
$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier: mkE/eLMZJBFn4cG8Yx6CYLYvaMqDXJkiIjCH+QjaIrQ=
Subject key identifier: EB:32:9F:9C:F3:43:EE:C5:2E:2B:DC:80:43:47:ED:72:9D:D1:C1:1F
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial: 0EA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number: 0E9A
Signing time: Tue 24 Mar 2026 17:35:14 +0000
Manifest this update: Tue 24 Mar 2026 17:35:13 +0000
Manifest next update: Tue 31 Mar 2026 17:35:13 +0000
Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: /wwqecrPbT87cvQ41mFRzPGoHA7IzisSt7bo1ogrCi0=)
2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751 (0xea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Validity
Not Before: Mar 24 17:35:13 2026 GMT
Not After : Mar 31 17:35:13 2026 GMT
Subject: CN=69c2cb51-89aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:d7:46:84:fe:90:a6:3b:7e:d2:26:61:dc:
07:22:3c:3d:33:91:da:e4:a6:af:a1:db:35:05:2a:
7d:0a:d8:02:32:f8:d2:42:44:28:7b:33:83:eb:65:
63:94:f4:6f:f1:b9:3a:90:79:b3:6e:5e:ce:cb:d2:
3b:ba:40:96:44:63:cb:ed:bd:64:4f:b2:9a:0b:af:
2f:78:8c:29:81:ad:1a:cc:04:9b:f2:bb:24:6b:f9:
40:d1:a3:2e:36:5a:dd:8a:2d:6b:93:2f:5c:c2:a6:
c8:fe:06:9a:dd:3c:97:29:1c:ef:2f:71:ed:93:7a:
11:3d:63:00:09:46:5c:15:be:be:fe:be:ab:c9:ad:
ab:e7:9c:b6:28:10:68:fe:7c:84:df:51:61:fa:b4:
91:cd:ef:96:b9:aa:54:60:6c:84:22:a7:de:5a:3a:
5d:85:ed:a4:91:ce:2a:70:68:75:08:98:de:75:55:
3c:82:73:5d:9f:a1:b7:d2:84:96:13:77:1d:d3:de:
17:8f:14:ee:ea:1c:ae:17:ba:cd:e4:2d:d0:05:f4:
34:95:23:dc:d4:4d:0c:01:a9:28:fc:3d:36:09:2a:
96:00:8c:f6:03:b2:f6:22:bf:e8:ea:36:3d:df:7e:
0c:f4:9c:17:d0:82:fd:8f:2c:52:3f:af:fb:34:52:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:9F:9C:F3:43:EE:C5:2E:2B:DC:80:43:47:ED:72:9D:D1:C1:1F
X509v3 Authority Key Identifier:
keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:38:7e:3d:95:73:ff:00:1f:77:9a:0d:1d:9e:3d:6d:73:
98:d4:0b:b8:5f:dc:18:53:ae:03:11:4c:f5:91:6a:e4:fb:40:
18:04:72:ac:9b:b0:5b:25:75:aa:c6:b5:e7:aa:83:08:de:60:
c6:9d:2e:aa:63:47:f4:03:71:b8:83:ed:79:f6:d4:80:b9:b8:
46:5d:ee:60:47:79:b3:c5:53:d6:7c:d5:6e:6c:eb:90:e7:dd:
6f:29:f2:32:4f:73:15:95:5c:11:d9:ec:a4:55:b7:8e:f8:ed:
16:e2:db:98:92:c1:24:7f:9f:2b:f4:ee:12:4e:1e:f1:fc:e0:
5a:e8:24:d1:05:b2:4c:fa:c2:26:a7:d0:3d:fb:db:60:1b:46:
a8:a0:99:fd:b7:28:22:ff:9c:d5:2f:66:49:93:04:4f:1a:d1:
c6:d8:86:6d:1d:22:5e:6e:01:4e:64:bd:d9:72:8d:d8:f8:89:
e0:46:1c:5c:4f:16:93:81:03:f8:f4:49:b5:47:10:44:35:23:
56:b0:4c:55:6a:73:5b:82:44:97:ec:b8:16:3a:58:bd:b8:5f:
ab:e4:68:fc:7c:62:df:b4:14:e4:8e:a2:79:27:c5:3c:e2:11:
f7:51:ec:f7:f9:48:7b:6b:b8:49:63:a3:e9:e4:30:c9:62:6b:
38:d9:c1:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD
NjYxNDQ1MzAwHhcNMjYwMzI0MTczNTEzWhcNMjYwMzMxMTczNTEzWjAYMRYwFAYD
VQQDEw02OWMyY2I1MS04OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwfXRoT+kKY7ftImYdwHIjw9M5Ha5Kavods1BSp9CtgCMvjSQkQoezOD62Vj
lPRv8bk6kHmzbl7Oy9I7ukCWRGPL7b1kT7KaC68veIwpga0azASb8rska/lA0aMu
Nlrdii1rky9cwqbI/gaa3TyXKRzvL3Htk3oRPWMACUZcFb6+/r6rya2r55y2KBBo
/nyE31Fh+rSRze+WuapUYGyEIqfeWjpdhe2kkc4qcGh1CJjedVU8gnNdn6G30oSW
E3cd094XjxTu6hyuF7rN5C3QBfQ0lSPc1E0MAako/D02CSqWAIz2A7L2Ir/o6jY9
334M9JwX0IL9jyxSP6/7NFJImQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsyn5zz
Q+7FLivcgENH7XKd0cEfMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF
MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF
NFd6T01ocVdXcExHWVVSVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARqA4fj2Vc/8AH3eaDR2ePW1zmNQLuF/cGFOuAxFM9ZFq5PtAGARyrJuwWyV1
qsa156qDCN5gxp0uqmNH9ANxuIPtefbUgLm4Rl3uYEd5s8VT1nzVbmzrkOfdbyny
Mk9zFZVcEdnspFW3jvjtFuLbmJLBJH+fK/TuEk4e8fzgWugk0QWyTPrCJqfQPfvb
YBtGqKCZ/bcoIv+c1S9mSZMETxrRxtiGbR0iXm4BTmS92XKN2PiJ4EYcXE8Wk4ED
+PRJtUcQRDUjVrBMVWpzW4JEl+y4FjpYvbhfq+Ro/Hxi37QU5I6ieSfFPOIR91Hs
9/lIe2u4SWOj6eQwyWJrONnB5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:29 2026 by rpki-client