
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: YxKwPfXkbHwItCjl7NVaTGbqdEDa5S3opbr99XyEoqc=
Subject key identifier: 74:02:8D:3A:CE:E6:16:5C:9F:38:52:E9:35:1F:35:A6:40:8D:FE:95
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 3083
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 304E
Signing time: Mon 12 Oct 2026 15:28:33 +0000
Manifest this update: Mon 12 Oct 2026 15:28:32 +0000
Manifest next update: Mon 19 Oct 2026 15:28:32 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: +3HzeQe4B4Vj9TwNUmw9VDQ1gdxe+xzDm/gWxm5h3Xs=)
2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: J3PZrywDsbQ/lQ2CWAaJkUEV4PwYoj7ULriLoGXZDIM=)
3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: BfBmSktsaPGNqALLSu3GYa3mdTXISus2Av+2uclLCkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12419 (0x3083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: Oct 12 15:28:32 2026 GMT
Not After : Oct 19 15:28:32 2026 GMT
Subject: CN=6accfca1-7096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:d9:d9:d8:fe:0b:7f:3e:d2:9b:f9:1e:e5:
d7:d4:e0:8c:3b:51:0f:5d:55:12:50:83:46:b7:a1:
21:07:d6:f1:d7:0a:d1:98:d2:64:ae:0a:f3:6e:49:
88:c7:a7:09:d4:8e:35:07:2e:9f:5a:35:92:d8:34:
ee:f6:e9:2c:ee:ca:2d:14:a4:5e:d6:c6:b7:eb:bd:
72:7a:59:8a:6c:80:2f:dc:0f:7a:d5:a7:af:9a:a0:
4e:0d:fc:77:d0:86:c7:8b:ef:09:fa:f2:06:17:ed:
5d:1e:d7:55:16:a3:6a:3e:7e:21:48:24:f7:8c:eb:
5c:b6:09:e9:8f:cc:5e:5d:3f:26:03:2f:41:63:eb:
58:44:6a:12:2e:cc:90:43:24:d2:e6:c0:f3:ca:4a:
47:d6:eb:84:d0:95:a3:39:58:e3:13:4e:bb:b3:62:
da:98:ed:47:7f:67:10:7b:e7:27:8b:ed:50:cd:57:
ce:ba:3e:8f:1c:6f:bb:eb:fe:ea:af:32:fb:64:95:
1e:fe:de:26:8f:c6:aa:5a:59:13:f9:cd:d3:d6:54:
2c:ee:d1:b6:9f:87:d9:6c:d1:e2:43:e3:45:2a:be:
d0:68:13:a3:64:39:cb:f7:37:a1:62:7a:a1:dd:66:
77:27:f0:97:fb:ae:cd:a4:39:b5:30:5b:58:ec:f4:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:8D:3A:CE:E6:16:5C:9F:38:52:E9:35:1F:35:A6:40:8D:FE:95
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:4b:66:54:23:fc:a1:e0:cb:55:58:be:6b:81:df:52:6c:
09:4d:d7:d3:a0:13:78:03:15:d5:8e:35:c6:fd:06:6c:31:7c:
65:36:8b:e1:db:f9:f5:c0:67:5d:72:03:62:d6:77:74:6f:95:
2b:fc:21:47:5b:7f:d8:33:3b:84:81:a2:66:5c:cc:b2:16:8b:
9e:2c:ae:00:7e:42:16:85:f9:fe:86:e6:25:eb:2b:10:72:e2:
f3:7c:85:ee:37:fb:da:0a:61:9a:37:df:df:bd:ef:c1:e7:cd:
8c:53:99:db:60:4a:a0:39:6d:4c:6d:db:14:46:e9:ae:61:a9:
37:40:07:e3:11:06:c6:79:39:54:a4:0f:0b:e0:70:48:17:a8:
e3:48:9c:e4:b5:22:e7:53:1e:68:73:ca:bd:57:2e:5e:79:b7:
27:8d:99:96:5c:e7:67:43:b5:b4:3c:ef:ef:e7:66:42:4d:0a:
20:00:0f:0e:f4:98:4f:49:eb:b0:87:42:a6:d5:8c:3c:b3:7c:
92:1e:db:37:62:8f:4d:6c:b4:59:73:f5:cd:ab:8b:c3:8c:da:
5d:68:1a:a2:6b:a8:15:1d:7c:df:83:b8:1c:be:0b:28:99:04:
3a:31:ec:a1:66:15:86:b9:b5:6e:3a:44:e6:d5:37:88:86:42:
c9:24:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:37:45 2026 by rpki-client