
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier: REuHzQnwJ5H5YjyRQuf34e+dr/E64I7QuEzQh32UFmA=
Subject key identifier: 96:A6:6B:B9:61:95:1F:98:50:90:0E:D7:67:9D:8B:3A:9F:AA:96:5B
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number: 80
Signing time: Fri 17 Apr 2026 07:32:04 +0000
Manifest this update: Fri 17 Apr 2026 07:32:03 +0000
Manifest next update: Fri 24 Apr 2026 07:32:03 +0000
Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: d9/9u8I4YeyR/3ylpU21nC/N2J8JbsQOJIR5rKM5lAQ=)
2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: M/En5GKZgRPs8xA5rjGsaCEY3++9OzoqoEMQTbP1dII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Validity
Not Before: Apr 17 07:32:03 2026 GMT
Not After : Apr 24 07:32:03 2026 GMT
Subject: CN=69e1e1f4-9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:99:fc:f6:62:fc:a3:74:73:28:be:c2:a3:
96:86:e7:e9:84:e0:89:9e:a0:c5:9d:16:45:39:43:
87:57:32:31:1a:c8:2e:ea:cc:cb:73:2b:ff:47:3f:
a0:a6:0c:7f:e1:19:9f:22:2d:2b:2c:d6:60:ba:5a:
39:17:8b:95:26:18:f6:8c:56:27:82:ff:6a:8a:3b:
90:af:42:65:31:1f:6b:5f:0b:4c:f1:dd:39:e1:cb:
7d:24:f1:79:05:d1:67:0c:b7:6e:c9:84:00:61:60:
2f:ea:94:fb:cc:ed:ee:64:a0:e4:2b:f7:62:00:0a:
31:f2:4a:26:72:0e:81:d1:91:bc:1c:21:39:d3:03:
d0:23:5f:c5:25:ba:8a:72:a7:59:a6:22:1f:2a:89:
9c:9f:1d:94:69:bb:93:0e:b2:89:a2:df:c3:fc:0f:
d8:9b:f8:31:38:45:8b:19:ad:75:8d:8e:54:ff:0e:
9c:f1:40:6c:41:ca:74:ff:97:c6:83:e8:42:04:6f:
55:d6:9c:49:1e:b5:b0:78:fb:7d:35:02:9a:9f:fe:
0e:1c:68:60:bc:49:f3:2e:81:29:ab:90:b2:bd:25:
5d:da:d7:f2:16:47:06:9f:7f:f9:34:f5:ee:ea:da:
dc:54:c4:41:24:a6:0e:ff:b3:00:93:b6:4e:8c:4c:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:6B:B9:61:95:1F:98:50:90:0E:D7:67:9D:8B:3A:9F:AA:96:5B
X509v3 Authority Key Identifier:
keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:54:2d:05:ed:19:ae:05:91:38:2a:00:5e:ef:28:b8:46:
ae:53:e9:a2:d3:d9:5d:e7:d7:be:7a:3a:08:f0:c6:5d:6b:2b:
0c:c6:71:c0:85:9b:b5:a3:b7:a8:79:0c:e0:6c:d4:62:77:4a:
23:3a:95:4d:0c:23:01:c4:39:0b:c5:16:a0:0c:ec:d3:39:11:
40:2b:35:bf:47:46:96:08:5b:86:11:db:8d:80:32:01:f4:48:
cf:a5:7f:72:cc:44:d9:7c:a9:8e:8e:c6:de:47:a0:11:51:0d:
87:c9:7c:8c:61:7e:00:9b:37:de:cf:83:4a:40:30:07:37:75:
da:d6:a5:85:4e:b3:83:a5:0a:c6:8d:d7:23:03:45:d5:de:a5:
33:d0:04:e8:0c:48:7d:bb:f8:ac:31:e8:78:cf:b4:bf:3c:7f:
f3:7f:7d:71:5b:90:b1:24:4f:42:25:f4:1c:49:6b:a4:30:35:
0c:80:fa:0a:5e:e5:f3:6e:dc:ae:51:25:a9:d2:0f:04:97:7a:
61:68:74:ea:fe:13:6a:1a:42:2d:68:da:50:c5:33:f5:cd:67:
82:78:56:3b:74:97:d8:ac:ea:04:a2:b6:cd:44:7b:56:17:64:
37:a4:06:af:aa:4c:55:f1:98:3f:0c:61:3a:24:f3:b5:be:96:
92:5c:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:23 2026 by rpki-client