
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier: wyVqS+CMv88VRnKoCta7fHnbvkxp5GUWAFfnioKrO0M=
Subject key identifier: 59:9C:21:24:F1:FF:03:C8:FA:C5:92:4E:F3:E7:15:D1:16:BE:CB:17
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number: 8C
Signing time: Mon 11 May 2026 07:50:10 +0000
Manifest this update: Mon 11 May 2026 07:50:10 +0000
Manifest next update: Mon 18 May 2026 07:50:10 +0000
Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: vdN1xmjPGHybooQnTi/6ca5aMGRWH9RDi8isGodM/9Q=)
2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: M/En5GKZgRPs8xA5rjGsaCEY3++9OzoqoEMQTbP1dII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Validity
Not Before: May 11 07:50:10 2026 GMT
Not After : May 18 07:50:10 2026 GMT
Subject: CN=6a018a32-b36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:7a:42:e9:b8:98:76:93:b1:02:3a:44:97:
8f:6d:99:fc:6f:9e:a4:eb:9a:8d:17:7f:22:5e:76:
4b:a7:82:29:ba:b3:61:ed:f4:46:08:69:f7:14:2d:
1b:05:96:b6:1e:85:48:b2:3f:e4:5b:df:fa:da:7e:
d2:a5:57:32:b2:24:70:cc:1d:cb:1c:03:59:f1:95:
2b:17:7f:93:ec:08:4a:c8:d9:a9:6e:6b:0d:e4:88:
c9:58:9e:3a:0e:70:9d:f1:99:72:38:53:a9:c2:b2:
63:b0:1c:f3:07:6a:ad:a2:9b:d7:c4:e1:eb:8f:de:
ce:0e:63:36:8f:f5:48:d8:d2:bd:ca:8c:88:9f:7a:
55:fd:95:c7:f2:2c:5d:d9:ec:d8:fc:06:43:12:64:
9d:b5:99:e9:fd:53:5d:63:2a:2c:04:d5:8a:bb:60:
99:a2:73:bc:03:35:32:dc:41:b3:8c:ec:c6:8e:e5:
23:c6:4b:19:a9:7d:2a:61:a0:24:39:ea:a0:05:fc:
8c:90:f2:9d:4e:1f:f0:b6:47:a4:32:b6:0c:f7:fb:
2c:84:e1:4f:e1:ac:ef:9b:c1:46:11:6e:09:64:93:
46:02:be:22:4c:23:87:94:e1:32:ce:ef:bf:20:3b:
91:d6:7f:0c:c0:a3:89:8b:f1:33:a7:1f:0a:ac:d0:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:21:24:F1:FF:03:C8:FA:C5:92:4E:F3:E7:15:D1:16:BE:CB:17
X509v3 Authority Key Identifier:
keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cf:c2:ff:f4:f1:0c:a9:c4:74:f3:08:3c:40:1b:de:6b:af:
06:a1:d3:41:7f:ba:dc:9f:d8:06:70:5a:dc:13:dd:85:f6:15:
e8:ff:6c:cb:84:be:6d:5c:51:1f:7c:ab:df:b4:7b:2c:d5:45:
f8:62:62:ec:e1:23:07:d3:90:58:c5:5d:f5:b9:78:fe:cf:dd:
28:f6:bd:ea:3b:6d:7c:fa:ae:17:1a:b3:d8:f8:b5:b2:6a:6c:
67:97:7e:3f:03:70:e9:05:e8:df:de:91:cd:6e:3f:11:5a:7c:
00:db:35:e7:98:9b:2f:b6:6d:a0:be:09:85:65:d1:0d:8a:62:
80:95:0d:c1:0d:a8:34:1e:70:8e:a5:98:c7:3e:51:67:27:98:
9b:d9:8d:81:ea:83:20:ee:fd:37:6c:53:0d:89:9e:3c:2a:48:
34:dd:ca:de:b9:c2:e6:e7:23:74:e3:17:79:c2:2f:e8:99:08:
1a:3f:78:cf:24:0a:0f:c2:a8:78:29:65:69:8e:ad:d3:5d:66:
6b:4f:a5:82:8a:b1:f9:70:03:d0:e5:21:84:27:d6:9a:16:38:
30:f3:1a:2c:df:4e:9d:b9:83:58:ab:03:5c:35:b5:7a:42:57:
f1:83:81:e5:4f:bb:9a:94:c2:4a:85:78:d2:5c:79:ba:e2:87:
7a:cf:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:46 2026 by rpki-client