
$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier: e/xY3usK8iuTJp96WS8TuTwl+oaYZBZaikqEBy4zsJM=
Subject key identifier: 2E:3E:4B:0D:95:79:64:B5:6C:4E:53:3F:8F:09:F6:DF:DA:FA:3D:D6
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial: 0E97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number: 0E8C
Signing time: Sat 28 Feb 2026 17:51:22 +0000
Manifest this update: Sat 28 Feb 2026 17:51:21 +0000
Manifest next update: Sat 07 Mar 2026 17:51:21 +0000
Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: 9Z6UiWNP87pKUuAgHZDXq96oml6HOGterur6xOPJ8ao=)
2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: IvtzH6gyubUymkg5oBnMrp7NOgM18ej68eMn0LMb6vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3735 (0xe97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Validity
Not Before: Feb 28 17:51:21 2026 GMT
Not After : Mar 7 17:51:21 2026 GMT
Subject: CN=69a32b1a-71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:e1:65:e7:30:93:fd:cc:53:fa:a0:8e:9a:
ba:3c:7e:b0:8f:81:7c:b7:fd:59:63:8f:d7:e4:9c:
23:f7:b8:e8:4c:31:a4:6b:9d:e5:1c:5b:47:14:a7:
a6:3e:df:10:68:50:2b:eb:ce:f9:9e:0c:55:94:9a:
17:f6:51:40:9c:c0:2a:5d:aa:25:40:50:ab:ad:46:
70:f2:b4:4a:ea:3f:fe:3e:d6:07:42:37:c0:16:81:
82:55:06:b3:d1:4e:40:53:b2:4b:e9:2b:21:2b:25:
c8:9b:52:a0:63:b7:34:85:4c:f7:b6:c7:f8:94:94:
11:51:47:9a:80:1d:ff:d7:b9:93:5d:17:d2:6f:a5:
d0:c4:68:af:11:0d:e3:8d:ca:c6:49:ab:5c:40:a0:
5c:a4:21:58:2d:91:fb:9c:59:d2:bd:f0:93:5b:c3:
57:99:62:b9:16:75:c8:e6:e6:86:55:f7:6a:7e:43:
44:10:d5:ee:6a:29:a5:aa:b2:fb:6d:98:c3:d7:4d:
0b:fa:87:70:a2:b3:8a:d5:f4:d1:c3:8a:0b:49:25:
4a:a8:f7:f0:cc:09:9f:f7:18:ea:6c:02:71:89:72:
54:0c:8b:c2:ce:51:35:95:70:12:f1:24:8b:b9:c6:
32:1a:59:59:75:05:4c:c2:3b:f6:42:4f:00:a1:a3:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:4B:0D:95:79:64:B5:6C:4E:53:3F:8F:09:F6:DF:DA:FA:3D:D6
X509v3 Authority Key Identifier:
keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:57:6d:30:3e:c8:9b:9d:a5:8c:d7:67:c7:14:79:72:47:
89:82:10:f1:c6:6f:f4:d4:4c:2c:0f:b0:80:36:c9:a9:07:9d:
d7:2b:50:20:68:31:47:47:16:5e:56:c2:4e:c4:b6:e4:56:6a:
67:44:ed:08:4b:7e:8e:92:01:d5:c0:a3:7f:2a:26:e6:68:ad:
5f:c5:92:10:e3:da:8a:ce:81:03:cd:72:15:a6:10:a7:30:19:
87:9b:1b:40:c6:cf:8e:35:82:b2:83:13:b5:95:53:58:1f:43:
4d:63:0a:1c:12:46:eb:67:3c:85:79:1e:36:d1:9a:cd:f8:f5:
8a:43:d7:07:82:63:04:13:56:d7:01:4d:52:97:ab:39:77:3c:
7e:ce:66:73:89:9d:c7:60:e8:38:c3:5e:03:02:bf:77:a2:ad:
e2:e4:d4:0e:f5:fa:3e:99:78:7c:2b:0a:87:1e:14:ea:fd:11:
ca:d2:37:2f:d6:f6:93:cd:eb:51:29:6b:ef:47:a7:e3:ef:59:
54:e0:95:35:b0:4e:c6:7b:9e:b4:2c:ab:2a:fc:3d:44:62:40:
d1:0b:6b:b1:99:01:52:e2:7e:55:0b:59:08:da:0b:7f:9b:a4:
67:5c:e5:fa:4e:e2:29:c5:ba:fb:87:6d:50:9d:54:06:b3:2a:
c6:8c:3d:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD
NjYxNDQ1MzAwHhcNMjYwMjI4MTc1MTIxWhcNMjYwMzA3MTc1MTIxWjAYMRYwFAYD
VQQDDA02OWEzMmIxYS03MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtR3hZecwk/3MU/qgjpq6PH6wj4F8t/1ZY4/X5Jwj97joTDGka53lHFtHFKem
Pt8QaFAr6875ngxVlJoX9lFAnMAqXaolQFCrrUZw8rRK6j/+PtYHQjfAFoGCVQaz
0U5AU7JL6SshKyXIm1KgY7c0hUz3tsf4lJQRUUeagB3/17mTXRfSb6XQxGivEQ3j
jcrGSatcQKBcpCFYLZH7nFnSvfCTW8NXmWK5FnXI5uaGVfdqfkNEENXuaimlqrL7
bZjD100L+odworOK1fTRw4oLSSVKqPfwzAmf9xjqbAJxiXJUDIvCzlE1lXAS8SSL
ucYyGllZdQVMwjv2Qk8AoaPtdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4+Sw2V
eWS1bE5TP48J9t/a+j3WMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF
MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF
NFd6T01ocVdXcExHWVVSVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbtdXbTA+yJudpYzXZ8cUeXJHiYIQ8cZv9NRMLA+wgDbJqQed1ytQIGgxR0cW
XlbCTsS25FZqZ0TtCEt+jpIB1cCjfyom5mitX8WSEOPais6BA81yFaYQpzAZh5sb
QMbPjjWCsoMTtZVTWB9DTWMKHBJG62c8hXkeNtGazfj1ikPXB4JjBBNW1wFNUper
OXc8fs5mc4mdx2DoOMNeAwK/d6Kt4uTUDvX6Ppl4fCsKhx4U6v0RytI3L9b2k83r
USlr70en4+9ZVOCVNbBOxnuetCyrKvw9RGJA0QtrsZkBUuJ+VQtZCNoLf5ukZ1zl
+k7iKcW6+4dtUJ1UBrMqxow9mw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:20 2026 by rpki-client