
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json)
Hash identifier: yMg/bj18fGN1hATjQBMuFTe6VYVz4w+i5XSR+8GK7aE=
Subject key identifier: 64:DE:EB:A2:25:F7:14:92:C0:3F:B3:E3:2E:9E:7C:92:63:CC:04:49
Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
Manifest number: B1
Signing time: Sat 03 Oct 2026 07:43:58 +0000
Manifest this update: Sat 03 Oct 2026 07:43:58 +0000
Manifest next update: Sat 10 Oct 2026 07:43:58 +0000
Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: SuC3ooOaNZwB4BOqT2qn93YG5VSNIASDIL2JaAV6HxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Validity
Not Before: Oct 3 07:43:58 2026 GMT
Not After : Oct 10 07:43:58 2026 GMT
Subject: CN=6ac0b23e-33db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:1b:a7:0c:5f:99:20:9c:2b:60:25:22:93:
ad:0b:a0:55:1c:fe:b5:4c:bc:b4:ea:8f:e9:f3:1e:
ba:a8:f3:45:e3:be:aa:87:30:9b:d3:a7:ac:a4:ed:
81:b7:69:4e:e1:9b:e6:23:bc:2a:8f:bb:4a:2d:7b:
74:9e:eb:d6:e5:98:42:1a:ed:9d:62:78:42:77:0c:
3c:30:99:d2:8f:08:de:22:e5:74:d1:0c:bd:47:d8:
d3:67:cc:27:35:b8:65:62:d2:c4:f2:90:49:bf:ba:
33:ad:1e:20:95:ff:2e:7b:47:61:47:83:99:97:e0:
ee:f8:26:b8:b9:4a:71:56:65:13:9f:e3:d8:44:cf:
1c:0f:68:76:6a:4b:9a:b5:5a:2a:12:8d:d3:77:a3:
e4:16:10:83:40:1b:7c:52:8f:66:02:cf:23:b1:6b:
4e:14:b0:ae:bf:84:9f:8d:cf:81:55:83:f2:82:8a:
44:73:17:17:1b:04:70:ae:7e:cd:0a:06:1c:6d:38:
62:07:e1:15:6a:08:6d:27:7c:ea:41:16:fa:25:f9:
84:75:b1:6d:a4:7a:f3:84:29:76:e2:f8:d0:0b:e2:
75:67:ae:f2:f1:d7:6f:c3:0f:c4:ca:b7:a1:e3:fc:
2a:11:bf:2b:26:33:d4:9d:2b:7a:f2:2a:a8:fb:78:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DE:EB:A2:25:F7:14:92:C0:3F:B3:E3:2E:9E:7C:92:63:CC:04:49
X509v3 Authority Key Identifier:
keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6f:9f:ca:e7:45:7e:4d:0c:b7:9d:84:ee:d7:13:f4:ff:b2:
24:57:bf:32:13:cd:f3:84:19:de:36:e6:71:52:c5:cc:97:ae:
af:5c:2c:4d:e7:88:89:87:1f:19:65:1d:a6:bb:9e:0f:e3:81:
b8:d5:e0:52:b3:4e:5b:13:c8:1a:bb:4b:55:fb:d7:95:3b:23:
55:12:9c:b6:19:36:ef:2e:de:5d:b0:35:36:e9:5a:99:76:94:
64:5e:b3:d1:92:db:4d:5f:a7:24:a1:99:4e:0c:8e:62:08:c7:
8d:1e:a1:77:63:a5:18:9b:50:9e:c9:62:f0:b8:35:d9:8f:d7:
8f:fd:45:3a:97:51:fb:1d:78:79:e7:53:d8:8f:9c:c0:2e:10:
3c:b2:67:c4:2b:c3:9c:6a:15:82:1c:a6:0e:a1:b3:0e:5c:2a:
e4:d5:bb:3a:55:c4:13:2d:23:91:08:50:af:66:9e:8d:32:fb:
7a:9c:7e:97:ba:b6:ac:34:ce:4e:bd:39:88:9d:15:02:f2:7e:
48:29:bb:bf:ef:68:76:f6:28:1c:4e:d4:ac:e8:28:c0:60:e2:
e8:a3:ea:71:6d:82:1f:c0:cf:f1:0d:30:05:7e:ca:0d:0b:76:
a1:da:bb:38:d0:d0:dc:bb:71:ce:64:28:92:b4:e1:4a:67:dc:
d2:63:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:19 2026 by rpki-client