
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json)
Hash identifier: Jo4VJl+othLQ8/wLUwtdhw8tXMAiBvkkozzuRRM/Qi0=
Subject key identifier: 7E:57:C5:F7:3A:43:30:F5:23:06:64:DD:E2:A4:73:88:4E:ED:96:31
Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
Manifest number: DA
Signing time: Wed 19 Aug 2026 07:29:27 +0000
Manifest this update: Wed 19 Aug 2026 07:29:26 +0000
Manifest next update: Wed 26 Aug 2026 07:29:26 +0000
Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: riglY5sTL061l49CezJNFNJE9v2x7Uhf33RevcTFc1s=)
2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: sAUXemNxO6xniEk3FsI/MUCXegnzm3Yy4E2YL2XqTBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Validity
Not Before: Aug 19 07:29:26 2026 GMT
Not After : Aug 26 07:29:26 2026 GMT
Subject: CN=6a855b57-9d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:4a:9f:26:cc:4d:0f:92:c6:6f:52:d8:9f:
9b:04:89:3e:2c:6f:8b:5b:05:41:2a:54:be:b7:3c:
c5:49:d9:ea:fc:d3:e2:d2:57:75:60:02:ee:b9:72:
b4:8f:12:4d:55:a4:5a:0b:1e:58:38:25:8e:bf:d5:
fd:5e:72:3f:f9:36:8b:c5:a7:9a:5f:b9:a2:72:38:
ee:8a:46:b9:6e:79:a7:ee:61:b1:97:88:30:04:50:
e6:71:40:86:3d:52:17:d5:c9:15:0a:b3:2f:45:68:
54:40:f6:09:91:29:20:2d:84:e6:c8:c2:cc:0a:a0:
76:55:84:2e:70:19:69:84:9c:a7:63:23:94:c8:12:
45:30:f8:91:0a:df:84:cd:4a:2a:ae:81:f8:05:f7:
4d:34:bd:0b:e1:15:23:33:ab:40:9f:ef:88:05:b0:
b9:ec:8a:c3:c2:c6:c0:51:2b:f2:b6:81:08:d2:51:
4a:bd:a7:56:f0:8d:d3:81:aa:a2:c8:c0:06:72:9f:
4d:8c:2e:11:36:9b:ff:c7:c7:87:49:24:2e:15:34:
88:7b:69:9c:33:0d:5d:7a:e6:87:b7:28:bc:88:46:
f9:e6:11:17:49:0c:9a:cf:37:43:61:cf:a7:ac:71:
2d:44:1a:70:1c:e9:94:c0:dd:1c:fe:37:c6:42:b9:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:C5:F7:3A:43:30:F5:23:06:64:DD:E2:A4:73:88:4E:ED:96:31
X509v3 Authority Key Identifier:
keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:bc:47:e6:4e:a2:2a:71:2c:2f:0e:4b:66:c2:9b:e0:0a:
cb:45:3f:6e:de:30:5c:3c:fb:ab:7a:12:5d:55:7c:fd:2d:9e:
fb:10:16:d8:fd:3c:99:65:b0:1c:63:b4:5f:d1:2c:63:06:2f:
3c:44:96:7f:04:15:6d:80:8b:6f:db:de:d2:87:96:d7:15:bc:
33:bc:6d:3e:42:bc:42:00:80:b8:2a:e0:8f:b1:d9:c9:3a:78:
df:f9:19:e1:6c:be:4a:43:31:b9:65:d2:04:ec:a3:f3:fd:8f:
25:31:fa:e9:ae:1c:81:de:de:f3:8f:88:80:ad:43:68:26:88:
67:fa:32:c8:d9:93:36:15:c8:e6:86:04:da:8a:b0:92:5f:a6:
78:45:6a:3a:c4:1d:70:35:d2:70:62:dc:89:65:1f:50:17:7e:
5a:43:79:26:88:b2:d3:a7:6c:10:7c:2e:08:b1:6e:16:23:9f:
57:e3:f5:75:95:26:70:48:0c:b6:5d:30:6d:b1:9c:fc:8a:3c:
11:14:4f:89:93:22:98:6b:35:5f:16:cc:1a:6a:7d:9d:17:3c:
c8:7a:10:53:b6:ec:3e:e0:8e:e4:b8:0a:a3:29:6b:a9:cc:b8:
5b:d8:62:e8:d0:69:92:9b:e6:87:3d:91:a9:fc:61:5e:dd:68:
96:0f:78:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y0QTYxMTAvBgNVBAUTKDczNzU4MkVDNEU4RkUzOURGNDJDMERDMjI5QkEzN0Qx
QjZCMzg2NUEwHhcNMjYwODE5MDcyOTI2WhcNMjYwODI2MDcyOTI2WjAYMRYwFAYD
VQQDEw02YTg1NWI1Ny05ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6dKnybMTQ+Sxm9S2J+bBIk+LG+LWwVBKlS+tzzFSdnq/NPi0ld1YALuuXK0
jxJNVaRaCx5YOCWOv9X9XnI/+TaLxaeaX7micjjuika5bnmn7mGxl4gwBFDmcUCG
PVIX1ckVCrMvRWhUQPYJkSkgLYTmyMLMCqB2VYQucBlphJynYyOUyBJFMPiRCt+E
zUoqroH4BfdNNL0L4RUjM6tAn++IBbC57IrDwsbAUSvytoEI0lFKvadW8I3Tgaqi
yMAGcp9NjC4RNpv/x8eHSSQuFTSIe2mcMw1deuaHtyi8iEb55hEXSQyazzdDYc+n
rHEtRBpwHOmUwN0c/jfGQrl4nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5Xxfc6
QzD1IwZk3eKkc4hO7ZYxMB8GA1UdIwQYMBaAFHN1guxOj+Od9CwNwim6N9G2s4Za
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRBNi8zQjY3QUQ4RTYz
QjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1MzBMQTNDS2JvMzBiYXpo
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjRBNi8zQjY3QUQ4RTYzQjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1
MzBMQTNDS2JvMzBiYXpobG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgPO8R+ZOoipxLC8OS2bCm+AKy0U/bt4wXDz7q3oSXVV8/S2e+xAW2P08mWWw
HGO0X9EsYwYvPESWfwQVbYCLb9ve0oeW1xW8M7xtPkK8QgCAuCrgj7HZyTp43/kZ
4Wy+SkMxuWXSBOyj8/2PJTH66a4cgd7e84+IgK1DaCaIZ/oyyNmTNhXI5oYE2oqw
kl+meEVqOsQdcDXScGLciWUfUBd+WkN5Joiy06dsEHwuCLFuFiOfV+P1dZUmcEgM
tl0wbbGc/Io8ERRPiZMimGs1XxbMGmp9nRc8yHoQU7bsPuCO5LgKoylrqcy4W9hi
6NBpkpvmhz2RqfxhXt1olg94Fg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:47 2026 by rpki-client