
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: WM71XDNHaYNQgu4TF+k2FEkBs0uWyfLAcyemMaNwMAE=
Subject key identifier: 05:8C:1F:4E:51:F3:2B:23:4C:85:6F:3E:F4:C4:0D:06:46:7A:4B:D6
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 017C
Signing time: Wed 25 Mar 2026 03:53:50 +0000
Manifest this update: Wed 25 Mar 2026 03:53:49 +0000
Manifest next update: Wed 01 Apr 2026 03:53:49 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: RyzW9kcKJz26L/WbrrTeeUrcffT5qhDQ9/LGvLS7bJk=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Mar 25 03:53:49 2026 GMT
Not After : Apr 1 03:53:49 2026 GMT
Subject: CN=69c35c4d-9b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:0f:26:12:2b:b6:ee:54:80:d4:a7:b3:61:
68:a5:f1:3a:2e:8e:66:73:81:c5:67:6e:9a:85:99:
04:fc:b0:2c:fa:33:a0:ca:75:b4:8a:87:a5:aa:c4:
af:9f:10:b2:26:a5:03:78:ae:8e:c2:d5:43:3f:68:
02:bc:21:79:c4:a1:d7:16:25:7b:a4:59:d5:a2:d7:
c9:aa:71:9d:c4:73:38:43:ea:e6:54:0e:d0:6b:7e:
43:35:22:d9:4a:91:de:cb:dd:2e:8a:ec:20:9a:f2:
82:ab:8b:5b:dc:06:e2:d8:40:11:67:3e:8b:d0:0c:
fb:0a:b8:18:d8:59:c9:81:04:30:9c:08:3d:a7:e3:
20:a5:cb:61:a4:3a:e0:4a:0e:03:73:ad:60:35:30:
18:78:54:33:a7:11:53:dc:9f:2f:2f:88:58:88:bd:
96:c1:d2:d0:ad:1d:72:e4:21:0f:eb:a7:44:ab:8e:
63:ad:16:07:d7:a2:da:7d:ae:2c:17:cc:8e:7b:35:
fb:16:cd:3d:db:cb:71:d7:2e:aa:74:93:e0:a8:d0:
0b:70:0c:60:48:ee:25:f4:e4:47:51:41:13:00:63:
8c:d3:ef:a9:17:ac:b1:06:37:bd:9a:3e:a7:f6:17:
87:9a:e1:54:12:a4:5b:87:61:2a:85:79:e0:48:2f:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8C:1F:4E:51:F3:2B:23:4C:85:6F:3E:F4:C4:0D:06:46:7A:4B:D6
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ef:43:f3:5f:7c:39:a8:c1:d4:36:a0:13:ce:a4:50:ed:0e:
8e:2e:87:37:27:06:2b:af:3c:99:71:77:9f:b1:c8:fa:10:ef:
d4:ab:eb:16:cd:7c:db:d3:70:8c:db:a5:fa:e0:22:b0:a2:4d:
ca:b5:3d:98:e2:09:bf:eb:0b:20:44:dd:34:b7:42:34:50:e1:
b5:31:b1:d2:19:56:e5:a9:2d:6f:cb:58:f9:d5:7b:a5:4b:a1:
58:d5:64:ae:15:b8:9f:44:9c:24:85:b0:39:97:ba:bd:81:fa:
cf:4f:16:94:9d:18:69:b2:54:c0:b4:a8:27:24:5c:d9:e3:f1:
23:a6:d5:e5:09:41:42:d7:62:d9:c4:f4:f4:ca:a4:0e:98:4c:
0a:d8:0f:a7:6c:03:50:cc:a8:ab:75:f1:74:56:77:73:61:0a:
cf:1e:5c:98:e6:18:f1:87:4c:6e:0a:7b:32:21:4b:5c:1d:7d:
c1:c5:53:4b:47:33:34:22:93:a1:7d:1c:32:69:7e:e7:38:13:
5c:93:2a:b8:71:6d:7b:62:5c:d4:72:15:c1:56:a0:8c:9f:52:
f3:c8:9c:b2:4b:c5:b7:47:bc:65:f0:07:81:0a:39:2f:2d:ce:
8a:7a:72:50:ae:6a:cc:0e:52:12:23:49:fa:50:2d:b6:08:ed:
81:62:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:36:17 2026 by rpki-client