
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json)
Hash identifier: GLCQvMofnkxs7yjyo8ETjdT5RtOCHZXz0+Z+vtdfCAY=
Subject key identifier: 86:58:95:3D:41:B3:E6:7E:3B:E7:A0:9B:16:1D:2C:A6:AE:C6:A8:1B
Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE
Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
Certificate serial: 1116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
Manifest number: 1A37
Signing time: Sat 28 Feb 2026 17:22:20 +0000
Manifest this update: Sat 28 Feb 2026 17:22:20 +0000
Manifest next update: Sat 07 Mar 2026 17:22:20 +0000
Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: BlBNl0iFYr3liKE4CO4RCISq5Ih/OCNNJ0b4YADbaEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl
rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4374 (0x1116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
Validity
Not Before: Feb 28 17:22:20 2026 GMT
Not After : Mar 7 17:22:20 2026 GMT
Subject: CN=69a3244c-441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:20:96:94:b3:8a:1b:c0:4e:7f:c2:15:b0:
5c:d3:a0:6c:a1:dd:92:ce:96:52:22:2b:d4:3f:52:
47:4e:05:7e:17:6a:ce:fb:7b:a3:27:97:36:b0:ad:
84:b6:2c:ba:3d:45:08:49:10:a5:7a:8b:7f:a2:f9:
81:37:3c:ab:9f:64:71:7b:61:2a:55:cf:6f:3f:86:
40:e3:4f:02:b8:01:de:35:5e:d5:4b:c5:f7:a3:1b:
38:b3:5b:d2:4d:d7:d6:07:6d:69:aa:2c:26:1a:f4:
f1:85:4f:37:2e:77:e8:a4:d9:58:fa:be:39:14:42:
c8:ca:fc:82:d6:28:6a:bb:56:33:3a:40:09:61:aa:
98:b9:b2:95:33:42:07:ef:6d:78:40:e2:35:ef:80:
96:ec:fd:e7:d0:03:c0:25:f3:5b:ec:f0:75:27:eb:
5b:4a:96:ec:42:87:88:94:bc:4b:7b:94:cd:57:03:
c6:1e:78:2c:a3:5b:99:53:e7:f2:a2:25:33:ed:3c:
39:15:c7:c1:ad:7a:b6:88:42:e3:5f:eb:81:33:98:
7d:f6:3f:d7:b0:84:43:25:43:14:1e:71:b3:29:26:
57:2a:71:34:85:08:a0:e3:66:b9:15:90:98:b0:ee:
7a:82:f0:4a:33:57:4e:d7:7d:2b:ea:02:00:1a:b2:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:58:95:3D:41:B3:E6:7E:3B:E7:A0:9B:16:1D:2C:A6:AE:C6:A8:1B
X509v3 Authority Key Identifier:
keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:40:64:4d:36:ab:4b:b7:99:a2:67:27:ff:a0:8a:cd:e7:
62:e8:82:e5:9e:38:83:15:26:d4:f4:17:3b:76:f1:d9:49:13:
ac:4e:82:96:7a:6f:d5:02:f4:76:ab:9f:71:21:21:0a:de:85:
c9:b8:19:2f:2b:9f:9f:2d:a8:c0:40:b0:2f:1e:63:a0:d8:48:
f1:62:9d:cc:17:83:33:64:13:e1:90:97:d4:25:eb:0c:0b:4a:
e7:4b:8e:16:7e:81:59:34:dd:6f:79:02:84:e1:50:20:d8:68:
96:ff:e5:dc:b6:d9:0a:04:d7:6b:1e:f6:6d:b7:3a:57:06:d6:
df:0e:28:e3:17:99:c1:23:db:f0:bd:c7:5a:da:2f:f0:07:7a:
0c:5d:47:ae:86:c3:10:af:3b:39:67:8d:90:91:2c:4f:4d:d2:
8b:c8:dc:29:63:51:a7:d6:09:d9:76:42:98:2c:6a:e0:c5:73:
b2:44:58:bd:f0:59:e3:77:af:f0:f6:71:c6:91:54:b0:eb:5b:
10:1f:39:9f:c0:da:65:ea:bb:74:df:e5:de:45:21:a3:5a:3c:
8b:fc:52:ca:c0:5b:4b:83:b1:c1:d2:c4:0f:4d:01:f2:df:27:
89:03:52:36:89:ad:86:58:df:2f:a3:a2:c1:8a:49:e1:eb:c9:
c8:28:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:27 2026 by rpki-client