
$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: FWRse2eLVJpev122M/fOFQfOFoH7epExaUlYI5NpW/s=
Subject key identifier: 71:CD:D2:2F:E0:65:68:0A:27:7C:99:E1:E9:E1:FB:86:73:B8:CA:6E
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 1D
Signing time: Mon 11 May 2026 09:09:48 +0000
Manifest this update: Mon 11 May 2026 09:09:47 +0000
Manifest next update: Mon 18 May 2026 09:09:47 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: uJ7au7GnNmajKg1rWVHmsyvrHuUDw8xtNXAWmtorFdY=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: May 11 09:09:47 2026 GMT
Not After : May 18 09:09:47 2026 GMT
Subject: CN=6a019cdb-f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:9e:de:2e:dc:b0:96:ef:f5:ab:1e:57:09:
4c:c3:79:ad:28:71:46:8f:c3:2d:f8:af:c0:e1:89:
16:7f:f2:f9:24:6a:f5:5e:6c:a2:28:a0:ce:4c:36:
ea:7a:f3:3f:f5:de:f1:2a:30:c9:13:23:19:6f:af:
5a:2b:a1:9f:fc:77:dd:21:3d:44:28:0a:bb:99:07:
56:25:15:dd:77:c8:93:a2:af:ed:51:28:7f:d7:17:
a7:b7:10:b6:a8:bd:4a:1e:5f:38:27:2d:af:96:8e:
a8:bc:83:3e:eb:af:97:7d:07:86:4f:74:67:a7:58:
d4:24:21:37:07:8a:9b:f8:59:f8:c0:c0:68:44:4d:
83:fb:a2:b4:26:00:37:fc:96:9a:18:f4:7d:d3:60:
9d:e2:fc:4d:f2:24:c8:91:7c:9f:14:b7:3f:3c:90:
44:c9:96:95:1f:eb:19:c9:d9:c3:e2:12:00:1e:b4:
31:27:22:9f:be:50:c7:e1:8b:e9:de:d5:2e:79:22:
00:58:57:bd:4e:e2:88:e5:40:9c:5f:3e:5a:99:ec:
d2:b9:57:f0:9a:65:3b:b3:c4:71:a7:53:70:32:7a:
70:16:f2:81:da:25:15:8c:6e:67:4a:c0:b3:d3:1e:
d1:e5:5c:b7:a1:35:95:ad:85:fa:0f:f2:53:b2:52:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:D2:2F:E0:65:68:0A:27:7C:99:E1:E9:E1:FB:86:73:B8:CA:6E
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:d3:b0:55:38:7c:f5:52:aa:19:a9:29:45:02:8d:d7:48:
a6:d6:3a:0f:28:6e:42:38:67:4a:bd:10:d7:47:3e:76:1c:e6:
7b:0e:61:63:18:12:0b:3c:de:34:d1:2d:02:f9:64:9a:de:0b:
2b:d6:a7:fc:ba:dd:37:a7:d3:b6:d4:4b:92:01:fe:6f:e1:2a:
8f:66:4e:d1:27:b7:27:ab:d1:8f:af:ed:77:7c:61:c5:7e:09:
5e:c7:ed:53:a4:9d:ff:7d:6c:b9:8a:73:48:b9:c6:8f:3e:31:
a2:c2:0e:01:0b:c6:48:10:60:95:f1:f2:bd:29:df:40:39:e0:
06:1b:33:c1:b6:21:85:3c:55:89:05:66:ec:54:01:eb:ca:01:
ce:b8:28:ca:05:3b:e1:05:1c:5d:5c:75:8f:93:42:c3:d7:34:
f7:34:57:19:25:4f:8d:59:34:e2:64:96:0e:da:02:68:f1:e9:
8c:c2:da:6f:c2:64:9d:88:42:fa:b5:22:ce:30:04:7e:78:5a:
d4:fb:d5:d8:fb:ac:70:3b:b7:bb:c7:65:13:a4:cb:95:1e:5f:
a9:2a:ab:a7:54:7f:02:e3:09:3f:0e:ca:0b:bf:19:4d:c7:6b:
9b:a3:f9:f9:2a:1a:b5:35:ef:04:58:58:b1:36:2b:81:64:70:
42:2c:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:37 2026 by rpki-client