
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft
File: 3OILvzAfeSNIv8spYHxrH_k3h_U.mft (raw, json)
Hash identifier: yufDY88S+Gjt++eJDsDWbCb9UE/5YK36dXSG/8Mzxls=
Subject key identifier: D8:1D:48:C5:68:6A:38:15:55:AC:E9:7A:84:95:D2:FA:CF:97:EC:81
Authority key identifier: DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5
Certificate issuer: /CN=A915037C/serialNumber=DCE20BBF301F792348BFCB29607C6B1FF93787F5
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft
Manifest number: 10
Signing time: Sun 15 Nov 2026 09:17:44 +0000
Manifest this update: Sun 15 Nov 2026 09:17:44 +0000
Manifest next update: Sun 22 Nov 2026 09:17:44 +0000
Files and hashes: 1: 3OILvzAfeSNIv8spYHxrH_k3h_U.crl (hash: T0fhIwC1ruIqRQ9+sAutIbEiNUZlZTZwcqC+D3SWis8=)
2: 13D71D68CC6611F19880CE2B0E66CEF9.roa (hash: FjWabkKU/5gjY9J74Xj6FU3+fmcrY80IWZkwUiUuV1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.crl
rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915037C, serialNumber=DCE20BBF301F792348BFCB29607C6B1FF93787F5
Validity
Not Before: Nov 15 09:17:44 2026 GMT
Not After : Nov 22 09:17:44 2026 GMT
Subject: CN=6af978b8-0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:11:72:7d:3e:a7:bf:77:f0:23:7e:fc:88:
3b:bf:f5:0b:a4:bf:3d:f7:6a:e2:9d:18:c8:3a:89:
a0:29:46:62:c7:db:39:5d:34:90:5b:63:24:71:e8:
7c:32:f6:19:49:75:5a:bb:39:e2:58:ef:c9:1a:5e:
fa:36:18:8a:66:5e:6c:99:fe:12:a2:22:56:a8:51:
66:b7:96:75:28:3b:bd:fb:81:5a:84:04:b0:ca:97:
a6:6e:07:59:d8:63:89:06:82:fb:b1:3c:f2:51:31:
50:d1:52:31:f7:e7:d5:c1:b9:0c:a1:69:85:5b:c9:
b7:57:89:e8:60:0c:a4:bb:7a:d3:5c:e7:a2:03:a1:
bf:e3:d4:69:b5:70:b0:9f:15:4f:17:c2:e9:d9:7c:
eb:e7:e2:34:8c:7c:04:d2:eb:b0:45:c8:c7:f7:d7:
f4:b1:d3:69:49:4c:95:c9:d5:17:e9:05:72:91:e4:
f2:60:d2:83:36:34:ba:4f:b2:8c:a3:b0:d4:54:9c:
8f:03:fc:92:a5:cc:c5:a0:fd:0c:3b:18:10:ac:8f:
9e:72:ce:5f:6c:51:64:50:ca:cf:e9:1d:e5:49:0b:
ce:61:a4:fd:e3:08:a4:06:8a:61:3d:f0:05:32:a6:
78:04:4a:3e:97:18:4a:f0:7d:8e:03:b1:d9:d2:75:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:48:C5:68:6A:38:15:55:AC:E9:7A:84:95:D2:FA:CF:97:EC:81
X509v3 Authority Key Identifier:
keyid:DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:2a:1e:05:4c:bb:59:2d:50:d2:c8:ff:64:ef:9b:31:19:79:
32:78:31:7a:bf:03:f8:0d:38:70:32:23:ee:65:c3:87:d6:08:
