
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: 9f+Rf7rq+aPnw5/9FSnW1MDwCZi4y2lNl32ZZ4cdUxI=
Subject key identifier: C1:9B:08:70:FE:40:7B:3A:6C:23:2F:C3:0C:BF:22:E9:4C:7F:79:25
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 0194
Signing time: Mon 11 May 2026 04:24:10 +0000
Manifest this update: Mon 11 May 2026 04:24:10 +0000
Manifest next update: Mon 18 May 2026 04:24:10 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: qXbn2lKruw1/4dc0nCeAf5iuID7xhKHvJuoxihQS9bM=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: May 11 04:24:10 2026 GMT
Not After : May 18 04:24:10 2026 GMT
Subject: CN=6a0159ea-d143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:8a:af:d0:ec:09:a5:37:ae:05:c6:30:22:
c0:d3:38:b2:1f:0a:6c:ae:9d:6e:05:63:89:14:ea:
95:37:09:b6:9c:fe:6a:62:ce:d9:be:3d:29:d2:d1:
25:56:53:1d:32:90:7e:26:64:c2:bc:d4:f1:9a:66:
15:3d:ec:18:d5:9b:10:f1:7d:2f:a5:9f:81:d7:0b:
65:02:3b:7c:ef:5d:80:40:dd:68:0f:91:01:14:e6:
7d:5d:06:cf:31:7c:08:69:f0:67:e9:52:20:9d:12:
82:9a:d2:37:51:73:b8:9c:d2:b9:f5:9c:5e:86:73:
58:3a:63:7d:d3:76:e1:2f:ee:08:22:b7:f6:b7:cd:
66:39:db:e9:fa:09:57:3d:d6:e3:d9:65:b6:1d:45:
f2:1d:ae:00:4a:6d:ed:27:32:f6:a3:52:05:20:37:
0f:00:b9:e7:9d:4b:e6:60:9e:85:a6:e8:0b:fe:bb:
bf:37:90:ab:eb:04:40:4a:22:9f:ea:fc:04:e8:64:
74:7d:ff:f0:15:e4:eb:53:a8:40:15:e4:eb:b7:53:
8a:f1:91:57:18:49:9d:f4:d1:13:65:85:80:11:f7:
7c:c4:49:1a:31:1d:47:ed:26:02:d2:ae:59:f1:eb:
a5:dc:d5:b5:ef:56:1b:58:7f:db:20:8a:b2:02:4e:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:08:70:FE:40:7B:3A:6C:23:2F:C3:0C:BF:22:E9:4C:7F:79:25
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:35:a4:40:ab:e8:43:5d:8e:a7:c1:4c:0e:2b:cc:b1:a0:
19:fe:40:64:14:e8:b6:f7:f0:23:1d:bd:77:0b:4c:6a:d2:a7:
5b:25:42:e1:31:c7:44:52:99:1a:6f:a6:eb:30:ff:1c:a5:4f:
09:9d:e7:3e:74:18:a9:40:e3:68:4f:75:46:89:39:37:2f:f1:
d4:9d:cc:27:71:98:d5:6c:b8:5b:6b:7e:49:45:2d:9c:cd:9d:
b2:31:4c:e8:20:04:99:70:d4:5a:d9:0a:8f:9d:5d:3e:58:e0:
0f:70:f6:c1:dd:71:91:dc:c1:aa:86:f9:21:93:b8:9e:39:31:
2a:d7:cd:76:75:d4:7c:5a:49:4c:70:0a:a6:33:a3:d1:64:0e:
c4:7d:f1:8b:c7:fc:d2:ee:f8:ce:3b:da:05:ad:6e:5a:8b:5a:
10:1c:34:48:1c:43:e9:d8:75:75:f8:32:61:97:0c:68:57:8d:
79:25:fb:36:f5:f9:01:cf:ca:ea:5d:40:b8:66:73:f9:91:cb:
47:77:18:5a:08:a4:87:20:d7:14:ac:ea:f4:31:88:bb:95:5e:
81:fe:9c:73:ad:4e:f4:28:a9:15:0a:52:91:13:a6:30:51:ad:
82:a2:05:ed:4e:1f:94:1e:d7:bd:7d:a0:68:ab:5a:c4:14:16:
39:91:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:46 2026 by rpki-client