
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json)
Hash identifier: trcLG47HL0umFGhiopvE+z6/uQDx77lQ63OlW7/0/us=
Subject key identifier: FB:F4:0E:F3:B4:25:F0:2F:7B:A3:D6:1F:62:12:64:23:94:9B:F9:B8
Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
Manifest number: 8E
Signing time: Wed 25 Mar 2026 06:54:31 +0000
Manifest this update: Wed 25 Mar 2026 06:54:31 +0000
Manifest next update: Wed 01 Apr 2026 06:54:31 +0000
Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: nVCLYf+W7nJVLq+tcx8igV4PVTcxjycsqkcNj8d+oh4=)
2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: q70RPKxzbm6NVXCmryGNBnf7zGx3p9P/q7+H8CK0/2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Validity
Not Before: Mar 25 06:54:31 2026 GMT
Not After : Apr 1 06:54:31 2026 GMT
Subject: CN=69c386a7-fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:47:92:9b:99:2d:0f:a9:cb:04:2e:94:b1:
c1:c5:4d:4d:01:a9:c7:cc:d1:d2:2f:53:f9:05:33:
35:42:4a:30:68:d7:ed:1a:11:cb:b8:a5:9a:58:84:
25:c6:16:cd:57:7e:60:80:ed:dd:02:57:ea:f3:b8:
f7:e2:e9:dd:63:10:4a:50:a3:c9:94:61:1d:92:23:
77:ad:40:47:6f:a6:70:52:cf:de:db:1b:96:22:02:
86:74:f5:3a:d8:7d:30:9c:cc:05:b3:d7:54:f1:e9:
a2:7c:29:c7:e0:78:b7:33:c2:de:db:cd:dc:48:97:
6d:f9:62:ef:c4:84:4f:6d:e2:ee:de:ea:84:f0:46:
72:79:3b:3b:b1:77:70:28:0f:8a:22:95:1d:d0:9e:
2a:30:af:81:45:34:53:cc:02:40:77:41:6d:09:fe:
a7:fc:4b:63:83:15:9d:4d:c2:ee:50:b8:fd:a5:33:
e5:ee:76:29:87:53:ae:65:9e:c3:58:78:03:32:e3:
b7:d4:c8:25:0c:ed:16:69:d7:83:59:ed:e1:78:f6:
92:a6:bf:98:2b:ed:d1:31:0c:78:03:2e:77:48:7a:
44:b2:50:bb:20:27:74:4f:53:fd:c3:a7:eb:ac:4b:
f5:7e:f6:1d:93:79:95:aa:e6:79:a3:fb:2b:f4:ec:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:0E:F3:B4:25:F0:2F:7B:A3:D6:1F:62:12:64:23:94:9B:F9:B8
X509v3 Authority Key Identifier:
keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:2b:9b:2a:55:ae:e8:0a:c2:7a:bf:fb:52:43:19:eb:20:
36:31:b8:e6:64:a2:df:e9:07:db:d1:ac:76:d7:e0:52:bf:8b:
1f:4d:24:73:a4:20:70:91:22:41:fb:44:0d:61:ab:3b:eb:c9:
a5:98:fd:1c:06:6c:ae:7a:06:26:7b:8a:35:1b:db:5f:60:4f:
87:45:a0:d4:f9:e6:fb:3c:e6:80:22:73:cb:b4:f4:88:3b:58:
b4:dc:94:fb:7f:30:80:09:74:e3:62:06:21:d3:11:d7:e5:aa:
35:2e:0b:8a:42:f5:24:5a:67:7e:66:9d:31:50:bb:4f:bd:63:
2b:b1:c5:62:33:ff:0e:65:b2:e4:85:77:3a:a5:5d:53:1e:a4:
5b:a4:64:6d:22:6c:37:89:06:1a:43:a3:e8:f1:4c:96:1e:c4:
8f:42:71:89:5a:71:f4:95:ca:a5:bc:7d:27:b7:4a:0b:9b:3f:
57:e2:53:c2:b8:87:4a:40:12:62:e6:e6:7c:55:e2:e5:ff:56:
8a:87:ec:66:44:2b:32:c2:4c:7e:ff:ec:b9:bb:d4:05:44:53:
5c:d7:80:cc:4a:b3:b6:45:ac:11:41:d8:5a:ad:a7:c6:ad:ab:
3f:c2:33:12:46:70:3a:17:e0:26:d4:9a:ba:d8:70:6d:10:4d:
f2:2e:c4:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y0QTYxMTAvBgNVBAUTKDczNzU4MkVDNEU4RkUzOURGNDJDMERDMjI5QkEzN0Qx
QjZCMzg2NUEwHhcNMjYwMzI1MDY1NDMxWhcNMjYwNDAxMDY1NDMxWjAYMRYwFAYD
VQQDEw02OWMzODZhNy1mYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DRHkpuZLQ+pywQulLHBxU1NAanHzNHSL1P5BTM1QkowaNftGhHLuKWaWIQl
xhbNV35ggO3dAlfq87j34undYxBKUKPJlGEdkiN3rUBHb6ZwUs/e2xuWIgKGdPU6
2H0wnMwFs9dU8emifCnH4Hi3M8Le283cSJdt+WLvxIRPbeLu3uqE8EZyeTs7sXdw
KA+KIpUd0J4qMK+BRTRTzAJAd0FtCf6n/EtjgxWdTcLuULj9pTPl7nYph1OuZZ7D
WHgDMuO31MglDO0WadeDWe3hePaSpr+YK+3RMQx4Ay53SHpEslC7ICd0T1P9w6fr
rEv1fvYdk3mVquZ5o/sr9OwD1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv0DvO0
JfAve6PWH2ISZCOUm/m4MB8GA1UdIwQYMBaAFHN1guxOj+Od9CwNwim6N9G2s4Za
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRBNi8zQjY3QUQ4RTYz
QjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1MzBMQTNDS2JvMzBiYXpo
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjRBNi8zQjY3QUQ4RTYzQjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1
MzBMQTNDS2JvMzBiYXpobG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJqQrmypVrugKwnq/+1JDGesgNjG45mSi3+kH29GsdtfgUr+LH00kc6QgcJEi
QftEDWGrO+vJpZj9HAZsrnoGJnuKNRvbX2BPh0Wg1Pnm+zzmgCJzy7T0iDtYtNyU
+38wgAl042IGIdMR1+WqNS4LikL1JFpnfmadMVC7T71jK7HFYjP/DmWy5IV3OqVd
Ux6kW6RkbSJsN4kGGkOj6PFMlh7Ej0JxiVpx9JXKpbx9J7dKC5s/V+JTwriHSkAS
YubmfFXi5f9WiofsZkQrMsJMfv/subvUBURTXNeAzEqztkWsEUHYWq2nxq2rP8Iz
EkZwOhfgJtSauthwbRBN8i7ELA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:26 2026 by rpki-client