
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier: Anj96YK0aZPOXV/lXRMAkXsDCd1TbLPc1iYGpcayJ38=
Subject key identifier: 69:DF:60:88:8F:32:7B:4C:2D:89:F2:2E:5F:15:D4:40:33:22:50:84
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial: 08A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number: 096A
Signing time: Tue 24 Mar 2026 20:18:37 +0000
Manifest this update: Tue 24 Mar 2026 20:18:36 +0000
Manifest next update: Tue 31 Mar 2026 20:18:36 +0000
Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: DLBzxGzKfEggIXViBCp+HKa0eGehmOiJSbLarXx1TNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Validity
Not Before: Mar 24 20:18:36 2026 GMT
Not After : Mar 31 20:18:36 2026 GMT
Subject: CN=69c2f19d-cb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:fb:51:94:9e:f1:e6:95:d0:b6:ac:fa:6a:
1d:b0:c7:09:e8:58:08:3b:01:31:68:15:ea:94:0a:
2b:aa:8d:d7:15:0d:62:df:e0:e0:4e:cb:64:46:42:
7e:6b:33:24:0a:2c:a8:aa:f7:0c:9b:84:0b:4c:de:
06:86:4f:5f:f9:f8:18:62:b5:b4:d3:8f:1b:12:88:
16:6a:cc:0f:02:69:4c:b7:32:c2:70:1c:56:f5:3c:
56:9e:ac:b6:3e:07:a3:41:51:e4:0e:16:cc:96:2e:
94:f8:ac:fe:94:60:15:fc:86:53:4a:ab:72:9e:16:
b8:cc:33:f3:03:42:42:aa:d0:b6:0f:8f:19:29:cc:
22:06:b2:66:22:9f:13:86:a6:9e:0f:d4:60:99:2c:
7f:bb:a6:fa:68:36:0d:b1:87:c7:f7:a4:97:24:a1:
15:2b:cf:3b:11:f8:b1:34:4a:0c:e7:29:c9:ca:a4:
47:12:60:9a:d5:44:b7:84:88:99:b6:a0:5e:62:ee:
0a:a3:5d:89:6d:5c:6d:02:a7:f4:1d:f3:b4:a5:e6:
bd:4d:ef:2c:dc:a1:0a:39:fb:fb:f5:65:72:d8:e1:
42:de:d8:d6:40:c5:3a:69:1f:b8:0d:67:81:83:b0:
e8:a0:c8:ff:cc:e4:cf:83:bd:41:ad:1a:31:b4:91:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:60:88:8F:32:7B:4C:2D:89:F2:2E:5F:15:D4:40:33:22:50:84
X509v3 Authority Key Identifier:
keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:75:0e:5b:ef:25:d2:6a:7d:77:0a:0a:46:3b:36:ea:ea:32:
20:82:a7:b5:01:91:9b:11:33:0a:94:e2:a9:62:c2:3b:32:73:
f5:eb:ce:6b:8d:b4:b7:e6:e6:26:e2:65:ac:a6:ce:c7:74:cf:
6c:ae:01:29:4a:26:32:cb:58:5c:02:9d:60:2e:78:eb:21:87:
be:ee:64:6a:37:cf:56:09:59:64:a1:9f:cb:9a:77:0b:3c:40:
7c:30:38:ba:e3:9f:88:53:14:55:d2:90:ac:e5:5c:d5:10:26:
8f:a6:57:c6:ce:ad:b0:95:89:46:6b:06:f1:ff:09:89:cd:47:
97:a2:c6:df:65:6f:06:61:0d:7e:5c:cc:31:08:29:45:c3:fb:
ab:f5:21:e2:5d:29:b9:40:4d:3d:c2:a4:ad:c2:bb:34:92:ed:
c8:61:98:66:10:0e:0a:34:40:cb:7d:4b:e4:c5:15:fc:e5:ec:
25:77:c6:b8:1e:bd:7b:ad:ec:a6:34:49:7d:12:02:24:ec:b9:
ba:69:3c:03:c9:9d:35:51:1a:9e:62:3e:ea:73:af:de:bc:20:
ca:2b:e2:f2:99:44:b2:c8:90:44:73:e3:47:97:b5:07:87:65:
b9:f1:65:f3:8b:e7:fd:39:48:d3:58:d2:52:78:6c:c6:46:73:
8e:1e:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:44 2026 by rpki-client