
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json)
Hash identifier: kzQeFnov9/U+rcCMdwF5kBDY1xpNsWO3AOUsGGwwO7w=
Subject key identifier: 3F:37:BF:FB:DC:17:31:3C:C2:53:74:A5:89:FE:A6:C1:30:05:69:C4
Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
Manifest number: 07A0
Signing time: Fri 24 Jul 2026 22:09:43 +0000
Manifest this update: Fri 24 Jul 2026 22:09:42 +0000
Manifest next update: Fri 31 Jul 2026 22:09:42 +0000
Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: btPJlPNcGxCUFaRxYgGe47dNMUz+WTQ7OCAy0duMElQ=)
2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: EqmRIjquU+tSmDMjC7w1ByfOqPCzO7OzMl+YIXKJh6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Validity
Not Before: Jul 24 22:09:42 2026 GMT
Not After : Jul 31 22:09:42 2026 GMT
Subject: CN=6a63e2a6-0b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:41:85:71:84:7c:8c:3e:de:86:a5:94:ad:
cf:45:06:7e:1d:e9:bf:6d:4b:67:c4:a0:5a:8f:9b:
cc:42:58:9e:b3:48:bc:ad:61:3c:71:16:f1:7c:e8:
42:d4:b2:82:2f:2c:49:1c:53:72:6b:8f:44:95:1f:
5b:8b:5f:54:d5:99:69:c6:82:d9:35:07:d4:00:32:
26:47:f2:ec:fb:fb:57:92:62:61:94:2b:0a:76:ed:
47:e6:aa:83:0d:fd:fc:00:25:c0:9b:df:71:30:ce:
76:5c:c5:20:a5:ca:59:24:ca:df:87:81:a4:e8:79:
ee:98:81:7c:e2:2a:35:60:0e:9f:37:60:56:d3:b1:
ad:45:4c:6f:72:a5:c0:26:88:c2:e8:aa:bb:09:01:
ee:f6:02:60:ef:4d:ca:0f:9b:f4:45:ab:c8:a5:bf:
1e:f0:86:7b:82:91:4f:77:69:37:be:35:42:76:4e:
71:01:88:12:46:2d:34:fd:73:b1:c6:81:65:fb:e9:
f1:91:1d:5c:16:3e:44:c5:e0:f4:3c:ae:c7:b8:1d:
63:a9:de:d7:6b:a5:4d:0a:df:b7:b0:28:55:14:19:
d3:51:10:b8:f2:6a:f0:ef:ae:46:4f:11:35:8c:cb:
fe:64:bd:7d:6e:c7:05:67:b2:b2:6e:a0:95:e8:16:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:BF:FB:DC:17:31:3C:C2:53:74:A5:89:FE:A6:C1:30:05:69:C4
X509v3 Authority Key Identifier:
keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:3c:29:37:b3:81:da:4f:1c:59:78:8c:cf:19:1d:98:33:13:
2c:b5:d5:23:71:a5:e2:c9:da:54:ff:9d:68:be:7f:63:a5:f7:
8b:8f:86:76:8f:f3:68:96:28:49:cb:89:05:e4:06:ab:89:f0:
f5:1b:76:a5:6c:64:46:2a:11:c4:1e:48:61:13:7a:0b:23:d2:
82:54:4e:54:59:b6:78:ca:71:9d:04:66:ac:b7:86:38:b6:ec:
42:cd:97:67:50:ed:e6:d7:c4:63:d5:95:c5:d2:a9:c0:b9:df:
53:36:58:38:c5:24:b4:d6:8a:a4:6e:34:d2:09:6c:5e:59:88:
5b:c9:2b:f7:b5:76:ad:8f:2b:fa:20:63:6b:09:1a:83:12:c6:
da:ec:1b:52:31:80:26:76:b5:af:02:2b:f4:75:38:d6:9e:e8:
42:3a:93:99:8f:3f:e1:14:48:c4:5a:aa:e5:63:fb:62:3d:1e:
2b:30:04:fe:fa:d1:f5:fb:e7:2d:a7:51:be:dc:2d:c0:71:a9:
f7:07:80:19:c4:18:f6:e9:2d:a7:29:98:81:5f:15:ab:cd:8b:
4b:c9:b2:f8:44:99:51:1c:b2:d1:28:b8:d5:02:62:a3:76:81:
26:fc:10:f5:5a:72:ff:93:f9:8e:b4:1a:16:39:2d:a7:9d:e9:
9c:93:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:22 2026 by rpki-client