV65SYhoD49oosR/uOFPaRn0Eh+JdyOFfJGF17ABNvo/MAk6RK
0nPKTrfZh3aLosHpSpQ2tKn4vQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:08 2026 by rpki-client