
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier: PEQfEaAmgPHMt063bPT5FsvMpcEsUw4Z4//C5lO4ddY=
Subject key identifier: 56:50:EC:3F:0F:05:BC:48:91:F9:88:B6:A7:DD:41:D8:44:E1:98:B2
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number: 03B4
Signing time: Mon 11 May 2026 00:45:00 +0000
Manifest this update: Mon 11 May 2026 00:45:00 +0000
Manifest next update: Mon 18 May 2026 00:45:00 +0000
Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: c4DXEf6Sv+4eepVoRfJ5XsynELaNue0XQVE1kJwAK9Y=)
2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: RJPc40XFK5jtMh57bQpC2ukr/5ePr0qsfi6VvsDutiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Validity
Not Before: May 11 00:45:00 2026 GMT
Not After : May 18 00:45:00 2026 GMT
Subject: CN=6a01268c-2d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:e6:c7:64:d8:a9:11:15:ba:ac:12:11:4c:
f9:d1:f4:5a:cc:5f:51:b0:77:04:eb:4d:fc:f7:9a:
f1:4d:8b:6b:03:43:ff:92:44:06:c3:e6:15:0a:5a:
83:c9:bc:f6:c7:e2:d8:3d:3d:56:89:e8:5f:17:e1:
bf:a6:c9:dd:59:ab:ef:78:81:84:41:52:bd:63:07:
51:ed:18:f5:b9:3b:b1:83:b1:41:08:eb:da:c6:db:
53:ed:00:74:d4:22:93:91:5f:93:ee:1b:e6:47:02:
78:e0:89:04:93:57:6f:19:21:bb:f5:19:87:e7:9c:
7c:1e:8d:5d:a0:9b:15:98:90:21:b1:6f:63:2c:1b:
29:20:f3:e0:b4:62:8a:1c:9f:16:9b:09:66:25:8c:
22:ac:01:78:75:99:f6:5e:69:80:76:2b:8a:60:5c:
09:b8:97:bf:35:00:f9:3a:0c:5e:64:56:a7:36:dc:
e1:b7:8d:28:55:bc:57:89:01:df:c8:e5:f6:d8:98:
16:29:47:4e:14:df:47:d8:29:30:bb:1f:33:9e:97:
2e:f9:56:04:c3:1e:42:80:92:de:91:c9:8d:76:5a:
37:71:bb:dc:39:c3:1e:76:3c:c1:2a:17:ea:bc:49:
b8:4a:dc:cd:51:41:84:0b:8c:c1:cc:4f:f3:ea:b0:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:EC:3F:0F:05:BC:48:91:F9:88:B6:A7:DD:41:D8:44:E1:98:B2
X509v3 Authority Key Identifier:
keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:96:23:ae:74:65:0f:ef:4d:d9:0e:1f:9f:77:d8:af:1c:
5f:d9:b5:ad:eb:03:70:51:0e:a4:cb:e1:a8:58:73:be:ae:4c:
4e:c2:d7:8d:56:21:75:81:27:b7:31:ff:87:71:9a:ee:e1:4a:
70:f6:87:e5:20:cf:a0:30:6a:61:26:82:8d:46:ee:6c:79:58:
99:e8:11:71:32:44:d0:9b:f9:0d:4f:63:c9:1f:7a:25:f3:4e:
f1:fe:d2:5a:df:a5:99:2d:86:c5:2a:11:49:7c:d0:2f:59:0b:
9a:fc:e6:1e:7b:9b:ac:60:de:a5:66:c7:8a:67:94:08:4c:05:
4d:ea:a9:e5:a0:e5:b8:50:08:81:52:f7:fa:d3:63:32:2f:58:
58:34:75:48:d1:d8:11:76:b8:3d:fc:f7:e7:8f:d3:50:80:87:
78:db:d7:fd:ed:c6:06:4c:7e:8c:70:bb:82:1c:41:de:04:7e:
16:36:b1:9b:e9:60:57:45:f0:53:b3:2a:0e:47:c3:fe:77:ea:
70:7b:99:57:fb:ce:28:92:a4:80:2e:fd:61:d3:30:69:05:66:
8e:d8:1a:af:3a:2c:64:b0:35:15:b7:f7:99:3d:59:0c:d0:ba:
12:77:90:ad:63:e9:84:5c:dc:be:2e:e8:dc:80:c8:6e:0c:f7:
1b:32:a7:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx
RDUyNjQzNUMwHhcNMjYwNTExMDA0NTAwWhcNMjYwNTE4MDA0NTAwWjAYMRYwFAYD
VQQDEw02YTAxMjY4Yy0yZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJrmx2TYqREVuqwSEUz50fRazF9RsHcE603895rxTYtrA0P/kkQGw+YVClqD
ybz2x+LYPT1WiehfF+G/psndWavveIGEQVK9YwdR7Rj1uTuxg7FBCOvaxttT7QB0
1CKTkV+T7hvmRwJ44IkEk1dvGSG79RmH55x8Ho1doJsVmJAhsW9jLBspIPPgtGKK
HJ8WmwlmJYwirAF4dZn2XmmAdiuKYFwJuJe/NQD5OgxeZFanNtzht40oVbxXiQHf
yOX22JgWKUdOFN9H2Ckwux8znpcu+VYEwx5CgJLekcmNdlo3cbvcOcMedjzBKhfq
vEm4StzNUUGEC4zBzE/z6rCYlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZQ7D8P
BbxIkfmItqfdQdhE4ZiyMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5
QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3
Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACpOWI650ZQ/vTdkOH5932K8cX9m1resDcFEOpMvhqFhzvq5MTsLXjVYhdYEn
tzH/h3Ga7uFKcPaH5SDPoDBqYSaCjUbubHlYmegRcTJE0Jv5DU9jyR96JfNO8f7S
Wt+lmS2GxSoRSXzQL1kLmvzmHnubrGDepWbHimeUCEwFTeqp5aDluFAIgVL3+tNj
Mi9YWDR1SNHYEXa4Pfz354/TUICHeNvX/e3GBkx+jHC7ghxB3gR+Fjaxm+lgV0Xw
U7MqDkfD/nfqcHuZV/vOKJKkgC79YdMwaQVmjtgarzosZLA1Fbf3mT1ZDNC6EneQ
rWPphFzcvi7o3IDIbgz3GzKnHg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:37 2026 by rpki-client