
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier: r+8STSun0r0tss2DHDaRy3nNHGZJWBAyV4Jntx2Cq8k=
Subject key identifier: 16:F1:C2:DB:2E:D5:7B:41:C9:51:15:BC:17:0D:61:38:97:13:1A:0B
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial: 0F0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number: 0EFF
Signing time: Wed 22 Jul 2026 17:48:14 +0000
Manifest this update: Wed 22 Jul 2026 17:48:13 +0000
Manifest next update: Wed 29 Jul 2026 17:48:13 +0000
Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: g0JnzmwnwMn3zgAt5XBr3teeVgDW3kXeyjflUhwVQKE=)
2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3850 (0xf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Validity
Not Before: Jul 22 17:48:13 2026 GMT
Not After : Jul 29 17:48:13 2026 GMT
Subject: CN=6a61025e-8e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:62:c1:57:c9:35:2d:82:3c:53:31:fa:e3:
f2:ae:9f:24:73:ae:58:9b:87:df:76:82:f2:94:88:
c0:cc:b5:ff:21:a8:04:65:59:7f:b0:ed:c0:2e:47:
c3:fd:85:2a:88:89:e2:bb:4a:76:2b:67:e7:44:1c:
2a:16:f8:60:ad:f2:78:d4:46:53:e2:14:df:46:50:
00:77:38:84:1a:93:23:c1:ea:5a:f8:49:ca:31:66:
bc:61:49:36:ff:30:b5:15:50:0a:2a:70:15:f0:c6:
06:e7:e9:dc:5d:46:ac:9f:77:53:c3:72:00:6d:d8:
2d:20:34:d8:49:4d:4d:94:02:d1:8b:99:9d:90:85:
39:5b:ad:8f:2c:f0:9d:b8:6a:34:90:da:41:a0:02:
3b:ee:e5:a2:eb:00:a2:e1:ca:69:4e:5d:cc:62:c5:
86:44:0b:d0:21:1c:1c:9a:58:d5:49:7e:8f:d1:dc:
e5:98:f0:69:03:c8:61:06:38:8a:93:d6:c2:18:d4:
fe:24:79:93:de:f0:bf:36:35:93:8d:07:3a:28:87:
a6:b8:78:15:40:22:a6:14:a2:57:bd:31:47:65:b9:
33:59:c4:97:83:3e:64:11:ac:16:7c:61:93:f4:06:
b2:17:3b:e1:94:2d:a5:2b:b3:57:70:2f:b8:c6:3a:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:C2:DB:2E:D5:7B:41:C9:51:15:BC:17:0D:61:38:97:13:1A:0B
X509v3 Authority Key Identifier:
keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:34:20:4b:0e:be:ec:b3:35:9b:be:b5:52:39:68:ad:e8:
6b:60:f7:cc:27:41:24:89:e6:74:a7:36:d7:7e:4f:29:dc:5f:
20:ca:9d:1e:6a:f3:c7:bc:fe:a8:69:3c:a1:23:1f:52:2a:6b:
b9:bd:3c:bf:2a:a2:82:ab:66:d9:6b:e1:8f:14:fd:9d:c6:84:
42:79:85:46:0a:6f:94:39:9a:81:32:c5:98:4f:f4:7a:37:ea:
61:b4:33:73:6b:7f:68:0a:45:29:8c:09:a3:40:6c:fd:ef:44:
9f:82:80:1f:ab:63:9f:b4:18:d0:25:8c:c8:dc:d3:41:5f:93:
dd:48:9b:9c:a7:ea:c8:96:48:c7:6d:3d:ba:c9:69:f9:06:23:
6e:b3:95:1e:bf:44:19:11:de:fe:d5:96:92:e9:63:ca:8b:c2:
c3:dd:73:cc:c0:af:a3:f8:e3:e1:94:61:83:3c:0d:73:95:92:
55:55:87:57:2e:0d:79:d9:e5:de:82:21:95:f6:4c:80:67:3f:
e0:6e:b1:08:79:e5:ec:e2:77:4c:ee:d0:06:6a:f9:dc:92:34:
07:ca:1b:c3:97:fa:77:03:3d:e8:92:da:62:53:01:78:54:36:
f5:e8:e9:55:4c:9e:b5:18:ec:1e:cb:cd:f0:88:f4:f2:84:74:
1e:70:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:09 2026 by rpki-client