
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier: 3w50HeGL4vQGF1Vax29ASpYsRXJnTnbhkC6apT9+iJs=
Subject key identifier: 62:62:E7:FF:4F:CF:11:43:5D:92:F7:DE:95:13:25:4E:B6:13:5E:6B
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number: 02D0
Signing time: Thu 23 Jul 2026 02:18:00 +0000
Manifest this update: Thu 23 Jul 2026 02:18:00 +0000
Manifest next update: Thu 30 Jul 2026 02:18:00 +0000
Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: sUBsxSVETuwcUvrN3qdJdE6MCMRsfNJqN5GHD8zqdrM=)
2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Validity
Not Before: Jul 23 02:18:00 2026 GMT
Not After : Jul 30 02:18:00 2026 GMT
Subject: CN=6a6179d8-ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:28:84:d7:dd:bb:34:a4:a6:29:4c:ef:fb:
b0:34:d1:b8:f4:4c:17:7f:3f:69:e5:0c:c9:fd:18:
e3:17:87:b9:1d:a7:25:0b:4d:73:bb:0b:85:1e:59:
d9:b0:9b:96:e2:b2:39:f9:7f:ce:0c:49:55:e1:08:
72:ef:02:4a:66:69:8d:7a:51:15:5a:d8:7f:e7:97:
94:52:7f:9b:60:be:84:ec:fc:c3:05:ef:06:5e:b2:
a4:aa:df:09:56:34:8e:30:4f:f3:c9:be:2b:d7:3a:
cc:fa:50:9f:cf:af:c1:6e:3b:40:41:dd:6a:4f:8b:
1e:6e:89:57:70:8e:4d:d6:1f:60:cb:6f:15:81:4e:
1f:2d:fe:ad:45:40:b8:cc:76:33:2a:a0:66:fb:27:
63:40:08:e5:7d:45:2f:bf:22:8c:9d:69:e3:61:5e:
b5:09:a7:89:e2:44:5a:b1:1e:49:02:ef:3a:57:a3:
62:0d:74:04:17:e2:98:7b:86:4d:d3:39:93:c4:a5:
c5:2e:4f:c7:dc:86:6b:92:dc:f1:81:f6:d7:73:2e:
38:cd:53:f5:c4:cf:77:32:cc:00:07:82:b3:13:8a:
84:38:ae:ff:81:7f:ee:2f:18:0e:be:04:9a:56:fb:
05:b9:ba:4d:60:ba:1d:25:46:c4:02:1e:c8:68:d8:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:E7:FF:4F:CF:11:43:5D:92:F7:DE:95:13:25:4E:B6:13:5E:6B
X509v3 Authority Key Identifier:
keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:6b:74:f7:10:dd:20:15:c4:5c:5a:ca:94:64:8d:c0:03:69:
f4:70:d9:13:d1:d9:4e:5f:de:25:23:de:dd:dd:2c:3e:68:06:
85:de:3d:88:7e:20:dd:9c:7b:97:61:a5:3d:3e:39:f4:cc:f1:
e5:ab:c0:80:ef:37:07:e8:cc:a5:8f:b2:7f:4c:f4:7e:17:70:
59:c6:53:48:76:b3:cc:52:22:6e:ff:19:6d:66:3c:41:7c:3e:
cd:1d:6d:42:05:5b:fb:01:30:5b:36:ec:33:e3:f9:ce:b5:55:
47:8b:a9:6b:60:f7:62:09:30:b9:40:dd:42:09:2b:3b:37:e6:
cb:c7:78:85:90:e2:61:3a:58:76:03:73:2c:aa:e5:00:85:71:
f7:d9:40:c5:26:48:c4:db:d8:4a:bb:66:86:35:43:47:45:3c:
e6:35:a3:5b:80:be:a5:42:3e:b8:70:c5:63:fa:78:88:41:f0:
4a:eb:8e:fe:ad:2e:3b:a9:69:92:85:78:1e:81:37:7b:d1:97:
8e:b0:fd:db:89:c9:44:98:c2:5c:aa:61:74:61:e3:7a:f9:fb:
ff:1b:8c:39:1c:8b:25:b7:b6:c5:e5:5a:83:33:7f:64:8e:5c:
fb:a6:a0:34:5a:1f:e6:44:96:07:ed:2a:7b:7c:b4:d8:51:ff:
35:15:fc:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD
OTRDQkM1QkEwHhcNMjYwNzIzMDIxODAwWhcNMjYwNzMwMDIxODAwWjAYMRYwFAYD
VQQDEw02YTYxNzlkOC1jY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvEohNfduzSkpilM7/uwNNG49EwXfz9p5QzJ/RjjF4e5HaclC01zuwuFHlnZ
sJuW4rI5+X/ODElV4Qhy7wJKZmmNelEVWth/55eUUn+bYL6E7PzDBe8GXrKkqt8J
VjSOME/zyb4r1zrM+lCfz6/BbjtAQd1qT4sebolXcI5N1h9gy28VgU4fLf6tRUC4
zHYzKqBm+ydjQAjlfUUvvyKMnWnjYV61CaeJ4kRasR5JAu86V6NiDXQEF+KYe4ZN
0zmTxKXFLk/H3IZrktzxgfbXcy44zVP1xM93MswAB4KzE4qEOK7/gX/uLxgOvgSa
VvsFubpNYLodJUbEAh7IaNhAZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJi5/9P
zxFDXZL33pUTJU62E15rMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2
MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ
VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhmt09xDdIBXEXFrKlGSNwANp9HDZE9HZTl/eJSPe3d0sPmgGhd49iH4g3Zx7
l2GlPT459Mzx5avAgO83B+jMpY+yf0z0fhdwWcZTSHazzFIibv8ZbWY8QXw+zR1t
QgVb+wEwWzbsM+P5zrVVR4upa2D3YgkwuUDdQgkrOzfmy8d4hZDiYTpYdgNzLKrl
AIVx99lAxSZIxNvYSrtmhjVDR0U85jWjW4C+pUI+uHDFY/p4iEHwSuuO/q0uO6lp
koV4HoE3e9GXjrD924nJRJjCXKphdGHjevn7/xuMORyLJbe2xeVagzN/ZI5c+6ag
NFof5kSWB+0qe3y02FH/NRX8Gg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:30 2026 by rpki-client