
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: GGKbceBzPsrG2+yY2eAXLbuXg2+bJPCSA4kZOilZkdI=
Subject key identifier: 3D:44:0D:5C:11:78:3F:01:5F:B8:8D:35:57:AD:24:18:A1:E7:06:9D
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0C25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0C12
Signing time: Thu 24 Sep 2026 18:48:48 +0000
Manifest this update: Thu 24 Sep 2026 18:48:47 +0000
Manifest next update: Thu 01 Oct 2026 18:48:47 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: PgevufZCZcsynnxsCq3MW+Aw3mv0eXaQKMsvRZHJhtA=)
2: 67B6B2BE8C0A11F18F5A4FFE4111F970.roa (hash: 5yz6s8mph2niUKU15DvVle38hT/SfFA+5Y4QHdfA4T0=)
3: 26010A0605EF11F09181F913C4F9AE02.roa (hash: dEh6qqypXxpPh7K7OliXKNGZdaFHm4uxY8VLeBuCnpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Sep 24 18:48:47 2026 GMT
Not After : Oct 1 18:48:47 2026 GMT
Subject: CN=6ab5708f-d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:39:30:8a:0c:83:f1:c1:de:38:22:9c:f8:
f1:df:c9:c2:dc:0b:b4:85:46:19:ee:ae:06:35:d2:
5a:3a:43:bb:0f:0e:b9:0f:e2:9d:c4:a5:2d:55:f7:
cc:ea:01:57:23:1b:db:9c:5c:2b:38:8a:32:57:0f:
96:f5:51:27:62:4e:49:2a:d1:8a:87:76:e5:be:37:
fc:f8:8e:1b:1a:f4:62:30:c4:5a:a5:b5:b5:10:7f:
d5:9f:fb:cc:5e:4b:21:0d:e9:4e:2b:fe:ec:16:7c:
33:38:44:03:83:2f:d7:ed:39:40:3b:39:64:e1:1c:
87:aa:81:03:74:1e:64:8f:d0:5b:ea:a4:5b:dd:58:
21:9b:d9:91:4a:5d:c2:b3:66:55:5c:9a:4e:0a:38:
e5:52:8d:8f:ce:fb:73:34:bc:7b:f9:e3:de:be:43:
48:a9:9e:05:3a:76:05:54:35:de:74:6b:5a:12:ad:
67:bc:58:d2:8b:b1:b6:7b:00:dd:85:21:59:f0:89:
5c:c4:7b:e4:fb:18:29:41:de:3c:79:80:44:ea:ab:
e1:37:e6:e0:f4:ac:8f:e6:8c:3d:32:3c:4a:41:44:
10:d5:8b:93:46:19:08:d5:00:5a:55:41:5d:0b:fd:
e8:73:24:0c:69:3b:59:54:0f:eb:03:c9:b4:a8:54:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:0D:5C:11:78:3F:01:5F:B8:8D:35:57:AD:24:18:A1:E7:06:9D
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:4b:9b:3f:07:e5:29:a4:62:9f:6e:d0:be:1d:7d:61:8a:
5c:3c:1a:ec:3d:b5:18:47:20:67:d6:64:09:00:b9:4f:eb:1b:
5d:80:43:d4:96:b4:cb:93:17:4e:9e:af:42:c6:2b:dd:9e:e7:
fa:e4:cf:be:e8:94:2e:74:e4:96:f5:34:bc:15:1b:b6:53:35:
21:dc:72:bb:d4:39:f6:94:51:49:ea:a8:4c:3b:cd:c3:4b:e8:
c1:7b:09:ee:35:0d:e9:00:f4:2d:9b:17:20:20:1e:32:c3:bd:
d6:df:3f:99:cb:f2:c3:c6:47:33:21:ab:68:96:d7:98:2f:2b:
4b:2b:92:16:52:79:e7:37:63:97:e6:a3:55:ef:9d:06:19:f2:
53:b1:40:0b:c8:95:28:3b:cf:ac:44:f3:dc:e1:3a:0a:5b:4c:
66:51:b1:08:6d:c6:fe:2b:d0:42:e7:39:84:85:5e:54:a7:39:
5e:e4:5e:03:f9:31:c4:36:0a:1b:8b:a7:ce:17:94:b5:a0:ba:
4e:9c:dd:b7:2c:96:2e:db:04:3f:a2:57:94:8a:7b:c6:82:be:
53:89:a4:42:ec:a7:16:f4:ea:63:16:63:59:79:1c:ae:27:94:
1f:be:1a:3c:c8:56:66:40:27:da:8d:84:20:f3:7a:ed:81:99:
38:9d:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:19:03 2026 by rpki-client