a1:20:12:6d:7d:7f:3e:20:a5:29:bd:36:24:2d:90:49:ac:be:
6a:42:d7:57:00:af:40:18:3c:33:07:68:92:15:a2:81:09:c8:
ff:21:9d:65:f5:5d:77:1d:79:bf:cf:1a:8d:f4:a5:e9:4b:ec:
20:1a:65:ca:58:87:83:94:f1:5e:ae:d6:c0:42:e4:df:04:dc:
7a:b3:8f:02:ef:de:25:2b:f0:1b:b4:2c:9c:a3:a3:3f:ed:cd:
bc:15:a3:98:9c:eb:0c:59:b2:a6:7c:b7:90:13:87:0b:bd:e8:
1c:08:fc:c7:7b:09:2c:76:e8:6e:2e:58:0e:66:52:b1:61:31:
03:7a:00:6c:3a:f2:f2:20:7d:20:2c:70:54:c8:e5:5d:78:29:
dd:c5:70:c8:28:fb:60:57:18:ca:94:c3:23:b9:21:36:31:68:
96:d8:a5:bb:08:75:d3:f9:fd:06:1c:1d:88:00:aa:fd:39:b4:
c6:5a:86:52:53:6b:76:56:3e:e3:95:52:9c:db:08:ae:87:1e:
e4:9d:31:02:b4:d7:ff:ba:2a:f2:ef:9f:3c:44:e9:86:e4:df:
d6:62:94:76
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MDM3QzExMC8GA1UEBRMoRENFMjBCQkYzMDFGNzkyMzQ4QkZDQjI5NjA3QzZCMUZG
OTM3ODdGNTAeFw0yNjExMTUwOTE3NDRaFw0yNjExMjIwOTE3NDRaMBgxFjAUBgNV
BAMTDTZhZjk3OGI4LTBmMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrlRFyfT6nv3fwI378iDu/9Qukvz33auKdGMg6iaApRmLH2zldNJBbYyRx6Hwy
9hlJdVq7OeJY78kaXvo2GIpmXmyZ/hKiIlaoUWa3lnUoO737gVqEBLDKl6ZuB1nY
Y4kGgvuxPPJRMVDRUjH359XBuQyhaYVbybdXiehgDKS7etNc56IDob/j1Gm1cLCf
FU8XwunZfOvn4jSMfATS67BFyMf31/Sx02lJTJXJ1RfpBXKR5PJg0oM2NLpPsoyj
sNRUnI8D/JKlzMWg/Qw7GBCsj55yzl9sUWRQys/pHeVJC85hpP3jCKQGimE98AUy
pngESj6XGErwfY4DsdnSdQBJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2B1IxWhq
OBVVrOl6hJXS+s+X7IEwHwYDVR0jBBgwFoAU3OILvzAfeSNIv8spYHxrH/k3h/Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwMzdDL0VBN0NDNUU2Q0M2
MzExRjFBQTNFREQ2MjBENjZDRUY5LzNPSUx2ekFmZVNOSXY4c3BZSHhySF9rM2hf
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM09JTHZ6QWZlU05JdjhzcFlIeHJIX2szaF9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw
MzdDL0VBN0NDNUU2Q0M2MzExRjFBQTNFREQ2MjBENjZDRUY5LzNPSUx2ekFmZVNO
SXY4c3BZSHhySF9rM2hfVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0Kh4FTLtZLVDSyP9k75sxGXkyeDF6vwP4DThwMiPuZcOH1gihIBJtfX8+IKUp
vTYkLZBJrL5qQtdXAK9AGDwzB2iSFaKBCcj/IZ1l9V13HXm/zxqN9KXpS+wgGmXK
WIeDlPFertbAQuTfBNx6s48C794lK/AbtCyco6M/7c28FaOYnOsMWbKmfLeQE4cL
vegcCPzHewksduhuLlgOZlKxYTEDegBsOvLyIH0gLHBUyOVdeCndxXDIKPtgVxjK
lMMjuSE2MWiW2KW7CHXT+f0GHB2IAKr9ObTGWoZSU2t2Vj7jlVKc2wiuhx7knTEC
tNf/uiry7588ROmG5N/WYpR2
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:48 2026 by rpki-client