
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: IRj4vhq0vUjYugzDiVjKZm90lVYBlJOeUKq1idckto8=
Subject key identifier: 46:CE:73:52:80:F9:84:0B:21:D7:42:F8:8A:5B:AE:06:18:C9:1C:8D
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BB1
Signing time: Tue 24 Mar 2026 18:49:42 +0000
Manifest this update: Tue 24 Mar 2026 18:49:42 +0000
Manifest next update: Tue 31 Mar 2026 18:49:42 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: muA2bjR45zZiZGuwkAMc3dBEhZ/IYz078z8I7At0Vdc=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009 (0xbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Mar 24 18:49:42 2026 GMT
Not After : Mar 31 18:49:42 2026 GMT
Subject: CN=69c2dcc6-4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:a9:8b:c9:72:49:02:81:1b:c7:1b:3e:20:
f8:e6:e7:b7:96:71:cb:fc:34:e3:f7:8d:a4:8d:8d:
e6:7e:02:7e:67:10:cc:c3:bc:c2:68:30:23:e8:e9:
5f:7e:02:ba:f5:9f:69:93:ce:59:1f:fe:d5:e2:79:
cb:9a:d9:5a:aa:cf:0f:60:e9:48:8d:e2:82:e1:30:
17:4f:6f:f6:9e:00:49:a3:2b:27:bb:77:68:29:fc:
d2:f3:e9:49:14:c3:61:5e:f4:c5:89:02:7f:8e:be:
6c:2d:bf:4f:4f:48:7e:3c:c3:8c:d7:fe:bf:25:f0:
9e:82:4c:84:50:eb:13:8b:61:6a:03:86:92:22:03:
e7:16:0a:7c:8d:14:51:4f:8c:f2:e0:fe:a6:78:7b:
ce:83:6e:92:ca:eb:9c:5b:22:16:70:cb:74:e7:69:
01:fb:2c:71:9e:3f:e8:02:20:62:5e:91:38:b8:b1:
13:f6:6a:1e:84:0a:a4:43:d4:e9:c3:fd:c9:cc:cf:
3b:d1:e0:13:37:d2:26:ca:ea:e6:03:98:eb:86:30:
f8:7c:f7:39:55:52:2a:f5:d8:70:49:61:e5:c8:88:
09:80:a6:78:aa:87:11:6e:32:ea:2c:cf:32:3b:4a:
86:4b:19:a6:d2:28:ad:45:2e:44:1a:2f:31:cc:9e:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:73:52:80:F9:84:0B:21:D7:42:F8:8A:5B:AE:06:18:C9:1C:8D
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:90:34:88:aa:3e:6b:ed:97:f1:90:99:dc:6d:87:17:28:
eb:42:46:11:e8:fc:6e:3f:98:f0:2e:9e:6e:82:77:5f:19:70:
6b:9e:46:b2:85:c3:c3:01:85:2b:9e:6b:b9:58:f2:29:fd:48:
32:05:92:57:47:a1:1e:72:4d:4a:38:30:c1:74:ce:cb:2d:ba:
d4:40:58:72:42:ef:c7:86:ec:d9:6e:ec:33:3a:88:db:ff:0a:
88:ca:c0:08:20:f0:46:f6:bb:66:03:c2:e9:b3:84:14:5d:7b:
1a:45:40:84:3b:fc:66:dc:5d:54:53:89:d4:ce:09:8b:68:f6:
08:ec:97:ca:19:59:b6:50:3f:0d:db:30:93:43:25:28:b5:39:
5f:57:ed:35:35:49:e9:9a:de:0f:71:2b:dd:51:9d:37:5f:d6:
c4:0e:e8:8e:03:8b:cf:3c:ef:e8:8a:0c:96:d5:f7:4c:e8:ed:
2c:8b:86:f9:a5:40:9e:8a:af:6f:37:2d:ae:aa:93:e2:ed:07:
1d:f7:72:2d:91:f3:9d:7c:36:d8:22:5c:1f:48:7c:ea:c2:f9:
7a:4c:e3:c1:32:16:18:91:89:a8:ab:06:fb:98:cf:4a:a5:02:
77:5d:2b:9c:02:e6:b8:7a:bf:e8:1e:7c:56:66:49:b2:7a:12:
96:95:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:11 2026 by rpki-client