
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier: iNsep6OawcbmCFpPTNEEeGwbybdkTlCRK7TjRqXdKoM=
Subject key identifier: F3:1D:A8:D4:B3:A7:3F:9F:0A:B5:1C:D2:B1:19:DD:EE:98:F5:45:38
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number: 9C
Signing time: Sat 13 Jun 2026 07:33:54 +0000
Manifest this update: Sat 13 Jun 2026 07:33:53 +0000
Manifest next update: Sat 20 Jun 2026 07:33:53 +0000
Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: FpO3lJywocuMbqoohef9N4xT3WxIhQj0hkBnc5ifn2Y=)
2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: M/En5GKZgRPs8xA5rjGsaCEY3++9OzoqoEMQTbP1dII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Validity
Not Before: Jun 13 07:33:53 2026 GMT
Not After : Jun 20 07:33:53 2026 GMT
Subject: CN=6a2d07e2-722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:4a:81:d0:51:22:05:3f:2a:3e:b6:d8:b6:
12:46:1b:c9:ad:de:36:89:fa:25:fe:25:d0:5a:64:
9a:48:a9:f6:c9:e1:94:ef:c5:29:42:71:89:b3:8c:
7a:e8:26:72:f3:75:e9:0c:71:e8:46:74:cd:7a:3b:
2c:0b:b8:3c:a3:cf:c2:f1:77:71:7f:99:5d:d7:71:
15:5c:c3:84:e3:af:c8:16:8f:e1:94:f6:d9:3a:d3:
8a:28:71:b3:60:0d:73:dd:02:cf:0b:b2:b1:a0:02:
52:f5:6f:03:9b:8e:e1:7d:bd:55:c9:5d:9f:47:8d:
94:bb:3e:fa:f8:8d:fc:b0:f9:37:79:03:73:a6:6a:
31:00:15:95:c2:16:c2:8d:94:c5:74:38:14:f6:f2:
e7:b1:bc:98:52:ab:27:32:2d:79:64:ef:34:a8:6a:
28:4f:75:ac:0f:52:53:76:45:8c:97:52:97:2c:2c:
6a:06:be:ef:3f:af:69:27:2b:06:17:6f:e2:e2:85:
74:5b:3f:59:65:3d:11:22:c1:cd:77:54:6a:a5:db:
4b:72:2d:4f:17:5d:e9:07:9a:b2:d1:5b:c3:62:41:
cb:7a:3a:ed:29:10:74:6a:c8:18:0c:71:84:0e:30:
6c:6e:38:f9:e7:15:c2:ff:5f:8d:8a:2f:23:1b:8d:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:A8:D4:B3:A7:3F:9F:0A:B5:1C:D2:B1:19:DD:EE:98:F5:45:38
X509v3 Authority Key Identifier:
keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:39:cc:f6:b0:ef:51:d0:31:47:c6:df:10:51:92:c9:e6:ca:
46:2d:30:f6:87:3b:cc:f4:73:2a:7f:25:26:61:b2:7e:50:3e:
c3:2e:76:53:72:6a:d2:78:17:fb:f7:1d:36:e9:4c:76:f3:2c:
31:cd:6c:d4:e0:0c:ea:e3:fc:fb:69:ab:41:d7:ce:3a:a8:74:
da:54:d2:33:43:70:96:ca:3c:2d:20:36:0d:d9:3d:da:08:25:
e3:9e:5b:bd:7b:02:e5:eb:2c:15:26:c3:9e:33:ea:e5:8c:b8:
ec:e3:b5:5e:23:ca:2e:fb:40:96:dd:bf:85:81:36:78:5b:8a:
24:6e:52:c4:dd:a7:9f:bf:41:2f:09:5d:a5:f3:c6:3f:e5:c6:
c8:db:df:5c:0a:3d:8d:4f:b0:76:3b:26:b9:87:17:60:7f:63:
33:27:5e:04:3c:52:e4:fc:9b:e8:40:84:29:08:6b:eb:88:bc:
01:67:f3:82:6d:51:de:fd:23:75:5d:99:5c:ec:a7:2c:fb:bd:
5d:35:e2:3c:1d:8e:50:56:fe:2f:46:62:9b:c5:08:c6:59:9e:
bf:8a:2c:bf:37:79:3b:fe:0d:ea:e4:0e:d7:02:8a:90:94:3b:
a3:c4:4f:f3:05:01:ad:15:e8:77:ac:1b:8d:ab:c0:ad:6d:81:
a4:b4:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:00 2026 by rpki-client