
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: 8qlAJQDW6qWjtK6onUyQQaq9RNI3gfFkQjV3X2lDyiM=
Subject key identifier: 58:CE:82:10:3F:78:14:8C:A3:DE:54:93:37:B9:C6:70:9E:E3:2B:0A
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 63
Signing time: Sun 27 Sep 2026 08:41:05 +0000
Manifest this update: Sun 27 Sep 2026 08:41:05 +0000
Manifest next update: Sun 04 Oct 2026 08:41:05 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: nKokqwHVG47OMYPFiqDlyHZbfwmx/R63EXSL7+qM1pk=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Sep 27 08:41:05 2026 GMT
Not After : Oct 4 08:41:05 2026 GMT
Subject: CN=6ab8d6a1-aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5b:10:32:d7:8b:c5:c9:35:ae:04:12:ab:0e:
d8:0e:c7:73:31:b0:82:a2:0e:2d:17:c5:66:71:17:
1e:d3:8e:dd:43:aa:77:67:00:03:b1:68:da:51:3a:
c5:04:60:bc:49:27:ee:c6:d8:0a:9c:96:63:0a:e8:
0e:b1:54:91:ba:ff:fa:e2:0c:fc:04:b5:9c:55:89:
be:05:66:de:49:ae:22:34:bc:04:2c:15:5a:e5:11:
10:f5:4c:9a:6a:df:28:f6:ab:e4:48:ca:c7:35:48:
4b:35:53:15:cf:53:44:84:e0:67:db:62:bf:99:41:
f8:15:88:de:69:ae:2d:11:1d:06:73:54:0c:ec:61:
08:77:4d:0c:51:c6:ea:0c:80:e0:52:04:a2:d0:42:
d6:5e:a4:74:dd:0d:d8:2a:fc:33:2d:85:d5:01:46:
ab:78:5f:32:69:01:20:de:23:d6:51:f5:15:49:83:
e1:68:12:1c:d8:6e:2f:7b:4c:f8:80:78:a6:d4:55:
8b:1b:e7:b7:88:db:ec:3d:f1:38:53:42:e2:bc:d0:
ea:e0:72:49:62:36:4c:8a:70:9a:85:5e:7f:17:4f:
ef:4d:4b:a8:5b:77:35:43:e4:a7:45:cf:39:2a:fc:
93:40:29:8e:d8:5f:8b:9c:f0:e8:0b:9c:25:76:86:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:82:10:3F:78:14:8C:A3:DE:54:93:37:B9:C6:70:9E:E3:2B:0A
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e6:0a:56:f6:ef:e0:eb:43:af:3b:13:33:b9:d1:b8:7e:c8:
12:d8:4d:3b:78:51:a0:f9:e6:8f:56:4e:fb:ea:de:58:05:e1:
52:50:cd:9e:61:18:85:c6:46:ec:cb:23:2f:f0:39:08:34:50:
b8:ea:3a:fe:7f:fb:2e:83:01:48:96:78:2f:f1:01:c6:c7:fe:
02:4b:03:1a:4f:31:0b:29:8a:fd:8b:0b:bc:37:d7:de:dd:f5:
58:28:1f:4a:c0:73:e0:50:6f:d8:18:a1:7b:14:30:12:b8:d8:
b9:e9:ab:cd:40:d7:16:a1:74:d7:cd:6e:ea:99:7b:20:d2:c8:
75:31:28:74:84:59:3f:63:d6:f6:a0:17:b8:16:f8:66:a0:23:
28:ff:c1:bd:19:cf:4d:e0:74:42:f5:e1:69:45:af:24:d3:87:
f6:69:84:0d:c0:d8:39:ea:f3:68:8f:0c:e2:f8:63:cf:76:dd:
f9:ea:8d:21:4a:97:29:69:20:a8:65:3b:37:1a:ac:91:a9:64:
21:3d:73:29:6c:16:f9:b5:6c:da:63:52:b7:27:2b:bd:fc:5d:
c5:08:11:ef:21:e3:38:bb:e5:a8:af:62:0f:be:52:11:a7:bb:
4a:a0:0a:30:5a:9e:f3:bd:d0:19:28:d8:f3:da:b6:01:76:f9:
1b:0f:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:02:51 2026 by rpki-client