
$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: pNeLi+x8Ncl7zKxoBDUbkUyfZrKCWEYbeOglE86D2+M=
Subject key identifier: 3B:DD:07:39:C4:F0:98:61:AA:58:7B:D3:93:D9:09:16:89:BC:69:6A
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 10:32:54 +0000
Manifest this update: Thu 23 Jul 2026 10:32:54 +0000
Manifest next update: Thu 30 Jul 2026 10:32:54 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: jE2PjmiyvrRiTH1dxpIlwT5aBqwZCxW3d8Us730gs0E=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Jul 23 10:32:54 2026 GMT
Not After : Jul 30 10:32:54 2026 GMT
Subject: CN=6a61edd6-f6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:65:13:70:29:dc:fe:25:69:2e:93:34:9c:
60:5d:a0:75:07:91:1b:43:1a:f2:13:b0:89:d8:33:
bd:05:39:2f:fc:4b:81:07:07:47:32:6d:d2:e7:97:
1f:b1:e3:43:fb:52:f4:2c:db:bb:24:09:90:a7:8e:
e9:a2:20:9e:43:69:a7:c4:e3:9f:2f:1a:8d:40:df:
7a:e8:75:8f:e5:a9:5f:53:6b:f7:13:23:ce:d4:ae:
78:67:df:b1:d3:0b:82:84:13:35:83:f4:d8:cd:b4:
3c:9a:1d:6c:d9:34:ac:30:39:a0:97:04:85:54:1c:
9e:cb:1a:08:51:e7:6c:d1:06:02:74:65:ce:96:d8:
59:22:93:a1:fa:2c:6e:94:65:1a:71:ab:e7:f3:c9:
aa:11:3c:b6:68:52:aa:c2:bd:64:96:33:67:f3:c2:
0b:db:f2:b0:ce:f5:25:02:2b:fe:73:a0:8a:a1:a8:
e4:60:68:cf:f1:c4:a4:86:0c:b4:74:a5:fa:79:51:
b8:97:dd:88:19:34:8e:69:4a:30:e0:dc:e8:08:55:
2d:4c:28:4d:d6:3a:07:63:a7:98:ba:d6:9f:9b:f1:
12:1c:c3:0b:d2:69:a1:bf:f4:3c:0d:fd:7b:be:b1:
2c:41:74:3a:df:7b:3d:e6:ee:b5:e2:89:c0:a9:63:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:07:39:C4:F0:98:61:AA:58:7B:D3:93:D9:09:16:89:BC:69:6A
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:2e:c5:39:df:85:a8:64:13:64:49:a5:6f:29:2c:0a:04:ef:
c0:dd:97:8b:45:59:94:bf:4f:bc:3f:38:d0:8e:5c:a5:b9:20:
c9:08:a3:26:7b:03:e5:73:42:d4:95:15:61:d0:f4:4b:54:9f:
82:e7:fa:3e:06:db:40:f8:1b:9f:f4:ca:14:fb:56:29:37:90:
65:cc:f0:4e:30:c1:d5:70:13:bd:3f:e4:18:22:62:10:95:6a:
53:9a:8a:b7:58:0b:28:51:df:21:ed:0c:5d:ac:74:67:0d:d5:
76:ca:a1:a1:f5:1c:4d:c0:cf:96:ef:98:98:99:65:a4:0b:4c:
5a:f6:6d:d6:39:88:92:85:bb:0c:7b:cb:f7:dd:86:e8:f7:63:
f5:dc:bb:5f:b2:90:ee:3f:67:6e:b4:2b:86:53:80:82:48:23:
3b:dc:cd:59:62:39:6f:7d:3b:85:b8:6b:ec:59:cb:28:ea:6b:
f4:7c:6f:65:9a:d8:2b:a7:81:fc:69:b6:0a:b7:67:1d:a7:41:
1e:0a:db:42:d4:cc:d3:7f:ef:da:e3:09:03:3e:4f:44:0d:72:
d3:e3:08:b8:f9:80:78:eb:f4:fa:40:9c:17:5a:5e:3c:4d:72:
21:86:9d:95:35:a9:13:f7:98:6c:ff:5a:d5:b3:a3:3c:ac:c0:
48:df:b0:0a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OTI0RDExMC8GA1UEBRMoNEZFREQ4MDA2ODc4OEZGMDc5QkZCQTNGM0FFNDkzNzI2
NDExNUZDMDAeFw0yNjA3MjMxMDMyNTRaFw0yNjA3MzAxMDMyNTRaMBgxFjAUBgNV
BAMTDTZhNjFlZGQ2LWY2ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxp2UTcCnc/iVpLpM0nGBdoHUHkRtDGvITsInYM70FOS/8S4EHB0cybdLnlx+x
40P7UvQs27skCZCnjumiIJ5DaafE458vGo1A33rodY/lqV9Ta/cTI87Urnhn37HT
C4KEEzWD9NjNtDyaHWzZNKwwOaCXBIVUHJ7LGghR52zRBgJ0Zc6W2Fkik6H6LG6U
ZRpxq+fzyaoRPLZoUqrCvWSWM2fzwgvb8rDO9SUCK/5zoIqhqORgaM/xxKSGDLR0
pfp5UbiX3YgZNI5pSjDg3OgIVS1MKE3WOgdjp5i61p+b8RIcwwvSaaG/9DwN/Xu+
sSxBdDrfez3m7rXiicCpY9nTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO90HOcTw
mGGqWHvTk9kJFom8aWowHwYDVR0jBBgwFoAUT+3YAGh4j/B5v7o/OuSTcmQRX8Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MjREL0NCRTk3QjYyMjc3
NTExRjFBODVENzA0Q0M2ODMzNzczL1QtM1lBR2g0al9CNXY3b19PdVNUY21RUlg4
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVC0zWUFHaDRqX0I1djdvX091U1RjbVFSWDhBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
MjREL0NCRTk3QjYyMjc3NTExRjFBODVENzA0Q0M2ODMzNzczL1QtM1lBR2g0al9C
NXY3b19PdVNUY21RUlg4QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWLsU534WoZBNkSaVvKSwKBO/A3ZeLRVmUv0+8PzjQjlyluSDJCKMmewPlc0LU
lRVh0PRLVJ+C5/o+BttA+Buf9MoU+1YpN5BlzPBOMMHVcBO9P+QYImIQlWpTmoq3
WAsoUd8h7QxdrHRnDdV2yqGh9RxNwM+W75iYmWWkC0xa9m3WOYiShbsMe8v33Ybo
92P13LtfspDuP2dutCuGU4CCSCM73M1ZYjlvfTuFuGvsWcso6mv0fG9lmtgrp4H8
abYKt2cdp0EeCttC1MzTf+/a4wkDPk9EDXLT4wi4+YB46/T6QJwXWl48TXIhhp2V
NakT95hs/1rVs6M8rMBI37AK
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:20:16 2026 by rpki-client