
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: PaKHNU2tF42qBW7nMtRG395RvYEOoNXG1Jn/dfevdtE=
Subject key identifier: 71:7A:21:D9:D8:98:60:0D:04:B8:19:D3:AB:A6:FE:DD:5D:B6:70:0D
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 302D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 2FFC
Signing time: Tue 12 May 2026 15:28:22 +0000
Manifest this update: Tue 12 May 2026 15:28:22 +0000
Manifest next update: Tue 19 May 2026 15:28:22 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: nZyQQm4zsPOtCfkhpr6GZSeKwKC6KJq9YhSrbVNUeWc=)
2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=)
3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: LrI3Z2LgNfplNkM9E8legPgtdB8Kjo/oM53Ll6nVUjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12333 (0x302d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: May 12 15:28:22 2026 GMT
Not After : May 19 15:28:22 2026 GMT
Subject: CN=6a034716-64c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:44:c1:10:f8:7f:1c:8d:65:01:86:74:46:
31:c9:33:57:3b:62:18:32:82:12:9c:cd:2d:87:ca:
fa:e2:22:2a:ad:b4:b7:64:cb:b2:e3:7d:96:f6:2b:
52:ea:af:78:63:61:db:0a:e1:10:df:cd:d2:a5:7f:
ba:a0:2d:05:8d:13:80:6f:10:3a:41:ba:4d:17:66:
6e:e7:a4:cd:7c:9e:7a:47:ed:69:0b:63:02:0e:12:
47:53:73:fe:3e:45:ef:f3:f9:80:b7:fb:f6:b1:f9:
26:85:1a:d7:1e:40:1f:b9:19:2b:00:74:e4:1e:2c:
f2:1e:96:c8:8d:a2:c0:c9:ec:99:8a:d8:87:5f:3c:
87:00:84:b2:41:fd:70:d4:9d:6d:00:5c:41:1d:16:
8f:49:50:2c:e0:30:4b:cc:cb:14:b2:db:2d:7b:14:
05:d3:ff:eb:4b:33:6e:d5:b0:97:74:6c:39:85:fd:
37:22:b4:0f:95:3d:53:4b:e3:ea:eb:33:fe:23:28:
be:54:d9:f8:78:a8:84:97:a6:ce:cf:93:00:ba:1c:
4e:70:87:6f:09:8e:0d:fc:e3:4e:26:13:08:27:ba:
83:93:70:ac:27:ca:c4:1e:68:08:ae:53:f5:32:17:
08:30:e5:60:f1:17:ea:60:75:d8:01:fe:48:c3:4b:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:21:D9:D8:98:60:0D:04:B8:19:D3:AB:A6:FE:DD:5D:B6:70:0D
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:16:2d:bc:fd:82:5c:20:42:37:1e:fc:71:2a:28:00:c0:
c6:5a:10:df:8f:56:ae:43:c8:69:ba:1c:2e:6c:d5:69:db:f6:
11:04:aa:f6:02:a7:08:6c:19:77:f3:fa:a1:25:7b:fe:bd:da:
4d:b8:52:11:ea:77:b5:7d:47:b7:a7:8c:c1:3f:bb:68:78:90:
5b:26:c9:cb:c3:f8:b3:c6:9c:fb:ed:54:be:37:b9:f6:f3:c5:
96:cd:b9:d6:e8:ca:96:e5:8c:f9:4c:3b:78:1a:13:42:6e:67:
6e:2a:2c:32:d6:45:3d:8d:8f:fc:19:ee:d5:77:65:c5:39:37:
fe:b8:83:7b:25:d3:ee:a0:0b:87:5d:4b:8d:6a:ee:0e:c5:e9:
7d:39:90:25:e2:0f:da:e0:e0:c8:f0:0f:5c:67:a3:b5:2c:cc:
43:b0:9e:00:88:24:d0:be:8c:f1:8a:18:84:e2:fc:08:bd:1f:
1b:27:75:0e:7e:cd:3c:87:cf:08:91:b1:d3:f2:19:86:16:ad:
6a:f0:ac:ff:fb:64:b0:ac:71:b8:96:0c:a7:be:6c:14:f0:4b:
49:2d:15:b2:d1:c4:27:33:85:16:51:46:64:7e:67:e4:36:fe:
8a:11:d1:fa:86:1b:80:ad:44:e6:1c:25:73:c6:a3:75:2f:d3:
15:47:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:19:45 2026 by rpki-client