
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: VtNYVoduzONV8MPsjlYABvcJm1I9tLkr19TDEW3Gj0o=
Subject key identifier: 47:98:73:64:63:63:2E:9A:C1:B0:59:2C:CA:F5:19:17:FD:B6:76:BA
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 3009
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 2FD8
Signing time: Mon 02 Mar 2026 15:33:39 +0000
Manifest this update: Mon 02 Mar 2026 15:33:39 +0000
Manifest next update: Mon 09 Mar 2026 15:33:39 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: dWaXUsu2+NBJfweGD9PbOn+QoiddEZcNdnPRYugILTU=)
2: 502355A2B13D11E59299870AC4F9AE02.roa (hash: LrI3Z2LgNfplNkM9E8legPgtdB8Kjo/oM53Ll6nVUjM=)
3: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12297 (0x3009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: Mar 2 15:33:39 2026 GMT
Not After : Mar 9 15:33:39 2026 GMT
Subject: CN=69a5add3-8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:b7:58:d5:51:9e:22:99:0d:6e:45:5c:2e:
04:6b:69:2c:06:ba:67:81:94:03:56:3f:5e:05:a5:
f6:0e:3e:3c:de:93:fa:ab:9e:13:24:ca:58:4f:2b:
24:b2:44:c4:fd:45:cb:5f:ee:cf:f5:28:76:cd:71:
5c:50:49:f3:6e:a4:8e:77:9d:12:7d:00:80:34:ab:
78:a2:b2:27:26:34:4a:5f:9d:ad:24:c6:21:58:70:
d0:e2:f8:cf:59:bb:97:71:be:11:d8:92:ff:39:2d:
f5:ab:6f:5b:25:a5:bd:3a:b1:87:60:a0:08:67:c7:
90:c4:1c:9c:bc:73:90:e3:d3:50:0f:c0:f3:43:57:
05:82:45:32:fc:ab:97:47:ee:71:37:a4:29:85:2d:
9f:21:63:18:7b:d2:21:73:e1:ea:35:cf:34:a5:cf:
7a:d3:d6:36:ba:0f:51:72:24:25:27:36:d8:ce:08:
2d:74:e6:f5:93:e1:3a:17:9b:68:94:1a:6b:ae:fc:
6c:29:bc:9f:fb:54:fa:a0:82:42:6e:11:18:65:3d:
18:95:5e:76:2f:a1:29:86:ba:3f:e2:ce:7a:f7:62:
dc:9c:c9:5d:c8:17:e9:ca:e0:66:c8:56:c7:ab:32:
6e:0c:b7:3e:f6:de:45:cf:f6:fc:e3:79:cc:1d:23:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:73:64:63:63:2E:9A:C1:B0:59:2C:CA:F5:19:17:FD:B6:76:BA
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:2a:d0:d9:3c:59:f4:0d:ff:ea:83:75:96:c6:3b:88:53:
bf:20:4d:a4:3b:34:e1:46:7b:e6:01:90:c4:27:71:48:2f:88:
e7:bd:c6:a1:31:5c:56:d7:8b:29:0f:c1:31:87:3c:59:73:dd:
a7:43:9c:60:41:20:36:64:5d:0e:05:b1:46:43:22:ca:e3:66:
1d:aa:91:24:5c:34:6a:15:8d:40:8e:1e:3c:47:11:91:6a:66:
e5:52:73:24:33:d3:cd:48:86:75:6d:6a:16:a7:79:65:1b:da:
50:2a:71:f1:de:8c:70:a4:17:6b:46:f7:c0:35:db:ad:81:97:
4e:cb:a2:75:47:0b:86:60:6f:c5:9d:4a:74:ae:43:9b:e6:62:
d6:7f:9a:a1:b2:5f:b0:76:2c:a3:90:0f:7d:05:5e:eb:4e:a0:
71:ea:46:a6:c9:fe:12:ba:da:27:23:c6:8f:a0:fd:8b:27:b5:
56:9a:7d:2f:53:ef:71:00:15:96:62:a1:dd:32:68:1d:a8:25:
b3:ca:63:68:4e:ad:eb:19:87:e2:5a:fd:7c:1a:cf:04:d1:7b:
5f:65:0e:6b:4f:00:fe:0a:a4:3d:d6:23:57:e0:ec:a5:3a:ba:
c4:19:63:2d:45:64:0b:0c:96:8f:cb:f7:16:e5:ea:31:a0:b2:
d6:a4:4a:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG
N0M1OEFBOEIwHhcNMjYwMzAyMTUzMzM5WhcNMjYwMzA5MTUzMzM5WjAYMRYwFAYD
VQQDEw02OWE1YWRkMy04YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdK3WNVRniKZDW5FXC4Ea2ksBrpngZQDVj9eBaX2Dj483pP6q54TJMpYTysk
skTE/UXLX+7P9Sh2zXFcUEnzbqSOd50SfQCANKt4orInJjRKX52tJMYhWHDQ4vjP
WbuXcb4R2JL/OS31q29bJaW9OrGHYKAIZ8eQxBycvHOQ49NQD8DzQ1cFgkUy/KuX
R+5xN6QphS2fIWMYe9Ihc+HqNc80pc9609Y2ug9RciQlJzbYzggtdOb1k+E6F5to
lBprrvxsKbyf+1T6oIJCbhEYZT0YlV52L6Ephro/4s5692LcnMldyBfpyuBmyFbH
qzJuDLc+9t5Fz/b843nMHSMjKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeYc2Rj
Yy6awbBZLMr1GRf9tna6MB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4
MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z
WHVVbEo0LWNfVEQzeFlxb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACusq0Nk8WfQN/+qDdZbGO4hTvyBNpDs04UZ75gGQxCdxSC+I573GoTFcVteL
KQ/BMYc8WXPdp0OcYEEgNmRdDgWxRkMiyuNmHaqRJFw0ahWNQI4ePEcRkWpm5VJz
JDPTzUiGdW1qFqd5ZRvaUCpx8d6McKQXa0b3wDXbrYGXTsuidUcLhmBvxZ1KdK5D
m+Zi1n+aobJfsHYso5APfQVe606gcepGpsn+ErraJyPGj6D9iye1Vpp9L1PvcQAV
lmKh3TJoHagls8pjaE6t6xmH4lr9fBrPBNF7X2UOa08A/gqkPdYjV+DspTq6xBlj
LUVkCwyWj8v3FuXqMaCy1qRKrg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:17 2026 by rpki-client