
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: 1t24Yc7Au4M1gpJJ7/m6YoJ6FMqNy2Q8Oji+22ZE5Xc=
Subject key identifier: 91:76:A0:AA:76:C1:F1:0C:D6:ED:45:66:6D:1E:8F:66:C5:B6:4D:C9
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 3015
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 2FE4
Signing time: Thu 26 Mar 2026 15:29:01 +0000
Manifest this update: Thu 26 Mar 2026 15:29:01 +0000
Manifest next update: Thu 02 Apr 2026 15:29:01 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: 1YcfbpMfYaKsJt70LnpWIWePu18GuhZK8kxgou6LO1M=)
2: 502355A2B13D11E59299870AC4F9AE02.roa (hash: LrI3Z2LgNfplNkM9E8legPgtdB8Kjo/oM53Ll6nVUjM=)
3: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12309 (0x3015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: Mar 26 15:29:01 2026 GMT
Not After : Apr 2 15:29:01 2026 GMT
Subject: CN=69c550bd-e86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:3b:1b:29:00:d7:2f:83:0d:11:31:d4:55:
93:ce:e9:bf:fa:72:8b:a3:3f:25:43:1d:d6:31:31:
dc:84:72:03:f6:ad:c7:47:a4:b8:29:80:a3:f3:ed:
ed:03:b7:9f:b1:90:89:b4:87:9a:12:a9:20:af:07:
a0:18:99:1a:a3:44:b1:f1:ba:ef:04:11:9c:c0:b2:
b8:d0:7d:c1:74:b0:52:9f:42:35:50:7f:37:b6:51:
a8:1b:29:2c:f2:e7:44:37:c9:a3:8e:04:0d:a8:7b:
0a:89:aa:53:53:89:8e:20:29:31:7b:56:e5:3c:ca:
fc:b9:a5:93:c2:fe:20:1c:b5:a9:19:e6:77:6d:bd:
1b:b0:a2:35:7e:af:89:03:e1:42:09:0f:ef:15:46:
11:13:8e:e5:e4:0d:6a:1a:83:7b:09:03:fb:84:26:
4a:70:2a:6c:35:32:a7:9a:2a:0a:1b:dd:cc:a2:ef:
92:30:49:fb:3f:0c:6c:63:38:7c:4b:38:df:dd:cf:
6f:36:f3:45:80:97:5a:57:9a:84:81:40:89:45:8a:
a1:8f:24:24:55:13:4c:6b:ff:6e:d9:67:8e:5a:a5:
65:8e:53:07:9f:bc:05:a9:03:93:11:3a:f2:39:0f:
55:6a:ad:66:cb:e1:7a:03:dc:8e:76:65:c6:8e:59:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:76:A0:AA:76:C1:F1:0C:D6:ED:45:66:6D:1E:8F:66:C5:B6:4D:C9
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:87:04:6e:a4:61:45:11:d5:53:11:67:a5:8b:5a:d6:96:9e:
90:f6:2e:4a:34:b0:54:1a:08:d2:a3:e9:76:f0:12:8d:2d:f6:
ef:d7:ce:f7:8b:0c:c8:97:c6:5e:40:0e:1c:59:9a:88:21:e4:
4a:06:dd:28:3e:90:68:2f:fe:17:db:c5:35:f2:ed:93:c8:37:
44:7a:22:f7:30:28:58:d9:92:72:30:c9:e2:ea:c3:9c:80:3d:
94:40:02:fb:ff:ea:73:49:85:c2:6a:54:aa:ec:f3:89:00:81:
df:b5:78:52:9a:25:78:bd:ea:6c:0a:ce:72:00:5f:e6:34:70:
62:53:16:ce:2a:be:1d:c6:d9:f9:4e:93:d0:d8:6e:a8:c2:48:
85:e0:b6:16:30:ef:d4:d0:32:0c:5c:34:36:70:4c:83:fa:11:
c7:1c:c4:60:2e:58:e4:0f:f3:73:fe:72:91:4f:42:20:a5:0b:
ab:d9:96:12:23:f4:d0:67:a1:89:00:de:d1:d3:37:fa:56:2e:
1d:b5:89:62:aa:c5:10:ff:e1:8f:d9:72:8b:9e:e8:48:0a:57:
fe:a3:58:92:f2:ca:01:7a:ab:d6:ae:e8:fe:05:47:85:f3:99:
0a:b9:8c:bd:cc:65:72:0d:71:78:c9:b1:a1:e2:a8:ab:10:96:
1d:a6:2a:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG
N0M1OEFBOEIwHhcNMjYwMzI2MTUyOTAxWhcNMjYwNDAyMTUyOTAxWjAYMRYwFAYD
VQQDEw02OWM1NTBiZC1lODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0Q7GykA1y+DDREx1FWTzum/+nKLoz8lQx3WMTHchHID9q3HR6S4KYCj8+3t
A7efsZCJtIeaEqkgrwegGJkao0Sx8brvBBGcwLK40H3BdLBSn0I1UH83tlGoGyks
8udEN8mjjgQNqHsKiapTU4mOICkxe1blPMr8uaWTwv4gHLWpGeZ3bb0bsKI1fq+J
A+FCCQ/vFUYRE47l5A1qGoN7CQP7hCZKcCpsNTKnmioKG93Mou+SMEn7PwxsYzh8
Szjf3c9vNvNFgJdaV5qEgUCJRYqhjyQkVRNMa/9u2WeOWqVljlMHn7wFqQOTETry
OQ9Vaq1my+F6A9yOdmXGjlkj6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJF2oKp2
wfEM1u1FZm0ej2bFtk3JMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4
MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z
WHVVbEo0LWNfVEQzeFlxb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs4cEbqRhRRHVUxFnpYta1paekPYuSjSwVBoI0qPpdvASjS3279fO94sMyJfG
XkAOHFmaiCHkSgbdKD6QaC/+F9vFNfLtk8g3RHoi9zAoWNmScjDJ4urDnIA9lEAC
+//qc0mFwmpUquzziQCB37V4UpoleL3qbArOcgBf5jRwYlMWziq+HcbZ+U6T0Nhu
qMJIheC2FjDv1NAyDFw0NnBMg/oRxxzEYC5Y5A/zc/5ykU9CIKULq9mWEiP00Geh
iQDe0dM3+lYuHbWJYqrFEP/hj9lyi57oSApX/qNYkvLKAXqr1q7o/gVHhfOZCrmM
vcxlcg1xeMmxoeKoqxCWHaYqGQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:48:20 2026 by rpki-client