
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier: Op8san/Qz1R7YR1qcpQLlj/MScg9jzxXaGlx007UZgc=
Subject key identifier: 67:05:0E:21:ED:7F:9D:94:25:02:9E:31:0C:D0:7A:7F:A9:C3:DE:DE
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial: 03F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number: 03E3
Signing time: Thu 23 Jul 2026 01:27:03 +0000
Manifest this update: Thu 23 Jul 2026 01:27:02 +0000
Manifest next update: Thu 30 Jul 2026 01:27:02 +0000
Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: bT1i1ZURIENNbilHxH8crOWbEhsxTYc5H1730GV8MWQ=)
2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: 4btki8MufbxcYjK/3ldd2OyHnoFsKyUfQZm8u1lkOas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Validity
Not Before: Jul 23 01:27:02 2026 GMT
Not After : Jul 30 01:27:02 2026 GMT
Subject: CN=6a616de6-a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:be:51:7b:76:b0:d2:08:6f:62:d0:bb:59:
21:50:2b:e6:b7:1f:78:79:7e:1b:84:ad:65:fd:8d:
79:e0:33:c2:c3:2b:6f:49:64:46:bf:5f:3d:12:c3:
6f:87:6e:b5:dc:ae:2b:54:ee:90:0d:dd:17:bb:e6:
dc:76:46:e8:19:0d:b0:6f:a3:74:49:9b:43:ac:92:
ad:da:4e:e7:f6:20:e3:13:36:91:bd:03:67:73:5c:
2a:18:8a:01:28:bd:e4:51:be:6f:21:d6:64:19:e5:
65:8b:ed:d7:91:a8:09:24:9f:31:32:79:96:bd:30:
c3:62:1c:fc:4a:59:39:c4:9a:da:31:70:ea:66:e9:
a0:2d:bd:cf:fd:ef:08:94:62:21:c0:b1:49:4f:03:
dc:02:03:86:de:dc:bb:89:e6:99:db:fd:a8:ba:56:
fe:53:39:50:c9:0e:5f:ce:06:3d:fb:f2:8d:b6:21:
cd:04:ae:82:b4:81:d3:94:f6:91:65:4b:3e:89:19:
3c:b7:d8:cb:e9:0a:db:41:26:a6:b8:96:e0:da:b9:
15:d5:6a:62:f6:df:22:74:17:f7:e7:82:af:8e:c9:
0d:3c:a6:00:28:2d:b8:ef:9c:48:d4:d9:b3:0e:51:
7a:fd:99:e1:29:fd:3f:f7:42:ef:cf:81:1a:d5:71:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:0E:21:ED:7F:9D:94:25:02:9E:31:0C:D0:7A:7F:A9:C3:DE:DE
X509v3 Authority Key Identifier:
keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:43:9a:99:53:6d:56:87:ed:f5:06:f5:a4:71:0c:de:2a:
f2:ce:e9:19:61:e9:25:18:08:ef:45:88:a8:85:a5:eb:6f:ab:
51:5f:c7:55:f7:0e:d1:6d:65:f0:8f:b1:77:61:7c:68:e5:08:
c8:a0:ca:31:a3:fa:04:32:f8:d9:48:b5:cd:ba:f7:8f:59:0d:
e8:72:7f:d2:d8:14:0b:63:d3:b6:1c:58:55:ca:a9:7b:7d:80:
d6:8d:b8:ab:18:23:11:b5:4d:2a:b6:55:a5:0b:f2:7d:fe:92:
7c:7b:d2:0d:ae:28:db:8a:fb:94:8c:f9:0f:5e:f2:30:e6:92:
77:3b:03:7b:d8:4f:a9:a9:07:43:a4:0c:eb:1f:36:70:0c:2d:
c8:a1:43:80:49:cb:bd:70:21:a8:96:ab:a5:8c:e5:ea:00:e8:
c4:18:28:0f:9a:52:14:88:1f:6a:04:b6:f2:8c:b6:71:97:6c:
a6:ed:68:7a:d5:59:28:96:6a:17:26:b8:b6:40:d7:7b:d7:b5:
8b:b2:da:ef:28:18:d2:7e:3e:b2:82:23:89:38:8d:01:b1:5f:
87:89:b7:69:2c:7e:40:5a:76:dd:ef:66:56:1e:e2:da:dd:b8:
7b:d6:e0:d9:15:7e:07:fc:87:d6:18:34:1a:e0:ed:89:7f:38:
19:d5:7e:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx
RDUyNjQzNUMwHhcNMjYwNzIzMDEyNzAyWhcNMjYwNzMwMDEyNzAyWjAYMRYwFAYD
VQQDEw02YTYxNmRlNi1hMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlIu+UXt2sNIIb2LQu1khUCvmtx94eX4bhK1l/Y154DPCwytvSWRGv189EsNv
h2613K4rVO6QDd0Xu+bcdkboGQ2wb6N0SZtDrJKt2k7n9iDjEzaRvQNnc1wqGIoB
KL3kUb5vIdZkGeVli+3XkagJJJ8xMnmWvTDDYhz8Slk5xJraMXDqZumgLb3P/e8I
lGIhwLFJTwPcAgOG3ty7ieaZ2/2oulb+UzlQyQ5fzgY9+/KNtiHNBK6CtIHTlPaR
ZUs+iRk8t9jL6QrbQSamuJbg2rkV1Wpi9t8idBf354KvjskNPKYAKC2475xI1Nmz
DlF6/ZnhKf0/90Lvz4Ea1XHpXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcFDiHt
f52UJQKeMQzQen+pw97eMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5
QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3
Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQupDmplTbVaH7fUG9aRxDN4q8s7pGWHpJRgI70WIqIWl62+rUV/HVfcO0W1l
8I+xd2F8aOUIyKDKMaP6BDL42Ui1zbr3j1kN6HJ/0tgUC2PTthxYVcqpe32A1o24
qxgjEbVNKrZVpQvyff6SfHvSDa4o24r7lIz5D17yMOaSdzsDe9hPqakHQ6QM6x82
cAwtyKFDgEnLvXAhqJarpYzl6gDoxBgoD5pSFIgfagS28oy2cZdspu1oetVZKJZq
Fya4tkDXe9e1i7La7ygY0n4+soIjiTiNAbFfh4m3aSx+QFp23e9mVh7i2t24e9bg
2RV+B/yH1hg0GuDtiX84GdV+vg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:27 2026 by rpki-client