
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json)
Hash identifier: Kuu11nm4jd7AwAaem8yqROO1P71DWnldg5v/rIsyvj8=
Subject key identifier: E6:99:2D:36:EB:11:EE:48:D9:11:CA:24:68:71:61:3D:29:2A:DD:3A
Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
Manifest number: 9D
Signing time: Mon 11 May 2026 07:28:55 +0000
Manifest this update: Mon 11 May 2026 07:28:55 +0000
Manifest next update: Mon 18 May 2026 07:28:55 +0000
Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: 0GMDkIyDv9Ig8swbnT30EtP3cQTOwA//fdWXkPShg38=)
2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Validity
Not Before: May 11 07:28:55 2026 GMT
Not After : May 18 07:28:55 2026 GMT
Subject: CN=6a018537-3757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:38:c5:8b:9e:d7:b7:7f:35:f1:63:3d:e0:
30:bd:9a:23:93:74:0d:ac:74:f7:92:5f:49:e6:a6:
1a:6a:40:b1:69:d4:96:f1:15:20:c0:54:c1:96:6d:
6d:bd:1f:9b:3d:13:21:bd:7c:84:08:b6:02:32:2e:
16:9e:3c:86:20:73:8d:3e:a9:37:60:1a:5b:b2:ce:
c1:f3:19:9e:f9:3f:00:72:fa:49:5d:8a:09:b9:52:
65:03:01:49:24:6a:19:ee:2f:8c:0f:2f:85:72:35:
5f:f1:f9:5f:70:86:6a:a7:11:42:ba:a1:c7:64:6c:
83:7f:22:b2:3f:4d:98:25:84:7f:99:91:39:b9:64:
6d:9b:73:35:dd:b4:a9:b1:4c:a6:4c:e2:50:56:82:
82:58:1d:1d:26:f2:76:a9:4b:80:87:63:c2:95:fb:
79:bb:25:a9:2a:54:a0:a9:e6:9d:fd:e7:21:a4:15:
04:7d:a5:f2:1d:50:b0:35:e3:ab:c2:f1:3e:52:22:
4e:f3:0c:0f:5d:f7:06:a5:ca:c9:71:6f:6f:73:1d:
0a:c0:ea:08:6b:ab:12:67:1d:eb:0a:c9:18:dc:9a:
2a:1d:33:c5:fe:98:a7:e7:a1:83:c7:04:2c:71:20:
a8:a7:be:47:20:c7:17:80:28:30:24:09:74:d7:d6:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:2D:36:EB:11:EE:48:D9:11:CA:24:68:71:61:3D:29:2A:DD:3A
X509v3 Authority Key Identifier:
keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:25:d1:7c:14:d7:42:ae:a1:41:e4:ed:da:8b:07:a4:bd:
a0:51:4d:5f:dc:61:27:c3:6a:82:1f:e2:4e:8e:b9:5d:92:2a:
b4:cc:85:8d:36:56:3f:8c:61:9c:fb:b6:a8:1d:9c:6a:e6:e3:
c2:08:4e:ac:05:c8:ad:a8:d7:2f:32:fb:71:07:dd:93:50:21:
53:47:f9:34:53:dd:3b:c0:b0:ca:97:95:5a:51:3f:7c:fb:5c:
f3:98:96:a7:08:30:04:6c:6d:b0:5a:13:36:76:2e:9e:65:f8:
ac:73:3d:bc:43:f6:68:3a:8f:cb:9f:d8:ce:b8:7c:52:9e:10:
a5:31:10:73:9d:0a:c6:26:c1:75:c8:27:cf:96:1f:d9:26:1e:
16:fa:1d:f3:65:1f:60:72:68:5c:9e:65:7d:fb:1e:92:c8:1e:
a4:8c:00:88:19:fc:92:e2:ca:58:5a:24:08:21:bb:ce:10:92:
8c:e5:a9:84:d6:ab:0d:c1:37:a8:46:49:4c:e9:bf:ef:6b:a4:
1a:29:d7:43:01:b9:c4:bc:36:b4:a4:e4:ea:57:b7:a5:ca:f6:
23:70:a8:c4:54:97:59:33:23:76:cd:29:a5:4b:22:81:5b:5b:
af:df:92:8d:c0:95:ad:e4:4f:72:d1:64:f4:16:28:ed:12:ec:
23:aa:bd:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0NzMxMTAvBgNVBAUTKEZCN0IwNTg3ODM2NTFFOTNGQTMwREQ5NkQ2MjY1RTZF
MkYzNTI1NTQwHhcNMjYwNTExMDcyODU1WhcNMjYwNTE4MDcyODU1WjAYMRYwFAYD
VQQDEw02YTAxODUzNy0zNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5aA4xYue17d/NfFjPeAwvZojk3QNrHT3kl9J5qYaakCxadSW8RUgwFTBlm1t
vR+bPRMhvXyECLYCMi4WnjyGIHONPqk3YBpbss7B8xme+T8AcvpJXYoJuVJlAwFJ
JGoZ7i+MDy+FcjVf8flfcIZqpxFCuqHHZGyDfyKyP02YJYR/mZE5uWRtm3M13bSp
sUymTOJQVoKCWB0dJvJ2qUuAh2PClft5uyWpKlSgqead/echpBUEfaXyHVCwNeOr
wvE+UiJO8wwPXfcGpcrJcW9vcx0KwOoIa6sSZx3rCskY3JoqHTPF/pin56GDxwQs
cSCop75HIMcXgCgwJAl019YycwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaZLTbr
Ee5I2RHKJGhxYT0pKt06MB8GA1UdIwQYMBaAFPt7BYeDZR6T+jDdltYmXm4vNSVU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzQ3My9GRUFFMTJBMjVE
REYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhwUDZNTjJXMWlaZWJpODFK
VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpWUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzQ3My9GRUFFMTJBMjVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhw
UDZNTjJXMWlaZWJpODFKVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHoQl0XwU10KuoUHk7dqLB6S9oFFNX9xhJ8Nqgh/iTo65XZIqtMyFjTZWP4xh
nPu2qB2caubjwghOrAXIrajXLzL7cQfdk1AhU0f5NFPdO8CwypeVWlE/fPtc85iW
pwgwBGxtsFoTNnYunmX4rHM9vEP2aDqPy5/Yzrh8Up4QpTEQc50KxibBdcgnz5Yf
2SYeFvod82UfYHJoXJ5lffseksgepIwAiBn8kuLKWFokCCG7zhCSjOWphNarDcE3
qEZJTOm/72ukGinXQwG5xLw2tKTk6le3pcr2I3CoxFSXWTMjds0ppUsigVtbr9+S
jcCVreRPctFk9BYo7RLsI6q9Dw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:16:49 2026 by rpki-client