
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json)
Hash identifier: sMBXdowYiHIDnEKRogfFpWN+g2wHyxTdp13byAw5x8w=
Subject key identifier: 3A:C9:FD:23:08:F9:C2:58:30:47:5A:CF:F2:95:E7:00:3A:09:B9:F2
Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
Manifest number: 018C
Signing time: Fri 27 Mar 2026 03:55:05 +0000
Manifest this update: Fri 27 Mar 2026 03:55:05 +0000
Manifest next update: Fri 03 Apr 2026 03:55:05 +0000
Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: mxFlCyzbrYuTSvfgHc3UkGVljt85SzTfl0CvDsTsnPM=)
2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: VyYP9wSjKOiDhQAeFQwUCWE8o44zFR3WDi4mofWlQgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Validity
Not Before: Mar 27 03:55:05 2026 GMT
Not After : Apr 3 03:55:05 2026 GMT
Subject: CN=69c5ff99-cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:3a:28:8d:94:01:06:a7:c6:a6:c1:64:35:
10:b4:be:cf:b4:0a:03:95:93:02:04:36:80:c4:fc:
c3:48:b6:44:89:5c:4a:34:68:e5:e3:aa:b8:31:d4:
52:37:f7:0b:13:c8:55:73:43:33:9f:f8:67:2e:ed:
72:c5:88:61:f0:fe:f2:3c:85:ac:fb:4a:97:e2:48:
77:e3:f2:d4:1b:c5:0d:1a:9a:53:a0:fc:11:40:04:
23:2d:8d:1b:5b:85:28:b0:00:04:69:1a:2e:8c:9e:
a2:ad:de:0e:de:27:c9:0f:92:9b:b3:87:1c:f8:6b:
a7:a5:69:e7:cb:ce:aa:a9:c7:f6:3f:40:b8:c0:ed:
b1:d4:44:ea:d9:90:74:5a:ff:01:29:63:d1:fe:d7:
ca:56:b6:39:05:06:32:80:83:91:24:df:dc:cf:8c:
bd:b3:06:64:1b:e1:a3:3b:4f:9d:ed:81:90:16:3c:
26:dd:e3:21:07:2c:b1:ab:55:6f:48:8e:51:fb:09:
3a:28:72:d7:1d:0e:2b:46:18:0f:8f:29:58:74:4b:
9a:f2:ab:df:05:a6:0c:19:4e:b3:b6:52:f1:6b:f6:
7f:1f:86:c4:9e:15:d3:a1:12:9a:2e:6e:a6:7a:73:
e7:45:4a:b7:dd:f7:5c:33:94:8b:b9:1b:bd:36:03:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:FD:23:08:F9:C2:58:30:47:5A:CF:F2:95:E7:00:3A:09:B9:F2
X509v3 Authority Key Identifier:
keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ea:2e:fa:f1:c4:58:93:17:42:c0:47:84:72:4b:fc:da:50:
e9:f7:4d:42:a8:c3:2d:05:6e:39:72:4e:27:6f:d5:2f:62:f9:
cc:ff:26:78:2f:63:1d:08:7f:9b:e9:f8:33:06:ed:95:a7:09:
9a:99:89:c3:8c:45:92:13:de:f8:92:48:3d:04:36:28:25:cf:
c9:df:0b:d7:47:80:8a:90:92:43:aa:53:02:b0:59:1e:bb:59:
bf:43:51:41:5d:08:d1:c4:66:7a:20:6e:48:d4:0c:ea:9b:fb:
72:dc:c3:84:3b:0d:fa:bd:54:08:88:52:fe:20:e5:95:e0:0a:
58:88:fc:e2:dd:a4:21:62:3c:b7:05:cb:91:58:d2:43:ab:bb:
6c:d5:61:b2:86:89:4d:a4:fd:9c:f6:e4:5c:a4:42:2f:82:69:
8d:7c:af:00:c1:9d:9a:47:27:41:28:6c:2c:cf:b8:d1:41:ac:
c7:0e:c1:71:b8:c5:70:a9:9b:f4:63:a9:fa:32:59:65:e1:ad:
94:e3:24:65:39:e8:b3:77:08:b7:47:5e:3b:43:28:4e:d7:31:
f8:38:80:1f:00:43:5b:5a:03:d1:c1:c8:55:37:55:ca:f0:6e:
95:a6:6c:e6:c7:4d:b9:4a:98:76:22:1e:9f:16:74:71:7c:ff:
42:d0:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:58 2026 by rpki-client