
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json)
Hash identifier: t2Jy5RMvMlf/uoq29xZL6gL/tfcDkm55knzTp+sqjDs=
Subject key identifier: DB:E8:E4:63:2D:AD:CC:50:50:F2:60:D5:4C:DE:CB:EE:FF:95:24:2D
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
Manifest number: 0212
Signing time: Mon 11 May 2026 02:56:29 +0000
Manifest this update: Mon 11 May 2026 02:56:29 +0000
Manifest next update: Mon 18 May 2026 02:56:29 +0000
Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: XYaZyxQFGIP5i+/6ZpudVYyHWAVS2bmv1VMkg2miSbI=)
2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Validity
Not Before: May 11 02:56:29 2026 GMT
Not After : May 18 02:56:29 2026 GMT
Subject: CN=6a01455d-89ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:38:ec:5f:7d:d4:bf:be:79:b1:87:a2:ce:
83:c4:36:2e:04:33:a4:7e:12:fa:1f:ce:67:22:c4:
55:dc:dc:ed:89:70:3c:d0:ae:f7:1d:f4:90:59:9e:
b0:87:7e:80:5e:dd:02:ea:01:47:f5:16:10:de:46:
b2:94:7e:ac:bf:47:3a:a0:ba:9b:fa:3f:20:e9:d9:
6b:44:32:49:25:44:43:1b:fe:3b:60:48:90:48:18:
e0:c7:00:80:e8:98:41:aa:d8:45:b1:7d:8f:d2:91:
4b:0f:df:0c:0e:5c:1a:30:ce:ce:99:30:6a:b7:cc:
2d:0b:8a:9d:03:9f:68:af:05:dd:a2:f0:dd:24:ef:
e3:ee:ad:94:1d:db:c1:d3:d5:9c:07:bb:b9:75:d2:
fe:72:91:59:eb:78:b4:8a:74:5c:f9:12:bd:41:5d:
f0:b1:69:f5:3b:39:31:ed:03:17:d3:ba:e4:56:88:
f9:b1:58:f3:ae:39:a1:d6:a5:6d:10:d4:f1:22:35:
1c:39:c2:b2:4b:2c:51:71:ac:39:06:97:5e:79:9a:
e2:10:b9:2c:b9:e4:ec:ed:1c:0d:03:af:53:23:36:
dc:97:d5:38:fc:f9:1b:9e:d7:0c:f0:d7:a9:6d:aa:
cc:f2:7a:94:62:ec:ee:78:c2:8e:8c:1a:7d:f8:23:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:E4:63:2D:AD:CC:50:50:F2:60:D5:4C:DE:CB:EE:FF:95:24:2D
X509v3 Authority Key Identifier:
keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:8b:d5:36:c4:40:df:79:23:db:06:cb:e7:e3:ca:3c:a1:
1c:95:c2:eb:06:59:d0:3c:f9:a7:fd:a1:f8:ba:fe:dc:e0:28:
d6:47:35:7d:7f:a6:78:66:b5:07:50:a1:cb:fa:e3:a7:ca:f9:
ce:59:a7:e0:96:20:b5:bd:49:88:2a:aa:e5:e6:1c:49:e3:e0:
85:40:2f:f9:e9:40:0a:29:ae:3f:b8:56:74:72:6a:71:ef:49:
4c:e8:16:18:f5:10:58:f2:61:49:57:80:51:79:5a:21:38:56:
ec:46:e7:75:0b:79:92:18:18:32:45:02:ad:45:f2:b2:20:d8:
be:d4:b8:ef:4a:03:83:14:10:68:48:15:e2:54:6d:3e:2f:0c:
5b:61:55:e6:ca:ad:4d:cd:6f:67:61:3d:96:60:a6:0a:82:a2:
4b:78:e3:a0:e4:a7:6d:8b:bb:a4:a9:56:5a:32:63:2e:db:f4:
cb:21:99:be:ea:06:f8:56:bd:18:f5:1a:a6:d2:a8:14:f3:86:
d8:86:24:7d:2e:c0:dc:3a:ec:74:0e:eb:1a:95:36:95:9d:16:
79:04:84:3b:f7:67:4c:15:2a:57:e3:12:ad:5b:ba:b2:c3:d5:
70:a3:b9:5c:d7:fa:c3:15:a4:9a:fe:98:94:9b:8e:a5:f3:52:
82:fd:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:25 2026 by rpki-client