
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json)
Hash identifier: z4mN6zYegJoJgQ4U0aVsD2gCo9tokRw+Tm1koR6K5K0=
Subject key identifier: 7D:86:59:54:C8:24:FB:66:B6:05:C5:A9:BD:11:29:CE:E7:20:D8:C9
Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
Manifest number: 07C7
Signing time: Thu 08 Oct 2026 21:33:24 +0000
Manifest this update: Thu 08 Oct 2026 21:33:23 +0000
Manifest next update: Thu 15 Oct 2026 21:33:23 +0000
Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: +sjXP9PpMxai3SHlq9hd3iQNG2c15p8lTa+01yQ5OX8=)
2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: EqmRIjquU+tSmDMjC7w1ByfOqPCzO7OzMl+YIXKJh6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 21:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Validity
Not Before: Oct 8 21:33:23 2026 GMT
Not After : Oct 15 21:33:23 2026 GMT
Subject: CN=6ac80c23-4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:d2:ce:44:87:40:4c:e1:95:53:9d:04:0c:
17:bf:b2:1f:fa:9a:8e:46:27:df:e0:15:2c:08:b9:
98:42:2c:8f:0b:b0:ac:4c:af:2a:d3:39:20:48:37:
97:d1:7b:88:04:fc:c3:dc:5e:dd:6e:da:eb:c4:03:
c4:88:3e:b6:c7:c7:31:ec:0e:27:0e:23:77:87:b6:
f7:e0:40:86:aa:fa:1b:ca:02:5c:69:f4:bc:09:00:
1c:73:51:f7:e3:ea:87:b3:89:12:e7:37:bc:c5:9d:
48:da:03:62:25:28:9a:04:55:be:51:fe:1e:94:16:
ec:5c:31:3b:41:b8:59:79:1c:9a:9b:9f:a0:2b:ad:
eb:cc:0b:26:d6:1f:9e:0a:c8:84:fe:0c:d7:28:2c:
fc:a8:74:e3:50:42:5a:c3:fa:37:28:ad:e5:f5:08:
bf:24:2c:da:7b:c1:44:a2:5d:2a:eb:83:3d:67:4e:
99:de:0f:36:8a:0e:71:31:91:0d:eb:9e:ad:25:3f:
62:7c:f1:07:90:07:7b:cf:90:47:c1:9f:ed:35:56:
1e:a3:6f:08:cd:dd:e1:17:af:7c:cf:22:68:c4:6e:
64:b9:c4:cb:d7:e2:62:35:ba:de:74:6e:0b:e2:ae:
70:fc:79:b8:38:d8:23:cc:a4:d7:70:c1:06:8b:ad:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:59:54:C8:24:FB:66:B6:05:C5:A9:BD:11:29:CE:E7:20:D8:C9
X509v3 Authority Key Identifier:
keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:12:e4:6d:30:6b:64:31:1a:ac:fb:2c:a0:54:5e:12:ff:41:
c0:e1:55:37:51:9e:59:f1:d5:5f:39:e4:35:11:dc:ad:b5:11:
d2:a2:94:a1:d7:a6:ed:64:65:9c:95:49:3e:28:57:2d:7c:af:
a7:66:03:9b:ca:06:89:51:b2:98:80:36:db:54:1d:c5:29:71:
fe:49:02:41:73:aa:a6:88:3a:a6:4e:01:38:a9:04:a1:f4:67:
c3:bc:09:9a:5f:8a:66:2c:56:00:ea:05:85:6f:d0:1a:ed:89:
d5:0a:a3:89:63:2b:70:96:10:fe:a6:29:be:01:4f:93:17:f3:
df:20:37:fb:5a:82:dc:3a:6a:e7:17:3e:18:1f:97:c9:af:63:
6a:72:f7:54:d8:a0:97:78:b8:81:2e:14:5c:0a:4e:1c:09:c7:
3c:88:2d:d6:29:4b:24:fc:75:7c:20:cf:43:e5:74:ef:1b:e3:
e0:ab:b8:29:a4:80:f7:50:f4:63:a3:d6:bc:e0:ca:ae:7e:3d:
a6:dc:0f:e8:38:03:3e:63:22:8b:01:36:96:52:d9:bb:48:fb:
80:93:6b:d6:8c:a1:a8:30:f9:d7:e6:1c:8e:98:92:b4:29:ed:
e4:24:4a:7a:31:34:24:ce:ab:50:59:8b:97:4e:3e:be:71:5f:
ba:ef:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:09:00 2026 by rpki-client