
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier: g1pAbFTBs0rogM+xmmZvtIpvVQ9N49bvn+nssgH2DL4=
Subject key identifier: FE:7F:63:09:75:B1:D7:29:71:33:0F:88:D1:EF:86:51:AB:A8:26:C9
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial: 03E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number: 03D7
Signing time: Sun 01 Mar 2026 01:25:06 +0000
Manifest this update: Sun 01 Mar 2026 01:25:06 +0000
Manifest next update: Sun 08 Mar 2026 01:25:06 +0000
Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: aXzh8w4htRU4S+OMLraAmyxpHhsfZbhJ9D7UtZuQpF0=)
2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=)
3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Validity
Not Before: Mar 1 01:25:06 2026 GMT
Not After : Mar 8 01:25:06 2026 GMT
Subject: CN=69a39572-9f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:94:af:a7:a6:37:c3:cf:e5:4c:85:fd:be:
57:ad:a1:d1:af:a5:b7:99:18:20:6f:2a:8f:aa:70:
dd:e7:a4:42:ee:62:99:46:01:ad:b5:d3:f6:23:35:
f0:03:32:85:61:16:77:ae:e2:36:8d:88:c3:2b:bb:
59:9d:a7:ac:ed:fa:bb:96:78:ea:57:1c:c7:f4:5b:
3a:ad:f9:ea:2a:f8:7a:08:d8:5b:80:5a:96:51:de:
e9:dd:0f:3a:d1:12:86:a7:8d:96:72:f3:ad:b8:d0:
a8:95:d1:bd:61:df:a3:69:6d:e9:13:9e:d5:54:f3:
ec:eb:0c:bd:1e:06:20:d2:67:bf:0b:28:84:23:23:
b1:67:a0:71:be:e8:ee:a8:89:da:5b:79:1f:f7:1f:
54:88:70:70:33:63:a7:f1:8b:9b:dc:4e:bf:eb:9e:
36:a7:1d:77:77:50:a7:63:6d:68:bb:2f:83:82:d5:
c9:9c:7f:17:5b:5e:f2:f2:05:3d:1c:97:6e:24:11:
22:04:f8:94:fb:44:6d:fb:44:dd:ae:72:4a:30:07:
ba:e5:a4:97:bd:0f:3f:c0:b5:80:ed:34:b7:0f:42:
49:06:b0:a3:5d:43:c1:4a:cc:8b:28:70:e4:ce:33:
8c:a1:dc:67:aa:a3:e2:ad:c3:8e:5d:2f:4d:4c:13:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:63:09:75:B1:D7:29:71:33:0F:88:D1:EF:86:51:AB:A8:26:C9
X509v3 Authority Key Identifier:
keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:59:fc:15:f1:e8:de:f1:d9:86:76:36:1d:d0:ee:72:09:
72:4a:e4:54:24:39:8b:7c:45:41:8a:52:c4:53:e3:44:3b:1b:
d6:76:bc:f7:41:dd:e6:f8:88:1c:b1:31:55:c7:ee:5a:5b:8c:
a6:59:63:89:9c:5f:85:0d:de:3d:74:af:4b:91:83:96:39:fa:
28:cb:be:0b:e4:b5:9f:27:83:95:a2:8e:28:68:5d:2e:5a:c5:
0f:32:45:1d:d3:99:95:b8:bd:2a:eb:1f:7b:d1:b3:22:c2:42:
c9:26:51:00:d5:94:39:c0:05:92:ef:44:33:f0:5e:5a:26:35:
89:81:60:c6:88:df:36:f6:35:f0:51:93:f1:69:ea:eb:a1:6e:
68:fe:c6:d4:f7:c0:4e:4c:65:47:9d:21:0e:5d:17:80:a1:0c:
ed:28:7f:aa:39:46:20:53:f3:84:30:c3:1e:4e:d2:84:03:f2:
24:c8:50:97:1f:ba:0c:bc:0d:da:52:24:94:37:42:6e:07:0f:
99:fb:4c:fd:b9:18:0c:72:d1:48:76:18:ec:5d:05:e7:1f:c1:
bf:15:fe:94:5e:ba:6a:cb:e2:80:42:92:07:78:7d:68:ef:8c:
67:1c:57:86:7b:fb:2c:a3:69:67:18:ed:c1:b8:6f:09:97:a6:
db:f8:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:14 2026 by rpki-client