
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: h4d+4kV6r8IWIruoxKqDQ2kC+cuCqgJlxVr1ugHKxO4=
Subject key identifier: 00:07:0A:0F:08:21:C1:64:93:86:73:FD:78:E5:CB:FB:C8:0C:91:7D
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 0188
Signing time: Fri 17 Apr 2026 04:12:01 +0000
Manifest this update: Fri 17 Apr 2026 04:12:00 +0000
Manifest next update: Fri 24 Apr 2026 04:12:00 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: NG63ZG/s7ATVQnzJaB1OPwWmRmDpipRoFt3nLQrScPg=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Apr 17 04:12:00 2026 GMT
Not After : Apr 24 04:12:00 2026 GMT
Subject: CN=69e1b311-6acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:e1:80:2c:fa:4f:f6:4d:d4:ed:5d:69:69:
a8:59:57:8d:1d:d7:21:e9:85:49:06:2d:3a:89:7b:
6b:ee:8e:37:63:ed:10:41:a0:17:7e:e0:7a:9c:8c:
f0:13:68:d3:68:0b:ce:76:3f:74:e3:b6:11:60:ad:
7f:8a:2f:e9:5b:0f:4f:a4:3d:25:2f:59:38:42:b0:
67:97:ad:59:87:38:5b:95:7e:77:c2:90:53:4a:ce:
cb:c9:f5:f1:bd:e1:7c:fb:ca:96:d1:c7:42:29:c8:
d0:17:d1:e7:ca:0e:3c:32:09:36:4d:0f:48:22:9d:
b0:23:79:e1:18:12:a1:1a:84:0e:45:8f:92:87:51:
b2:b6:31:bb:08:02:e4:35:d6:94:0e:4f:b2:58:86:
bd:c6:b2:dd:5b:08:45:55:2d:43:af:ee:29:83:ea:
87:fa:04:03:de:4e:c7:ff:16:01:91:7a:cb:2c:29:
90:84:de:4f:6a:40:63:27:6d:d9:56:9c:68:1f:52:
5b:6d:04:a5:f5:bc:63:0f:48:44:bb:78:51:cd:08:
d9:57:45:66:11:2f:d7:19:57:13:96:1c:64:49:de:
a0:c6:6d:76:88:7c:0c:22:e2:96:e9:82:11:a8:92:
60:22:39:ed:e4:ba:9d:b2:e6:35:94:83:c1:d5:89:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:0A:0F:08:21:C1:64:93:86:73:FD:78:E5:CB:FB:C8:0C:91:7D
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:b0:49:61:4b:7c:06:bf:25:27:a5:57:e7:48:31:99:1a:
99:ae:06:f9:0b:f2:e2:da:e0:be:6d:d0:39:48:69:c3:cf:a2:
f7:47:90:c7:df:81:14:b1:67:35:9e:0b:3c:de:0d:91:aa:cc:
a6:85:ae:7a:bc:97:8c:ca:fd:4d:0c:5d:13:df:ea:b7:f9:6e:
95:e3:21:ff:fe:ed:05:c9:f0:65:e0:13:39:8c:fb:cc:5a:ca:
6e:1b:4a:09:cd:90:23:92:ea:f6:4e:53:2d:3e:6a:b9:8f:b5:
13:2b:70:f3:a1:ea:b0:bd:f6:08:5e:89:94:eb:c7:8f:c5:33:
1f:82:03:9d:6b:2e:78:76:fd:09:e0:c5:6b:d5:2b:f8:f9:0f:
85:fe:11:ea:41:26:e1:a4:a6:ed:c9:61:90:27:45:39:14:9b:
e9:dd:80:49:cf:ab:ac:7d:da:30:80:b9:a7:07:33:c9:b9:6a:
65:a0:86:5d:e0:cd:a9:85:64:7b:df:76:07:24:c5:52:53:c3:
3a:46:3f:ed:63:fb:15:69:9c:80:cb:91:d2:4d:e9:45:08:c7:
8f:4c:59:b6:82:e7:90:64:9b:89:a5:bc:b0:e1:b7:3a:73:3a:
a8:2f:ae:1e:41:d1:f7:49:8b:e0:8a:07:96:f1:b6:9d:1c:e0:
63:fe:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:38 2026 by rpki-client