
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: M6A36SFwkN4zEgo3DahXBwvg5VRyhaB+RdrswSGk2wg=
Subject key identifier: 37:64:72:6D:90:5B:22:F2:00:17:F4:0C:0F:7E:BE:17:AD:CF:F5:46
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 020A
Signing time: Sat 17 Oct 2026 03:44:33 +0000
Manifest this update: Sat 17 Oct 2026 03:44:32 +0000
Manifest next update: Sat 24 Oct 2026 03:44:32 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: 536YIHDTU//SyaNJ3ERlJxH5xJGydZ4mGF+mROf4jp8=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 03:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: Oct 17 03:44:32 2026 GMT
Not After : Oct 24 03:44:32 2026 GMT
Subject: CN=6ad2ef21-8c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:e6:b1:39:06:7a:08:67:1e:79:5d:93:f2:
04:0f:78:03:fe:b9:ed:a4:d3:1b:38:21:94:ec:bc:
ff:88:dd:eb:86:fd:57:df:1f:a7:dc:cd:7f:32:55:
4d:74:ff:aa:17:e7:ab:48:8d:5b:25:bb:74:6f:f5:
eb:16:a2:f6:65:43:65:c5:0f:a3:ed:9b:cb:b7:ae:
5d:5f:f8:6e:14:cb:d5:a2:45:5a:e7:0b:db:0a:a6:
44:af:ec:b3:6b:86:04:bf:2f:0f:7b:f1:6e:67:95:
f1:5e:a3:2e:66:20:95:46:ae:b1:ac:a7:df:45:7d:
3d:ac:30:a6:d2:46:8d:57:56:04:27:67:11:8e:7a:
51:08:ca:a0:1e:ef:71:64:a5:09:42:35:90:1e:17:
7c:18:87:32:da:9e:82:2f:5d:77:ec:6d:5c:62:81:
cf:46:83:a8:2d:06:31:40:9e:9c:7a:1f:fa:6f:d8:
1c:cb:1c:80:e7:a0:31:36:c2:8f:79:01:16:82:03:
2c:77:81:40:bc:25:1a:6b:25:b1:12:23:d2:63:73:
3e:1b:be:76:32:8a:80:9d:51:bd:7e:36:41:94:61:
5e:ff:19:18:d6:5f:07:f9:aa:fc:81:26:3d:97:d7:
a4:01:26:44:65:e9:e2:28:29:0e:5e:02:04:c2:a1:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:72:6D:90:5B:22:F2:00:17:F4:0C:0F:7E:BE:17:AD:CF:F5:46
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:ce:1f:43:de:36:25:12:1d:a0:fd:0d:f4:b4:9f:1f:37:
68:46:6c:25:72:94:49:65:33:ad:c0:de:21:2c:f4:2f:13:10:
05:8d:c2:73:28:e3:3d:5a:75:23:43:e4:ba:bf:c5:c4:57:87:
e4:87:b4:af:0c:08:b8:11:25:00:45:39:12:52:75:2b:d5:23:
32:a3:fe:02:95:be:48:5e:f1:1e:59:97:76:67:2e:2c:2f:e0:
c1:14:09:f0:8b:5d:c4:cb:fd:a1:40:f3:e1:66:30:03:ee:f9:
ac:b8:ba:b9:10:1f:01:74:60:41:ba:a9:df:84:a2:76:91:a4:
f7:d1:52:a7:c3:c3:9e:ee:7d:c2:dc:f7:78:0c:7f:46:7d:eb:
20:84:73:a5:d9:38:db:05:79:d2:fd:12:4b:2f:77:57:9a:20:
48:9e:f6:33:aa:cb:44:f6:11:1f:e9:14:be:53:ad:ac:1c:1c:
3e:40:6b:75:11:8f:2a:70:4f:9b:52:2c:ea:53:6d:72:73:19:
74:10:82:e1:b0:30:5c:65:6d:be:02:a6:67:85:20:5d:d7:2a:
01:c6:d9:c9:bb:b3:0b:b7:77:55:5d:e8:b9:b6:ed:89:fb:d7:
75:c8:a3:fc:18:0c:df:a2:c2:78:50:2a:c9:76:60:2c:58:3e:
02:f0:51:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC
RkEzNThBRUYwHhcNMjYxMDE3MDM0NDMyWhcNMjYxMDI0MDM0NDMyWjAYMRYwFAYD
VQQDEw02YWQyZWYyMS04YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0kHmsTkGeghnHnldk/IED3gD/rntpNMbOCGU7Lz/iN3rhv1X3x+n3M1/MlVN
dP+qF+erSI1bJbt0b/XrFqL2ZUNlxQ+j7ZvLt65dX/huFMvVokVa5wvbCqZEr+yz
a4YEvy8Pe/FuZ5XxXqMuZiCVRq6xrKffRX09rDCm0kaNV1YEJ2cRjnpRCMqgHu9x
ZKUJQjWQHhd8GIcy2p6CL1137G1cYoHPRoOoLQYxQJ6ceh/6b9gcyxyA56AxNsKP
eQEWggMsd4FAvCUaayWxEiPSY3M+G752MoqAnVG9fjZBlGFe/xkY1l8H+ar8gSY9
l9ekASZEZeniKCkOXgIEwqHGJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdkcm2Q
WyLyABf0DA9+vhetz/VGMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2
OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3
VW50WDdBT0E4ZnVfbzFpdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB0POH0PeNiUSHaD9DfS0nx83aEZsJXKUSWUzrcDeISz0LxMQBY3CcyjjPVp1
I0Pkur/FxFeH5Ie0rwwIuBElAEU5ElJ1K9UjMqP+ApW+SF7xHlmXdmcuLC/gwRQJ
8ItdxMv9oUDz4WYwA+75rLi6uRAfAXRgQbqp34SidpGk99FSp8PDnu59wtz3eAx/
Rn3rIIRzpdk42wV50v0SSy93V5ogSJ72M6rLRPYRH+kUvlOtrBwcPkBrdRGPKnBP
m1Is6lNtcnMZdBCC4bAwXGVtvgKmZ4UgXdcqAcbZybuzC7d3VV3oubbtifvXdcij
/BgM36LCeFAqyXZgLFg+AvBR5g==
-----END CERTIFICATE-----
Generated at Sun Oct 18 10:48:26 2026 by rpki-client