
$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: PWtlSsCN5+Kg5DHvU+Cp7QMq2+1uYxw2PNRsJX8vUos=
Subject key identifier: 1B:AC:56:25:31:00:BC:76:B4:B6:3C:40:5D:5E:ED:3C:0A:6D:4B:EC
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 05
Signing time: Wed 25 Mar 2026 08:26:59 +0000
Manifest this update: Wed 25 Mar 2026 08:26:59 +0000
Manifest next update: Wed 01 Apr 2026 08:26:59 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: Ox99NfAfkt30tIKLI/ogRnJSt430kG+XKBZLOa3FxQY=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Mar 25 08:26:59 2026 GMT
Not After : Apr 1 08:26:59 2026 GMT
Subject: CN=69c39c53-770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:5c:08:88:3a:7b:46:26:54:5c:f4:a6:bb:
ad:f0:08:40:ec:b5:f9:eb:00:ec:67:1d:73:66:02:
32:26:ba:a7:4b:0a:13:f4:d0:aa:33:a9:51:46:4e:
2b:1b:44:98:fe:38:61:86:7f:52:80:17:43:37:10:
64:d3:d5:ca:6c:2f:7a:ce:14:22:3b:26:30:f6:75:
54:8d:c0:be:ba:ad:f5:26:9d:7a:d5:2b:f4:ee:bf:
68:5d:31:16:22:5f:a5:2e:03:cb:68:2e:43:74:41:
e1:85:a7:be:15:c7:99:3e:e8:d5:68:69:6e:b9:f8:
e6:42:6b:3c:bc:34:22:2f:63:5a:aa:fc:7b:3a:40:
d1:dd:93:7a:73:fe:f7:bb:b0:81:7f:fd:46:76:91:
95:fb:1b:54:a9:ce:ec:7d:33:a7:88:b3:41:90:86:
f8:76:fa:f6:0d:38:27:fa:5f:a6:f4:ea:34:7a:7a:
e0:d1:9b:b5:f4:5e:9d:e0:8a:bf:97:57:0a:fa:57:
1a:98:30:d3:ef:00:41:2a:8d:72:6c:76:e4:67:bc:
1f:2a:b3:d8:72:bf:38:23:7f:86:c4:8b:f6:86:fe:
88:47:07:4f:ca:f8:f3:c1:5d:28:88:9e:f2:57:6c:
86:af:fa:7a:64:ce:43:bb:65:ad:95:28:d3:75:dd:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:56:25:31:00:BC:76:B4:B6:3C:40:5D:5E:ED:3C:0A:6D:4B:EC
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:ac:1e:58:48:8f:58:18:4a:02:22:b3:39:9d:d4:df:46:
2e:67:44:ae:d4:38:e2:b3:e5:ee:77:0f:0f:9a:d3:3b:17:ac:
e6:d5:a6:5f:95:b6:88:f8:32:3d:03:cb:4f:3d:42:05:c7:9e:
3e:6e:01:c2:95:e4:26:c2:72:12:ee:89:ec:78:0d:ef:c9:a7:
57:9f:ca:3f:9e:1e:19:56:51:49:b6:00:70:b8:2e:38:4f:c4:
0b:3c:42:08:00:8f:2e:a8:8e:c5:07:58:9a:37:15:fa:e4:a6:
56:e1:4d:ec:11:3e:0c:35:7f:a5:3a:a1:1c:75:d5:37:85:90:
02:c9:2b:cd:10:d8:b6:8e:47:a6:5a:61:40:ac:8c:60:7c:21:
60:5d:f9:1d:aa:05:b3:ee:3d:f2:28:44:18:ed:bd:69:ff:87:
ff:72:1b:1b:0f:54:66:e2:73:1f:16:27:ff:2e:8a:bf:9d:0f:
1f:1e:f8:5e:c3:cd:bb:55:d4:e5:f4:7a:67:5f:b8:2a:70:a8:
81:4b:ff:eb:c0:c0:21:56:68:5d:c0:42:d1:f8:63:cd:fc:1c:
88:b1:7e:f7:61:39:80:c7:6c:4e:a9:a0:63:f8:f9:f2:dd:48:
b1:83:52:da:59:71:c8:29:fd:a1:4b:77:84:0a:96:87:0e:aa:
b9:60:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:42 2026 by rpki-client