
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
File: 3MnOwPy4zLyvexzByLIVJW33h48.mft (raw, json)
Hash identifier: Z5hfrK/7hE6XiumHeN6aA4+4W1yqa6fPQR5CdUcTBzo=
Subject key identifier: B8:32:F5:A5:2F:5B:18:04:FA:9C:55:47:B3:AE:F5:53:2C:BA:42:1C
Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F
Certificate issuer: /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
Manifest number: 11
Signing time: Wed 19 Aug 2026 09:48:36 +0000
Manifest this update: Wed 19 Aug 2026 09:48:35 +0000
Manifest next update: Wed 26 Aug 2026 09:48:35 +0000
Files and hashes: 1: 3MnOwPy4zLyvexzByLIVJW33h48.crl (hash: 4sg5RKJnLxrATemEVSkQKdSggHdyRT/QxdwCsUV0N8M=)
2: 21FFC88285BB11F18D64891761A30FBC.roa (hash: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl
rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F
Validity
Not Before: Aug 19 09:48:35 2026 GMT
Not After : Aug 26 09:48:35 2026 GMT
Subject: CN=6a857bf4-1102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:b2:7c:fd:05:d7:e0:a5:83:85:b2:5d:81:
97:cc:07:54:d5:f9:81:d7:11:2d:2f:ec:e5:25:e6:
53:db:e0:78:d9:bf:88:7e:5d:0c:19:82:f2:bf:79:
32:64:5b:45:a7:76:9e:ed:34:b1:ff:31:3a:11:e2:
e6:8d:92:a3:d1:bf:ba:ce:e4:af:63:79:f4:a9:59:
07:9d:1f:6f:1d:8b:3a:fb:fb:f7:9f:e6:8f:5b:6c:
c6:d3:39:71:e4:45:4c:de:68:e3:d9:35:d6:b1:96:
be:ae:b2:35:fd:fe:61:e4:29:f5:35:40:22:33:94:
b3:8b:db:56:f8:d9:40:64:aa:f8:9f:bb:4b:29:01:
e7:2e:fa:57:1e:7f:65:f1:be:68:26:cd:72:07:13:
cb:90:9e:25:7f:0d:95:e1:8a:f0:ce:c6:62:f3:85:
ca:cf:98:6e:db:4e:2d:27:68:53:c4:de:bd:ad:33:
58:2e:8f:33:43:41:03:ed:18:5f:df:a0:48:c8:5d:
12:9a:1a:40:2a:05:0f:61:bc:09:e1:e4:90:58:bc:
3d:88:97:eb:79:28:c6:b6:ad:83:e1:d3:75:3d:ac:
8c:ed:0c:95:c3:ac:7b:87:7a:44:ac:07:dc:ed:54:
fe:4c:c4:3d:7d:ea:06:f6:34:d0:8c:7a:91:14:c8:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:F5:A5:2F:5B:18:04:FA:9C:55:47:B3:AE:F5:53:2C:BA:42:1C
X509v3 Authority Key Identifier:
keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:21:f1:8e:07:a4:cb:16:f9:03:43:9c:e2:a8:4b:2b:d2:9d:
ba:1a:9b:db:e7:4f:77:2b:a3:d8:fa:bd:fe:86:ef:bd:ae:41:
2f:31:3d:cc:77:9b:2c:e2:eb:cd:ff:67:ba:73:38:32:b4:70:
01:ff:68:e1:43:63:35:bd:25:ba:3d:05:e9:55:9e:3c:7b:41:
00:a3:dc:51:6a:4e:83:fd:38:54:ec:64:39:e3:d3:a5:6d:bc:
3c:7c:07:65:57:67:1b:36:46:81:22:1b:3f:d9:b4:bf:0c:52:
b5:46:2b:51:6b:99:a3:1f:ca:e9:3e:6f:a0:a9:aa:5e:79:05:
1e:45:5a:ec:9d:95:6e:b2:d7:a6:cb:d1:e7:d9:bf:a4:94:91:
bb:28:9a:a6:39:24:a3:f6:77:29:3d:6b:7c:3e:16:9f:86:59:
ce:e8:18:e8:76:5f:a0:7a:ac:a1:d2:25:0b:a3:df:60:d2:f1:
2b:6b:40:5e:3b:17:68:8c:59:fb:69:20:9a:0e:37:ca:94:c0:
32:dd:51:46:4e:43:ce:7f:23:9a:70:57:6b:a5:9b:8b:e8:c0:
00:d8:65:9d:ae:25:70:6b:ae:9d:98:9e:4a:a0:1e:60:13:87:
ad:57:ae:a4:d0:72:16:62:3a:c4:75:07:7d:7f:49:c0:94:69:
78:e0:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:49 2026 by rpki-client