
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier: Xrh6ITBWSA/O7d/X5eSdN1hztmRRm5aUDgdTELZnNPw=
Subject key identifier: AD:64:A6:FA:33:1A:F9:29:77:58:53:0E:E3:FA:E2:8B:52:85:71:77
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0C8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number: 0C7C
Signing time: Sat 28 Feb 2026 18:47:33 +0000
Manifest this update: Sat 28 Feb 2026 18:47:33 +0000
Manifest next update: Sat 07 Mar 2026 18:47:33 +0000
Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: 9wmhnaOkpj7DNzw3/IAbav+ijGpPDM0ccfz8g+KTB78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: Feb 28 18:47:33 2026 GMT
Not After : Mar 7 18:47:33 2026 GMT
Subject: CN=69a33845-5cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:eb:15:f6:b4:55:77:59:1b:bc:56:93:a2:
45:5c:7a:85:6a:79:1e:a4:fb:05:e8:1e:ea:2e:7a:
f9:4b:ef:5b:c8:18:3c:97:7f:50:5c:6d:9b:b5:37:
49:b0:b8:0e:d3:26:94:ec:2f:25:68:7c:f5:2d:f1:
25:63:ef:62:dc:d8:6f:65:5f:26:d2:29:81:04:17:
45:7c:d6:ab:90:c3:8a:40:b2:97:ef:2d:13:18:e2:
cf:33:0f:c5:56:83:2f:15:cb:47:f8:15:55:c6:dc:
dc:0c:f7:83:bd:6f:92:72:bd:0f:d6:e8:a2:ee:ab:
b5:ea:6e:cf:27:1d:55:24:1f:29:c9:a3:83:5b:c9:
d8:25:6c:e2:95:b5:67:f2:d6:ce:a7:2c:00:bd:1b:
1f:42:66:e0:56:44:b1:bb:44:60:d6:d3:43:0f:d9:
85:da:e5:72:e6:fd:d1:5e:18:ef:e1:ed:83:3c:b6:
22:5d:df:a1:9c:d3:09:b9:d1:04:4a:44:d5:23:45:
99:ea:34:c8:9f:d7:71:05:76:a8:d4:4e:af:36:b8:
11:e6:90:9b:71:35:29:9f:77:39:bb:4f:8a:c3:9f:
0c:f2:b5:ac:d1:34:59:1f:b7:40:d5:e7:0d:21:6e:
af:16:f4:0c:9b:a7:81:39:93:3c:d4:c2:9e:3d:ce:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:A6:FA:33:1A:F9:29:77:58:53:0E:E3:FA:E2:8B:52:85:71:77
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:45:1c:fc:03:4f:01:34:00:a9:8e:24:21:a9:22:1f:9d:79:
2f:bb:d6:b5:8a:8b:ba:14:62:9a:df:9e:04:fb:17:89:7d:86:
ff:0c:e6:a0:d4:ef:cf:04:a6:c8:6a:25:90:99:2d:06:c8:0b:
d0:bf:35:ef:4f:61:2e:9e:0a:d6:76:4b:fa:fe:50:e0:4a:2d:
9d:13:e4:55:d8:4e:df:f9:e2:f9:1b:b1:74:a9:cf:d8:e2:d6:
d5:3b:0c:9f:55:2f:3a:71:f9:db:3e:2a:8c:68:56:47:14:bc:
74:93:6f:66:33:2d:eb:26:b6:b1:c7:fb:12:db:22:77:bb:dd:
01:1d:d0:4d:61:ae:ec:ec:fb:d1:92:f3:bc:82:2b:54:7a:1d:
6b:40:a5:52:43:fa:a3:95:dd:82:75:56:3d:b9:c2:51:aa:d1:
ec:8a:ba:2b:5c:09:81:14:5b:0e:2a:a3:37:e6:7a:47:de:f2:
02:13:dc:2c:89:b5:c4:f8:cf:ff:3d:9c:b7:33:83:ab:d1:8b:
c1:65:4b:60:21:06:de:9a:0e:c4:c7:f3:48:6c:d9:c3:f5:c3:
c3:02:2f:92:95:b6:85:68:76:9a:22:42:14:1a:eb:48:95:9f:
e7:2d:8e:14:f8:bb:54:9e:97:f7:eb:12:fd:ec:46:ac:bd:78:
8b:87:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:41 2026 by rpki-client