
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier: vxtgk0739sdpiYAuK8Tw/Gntd9SExhTsI/nmjRfdN30=
Subject key identifier: 06:8D:9D:FA:60:0B:39:49:D9:52:97:93:70:42:CD:F8:8F:6C:41:45
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number: 02F2
Signing time: Sun 27 Sep 2026 01:15:15 +0000
Manifest this update: Sun 27 Sep 2026 01:15:14 +0000
Manifest next update: Sun 04 Oct 2026 01:15:14 +0000
Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: MTMoQKxbiQT6dIo9kzc8WlCr8Oc5nGGsroAAeDUxYME=)
2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Validity
Not Before: Sep 27 01:15:14 2026 GMT
Not After : Oct 4 01:15:14 2026 GMT
Subject: CN=6ab86e23-b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:bf:e0:ba:c8:c1:ec:bf:c8:4b:a1:e5:ec:
c7:9e:dd:c5:10:37:b0:c0:24:a5:68:10:a9:21:ab:
8f:cd:a9:0f:ff:2f:64:a8:25:49:f0:da:33:5a:7a:
d2:93:d7:77:41:70:3f:50:98:69:2d:62:bb:9d:50:
53:6d:01:55:26:79:06:6e:68:c2:fb:b2:f3:19:e3:
cc:16:e4:ec:26:36:be:01:18:f8:34:59:56:05:1d:
b4:f9:12:e9:83:c8:48:e7:ed:79:08:e4:65:f6:ac:
64:7b:f8:f4:a1:c0:cd:45:fb:b8:8c:9c:c8:4c:da:
c4:b6:dc:7c:bd:e1:cf:93:7e:1d:7c:3c:17:ea:dd:
91:86:72:a2:eb:0f:ed:83:49:69:5b:99:62:69:72:
4f:87:af:0d:c2:20:6a:75:0f:9f:1b:aa:d8:e3:71:
a6:b4:fe:7b:54:de:26:59:8c:21:69:2b:14:a0:f0:
75:92:b6:bc:57:97:f6:71:16:44:43:d3:0d:5b:01:
ce:ff:cd:50:0a:ea:bc:fa:39:b9:0a:cb:9a:b4:89:
c0:64:88:f5:07:47:40:01:b6:3f:2a:fd:30:2b:ab:
e9:85:0b:1a:62:df:39:61:9c:60:d4:87:dc:3a:24:
1f:cc:26:c2:03:13:a8:1f:a9:e7:2f:99:99:cb:13:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:9D:FA:60:0B:39:49:D9:52:97:93:70:42:CD:F8:8F:6C:41:45
X509v3 Authority Key Identifier:
keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:da:99:ad:4a:b2:b6:29:e5:e8:69:6a:70:fd:0f:74:4b:
00:dc:4a:48:a6:06:bd:cc:cd:64:84:32:95:dc:93:28:f4:7c:
6c:0f:dd:1e:3a:45:2d:a6:8b:92:cb:47:bc:0d:55:9f:ca:77:
71:b2:b2:50:b9:76:4b:ef:e8:99:bc:ae:1d:a1:a1:9e:cf:be:
26:6c:82:f5:12:f8:9f:76:b0:7c:16:53:2d:0c:df:dd:09:55:
bd:e4:f3:c4:fa:51:4b:b6:b7:97:3b:7b:e8:92:40:d2:9a:9c:
2b:66:8e:8e:2f:54:6e:d2:f8:93:9b:96:b5:b6:86:c4:ef:76:
08:e7:5b:9e:d8:c9:eb:d0:2b:d7:fa:a5:77:37:ba:2f:af:d3:
ac:df:da:3c:c3:a7:8b:c2:86:4b:0d:eb:a9:64:c6:a2:38:85:
63:a7:2f:2e:55:04:2a:29:a0:95:bb:87:bc:1e:59:52:48:d7:
57:4d:72:16:74:6e:9c:7e:60:53:4e:59:b8:b4:4b:ee:c3:3b:
92:4d:83:fc:ca:f2:c8:9e:a8:8f:fc:e1:93:0e:cb:b6:77:2a:
34:4a:d9:47:bc:ee:28:ab:14:ba:36:af:81:55:b3:12:97:ab:
ea:cd:13:81:42:f3:92:c1:eb:cc:9d:ab:44:b3:11:c2:d8:4e:
cf:55:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:17:26 2026 by rpki-client