
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json)
Hash identifier: wPXdDYc/Kvp/dgvg3DsLyIruXwCia5SFduXiRCUrsNY=
Subject key identifier: DE:84:3A:8C:FB:2B:42:3D:87:9B:F4:8C:DF:9E:C9:83:68:F1:67:83
Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Certificate serial: 0544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
Manifest number: 053E
Signing time: Sun 01 Mar 2026 00:04:07 +0000
Manifest this update: Sun 01 Mar 2026 00:04:07 +0000
Manifest next update: Sun 08 Mar 2026 00:04:07 +0000
Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: MXMFPRJb5hK68cIN1BNwMkl5yX7wXSvQvQSRfqYLOz4=)
2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: 8X5eBnJACDnF25R5obyjBzrkQFPgd4fVGHDaVysBGCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Validity
Not Before: Mar 1 00:04:07 2026 GMT
Not After : Mar 8 00:04:07 2026 GMT
Subject: CN=69a38277-9582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:86:f9:0d:17:46:c8:bc:ca:82:a8:5b:c3:
60:11:a0:db:93:2a:ec:1d:1d:95:6b:74:a3:ab:83:
36:a2:5e:7f:aa:c7:06:2a:34:6f:c8:de:65:5f:a7:
44:2b:98:30:51:8e:42:d5:e1:56:68:aa:1f:67:00:
8d:52:50:aa:84:c5:37:fb:59:f9:8d:2c:fe:56:c2:
c8:44:60:e0:a4:c7:a4:4d:b8:4b:37:2d:07:c2:11:
8c:30:1d:35:32:71:cd:e7:cb:13:92:64:73:dc:c0:
c1:8b:10:ba:2e:3e:ae:6b:5c:dc:c4:8e:67:da:4d:
54:2e:f1:7f:dc:79:fe:7e:52:37:1c:27:d5:d2:b1:
3d:a4:4c:96:69:ad:d9:23:7f:25:b6:7d:e7:9c:14:
e9:5a:91:d5:c1:36:28:4d:11:df:22:ec:d1:90:5a:
72:ff:43:ca:0b:17:a4:63:23:22:a2:68:53:60:d7:
a0:85:11:93:28:c8:47:80:f3:01:d6:18:00:56:11:
66:70:06:92:d8:fb:ac:44:78:19:2a:f5:ce:9f:d6:
47:b1:88:28:85:63:f1:22:8f:9d:9c:dd:03:07:4a:
5e:bc:2e:3b:51:cc:68:27:7d:cc:0f:d7:27:45:ce:
35:87:ca:e3:ee:12:d2:67:cc:94:7c:98:63:02:14:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:3A:8C:FB:2B:42:3D:87:9B:F4:8C:DF:9E:C9:83:68:F1:67:83
X509v3 Authority Key Identifier:
keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:c1:7c:13:9d:17:10:bc:fe:1b:62:de:e8:68:06:60:06:
75:02:fe:f1:38:b8:11:68:ce:08:15:a3:55:54:ed:ab:63:82:
44:cb:55:c4:ac:0c:78:1c:19:f0:6d:82:5d:55:43:44:ac:5a:
20:e6:78:03:a1:05:f1:ca:87:92:d0:12:09:4e:36:ae:94:d2:
01:0e:66:c7:56:fa:09:5f:11:af:82:e3:ad:80:31:ee:98:f7:
c5:52:82:20:5e:44:51:7c:f5:83:af:8d:99:d7:75:01:f5:df:
3a:62:7b:21:dd:42:66:05:22:f8:72:7c:3f:c5:0d:3d:23:53:
8a:ff:5b:32:79:7a:a7:6c:78:d7:14:d7:b2:2a:70:bd:71:04:
e6:5f:2f:75:9b:e3:1b:90:b4:0f:7e:43:55:d7:e2:61:02:1d:
ae:61:1e:f1:b4:aa:1a:d6:ad:b6:49:fe:b5:9d:8e:d4:e6:55:
54:c8:89:b6:a5:bd:aa:d5:ca:ae:46:fd:f2:53:38:5c:56:b4:
fd:96:e9:54:b9:91:59:16:f5:ed:fb:d8:18:6d:7d:6b:7e:a3:
64:40:59:ae:34:de:f4:4b:13:02:1c:3b:16:18:bd:be:44:19:
09:ef:d2:73:35:2e:e3:57:79:6c:8d:ae:f0:6f:17:93:1d:98:
dd:c2:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:45 2026 by rpki-client