
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: 7+/jVZXD2X8Rs2waSRPF0x7+xCV6RY7tpAC7R6R03Cg=
Subject key identifier: F5:CB:9A:A9:63:72:ED:D4:7E:1A:93:74:12:C7:21:75:C8:DA:C6:EF
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BEE
Signing time: Wed 22 Jul 2026 19:14:21 +0000
Manifest this update: Wed 22 Jul 2026 19:14:21 +0000
Manifest next update: Wed 29 Jul 2026 19:14:21 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: aPUF7GcZagBcy/AyXJF6k1VZ+BsWsNxuaS3II0wTmRY=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Jul 22 19:14:21 2026 GMT
Not After : Jul 29 19:14:21 2026 GMT
Subject: CN=6a61168d-58a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:1d:23:91:10:e3:9a:12:eb:eb:19:90:e7:
a2:93:91:6d:f2:83:d2:7d:db:c1:41:00:a2:9b:ba:
f2:08:52:53:73:c1:9f:26:4c:11:24:3c:71:bc:dd:
1f:a3:99:23:cd:d0:80:97:4c:22:e9:c4:09:33:ee:
48:ef:30:10:bf:3d:fe:ce:53:8d:92:fc:8f:0a:3a:
dd:7c:3a:08:de:a9:e6:2e:b2:75:cb:c3:76:bb:9b:
4d:45:6c:67:8e:d3:14:dd:b1:9e:27:96:3a:ca:b2:
15:42:4a:87:93:b6:6f:04:95:6e:5e:db:f6:af:dd:
6e:62:d3:4d:6f:c5:5c:0d:54:56:8c:f5:0b:29:fb:
d7:4b:ca:8b:af:4f:7e:71:fd:3f:38:cb:83:ca:13:
48:d3:f9:02:04:2a:e4:23:9a:98:41:5e:d1:7f:52:
85:fc:84:5b:fc:a0:07:93:cf:6d:10:cf:42:c8:0a:
d2:76:ad:43:63:ea:29:da:24:99:05:d8:1c:a4:4f:
19:b2:a6:53:a2:bd:6a:18:db:1a:fd:35:0b:d6:f7:
13:0c:4f:eb:51:19:1f:f1:8b:c0:29:b5:21:25:c8:
15:ea:d1:3e:6d:da:42:84:6f:37:b2:1e:41:b0:20:
b9:ca:37:e3:2e:31:1d:e3:c3:d7:97:99:92:f5:56:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:9A:A9:63:72:ED:D4:7E:1A:93:74:12:C7:21:75:C8:DA:C6:EF
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:c3:ea:9e:3b:6b:84:7b:8c:02:b1:ac:d5:95:e3:a8:8e:
52:dd:e5:3f:b5:05:ce:e1:70:6b:8f:85:a6:ce:b3:66:4f:99:
69:6b:d7:60:1f:82:eb:1e:88:bb:ee:1e:7c:a6:47:0f:47:de:
cd:71:21:22:59:d4:5b:df:90:0c:e3:57:48:c5:5c:ff:5e:ee:
ea:fa:bc:8a:57:4e:92:67:74:c6:84:a2:d8:7b:99:57:77:e9:
e8:22:3c:23:74:e2:a4:29:da:87:aa:98:9a:4d:0c:32:c4:94:
da:ba:3b:92:09:ec:b8:69:62:9f:ab:56:df:52:75:52:d4:b8:
45:6a:11:0d:5e:ef:4a:9c:43:e6:1e:27:46:ba:b6:2d:0a:bb:
69:df:06:b6:72:9b:bb:a6:e9:bd:e0:ba:b6:10:46:b7:99:38:
71:9e:9a:4f:7b:d1:13:7a:96:4a:32:74:d8:2e:7e:30:88:c1:
bc:4b:30:d7:b2:14:b2:b3:b1:dc:ed:89:b2:a9:a5:c1:3d:57:
85:d7:bf:b7:7e:b9:48:76:fa:b9:61:57:d7:7f:5f:d0:53:44:
a1:51:89:5f:d9:09:c6:08:da:83:84:73:33:ff:4b:18:62:32:
51:99:42:2a:7d:c2:7f:6d:21:68:f4:83:9b:47:7f:2b:d6:d4:
aa:57:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:16 2026 by rpki-client