
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: GbDy2SKccSI48UZav2ZwNWBivdCkF2MQc9JfQPFD73c=
Subject key identifier: 4A:33:24:A4:E0:A5:DD:69:FE:91:61:56:05:88:3F:E2:3A:9D:3F:4C
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 3020
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 2FEF
Signing time: Thu 16 Apr 2026 15:26:25 +0000
Manifest this update: Thu 16 Apr 2026 15:26:25 +0000
Manifest next update: Thu 23 Apr 2026 15:26:25 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: PZrTWQMhUeojn/3rdYKGTSVngCS8X/JwOsZTs60i51s=)
2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=)
3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: LrI3Z2LgNfplNkM9E8legPgtdB8Kjo/oM53Ll6nVUjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12320 (0x3020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: Apr 16 15:26:25 2026 GMT
Not After : Apr 23 15:26:25 2026 GMT
Subject: CN=69e0ffa1-0104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:14:ea:98:03:2a:a3:3b:57:9e:60:0d:94:
3e:88:c1:9d:d5:d1:ca:ad:97:b4:46:57:86:34:f9:
76:ba:b0:f6:20:aa:00:29:1c:40:a1:09:9c:cb:f9:
78:d6:b4:b9:5b:ac:70:d6:e3:51:f6:0f:24:ba:d8:
3b:2c:0b:7a:fa:32:20:0f:b2:c7:ec:a2:fb:42:3c:
85:55:4d:f5:c8:76:9b:79:43:9a:8f:a7:e9:85:a0:
1a:3d:73:9c:35:dc:06:71:79:63:8c:83:c7:47:22:
a8:e0:2f:0a:6f:e2:7e:f6:b1:8d:18:0e:88:c9:53:
28:52:2b:33:b8:ae:7b:04:fe:01:e4:81:86:d5:11:
d9:a6:fd:43:41:44:18:4f:4a:9d:e8:b3:49:d1:64:
0b:7e:bd:33:1a:4a:a2:28:32:4a:ca:3d:fe:c1:0e:
9e:22:9b:c9:69:0f:d3:04:67:89:44:ca:4d:dd:88:
b3:d1:8c:3b:80:7a:5e:e6:23:ef:59:48:1c:46:45:
b3:01:27:2f:75:0d:eb:5d:73:01:10:c5:e1:4c:76:
3f:e7:00:86:7b:4b:cd:da:00:db:2d:9f:73:0b:37:
d6:90:99:ef:ec:6d:4c:01:d8:7f:91:b6:92:b1:28:
45:1f:b3:ea:30:5f:c6:0a:01:49:6f:6e:f4:c6:16:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:24:A4:E0:A5:DD:69:FE:91:61:56:05:88:3F:E2:3A:9D:3F:4C
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:25:d9:1a:da:62:9e:20:f0:b0:6b:ac:7e:ce:dd:4c:00:
38:2b:3a:9a:ce:d1:cb:0b:57:38:c7:07:ae:64:ef:3b:5c:72:
f7:41:86:98:e3:2f:ae:04:cc:63:c3:34:3e:4d:48:43:91:92:
8e:5c:a3:3e:c3:61:64:4c:ae:e7:94:42:2b:11:61:87:57:ae:
61:85:ab:b5:38:a9:4c:d5:37:27:d1:1b:1c:a8:fa:d5:8c:b4:
2c:45:9b:0a:0c:01:12:97:5d:c2:82:e9:49:8c:4f:15:93:fc:
f1:a8:a3:29:ef:67:55:6c:2c:73:15:55:28:fa:5f:80:8a:0d:
28:9d:07:98:33:47:b7:ea:b8:3e:94:fc:0b:4f:ab:95:b6:ed:
8a:82:5c:68:08:d5:f9:a3:50:ae:a7:a4:31:c2:44:5c:b6:46:
9c:cd:25:b4:fe:c9:8d:c3:9d:b3:2e:73:3b:a0:1d:25:85:23:
3d:65:42:06:2d:aa:a1:c8:d5:f8:d2:15:b1:7d:66:4b:23:98:
46:d4:c5:ed:59:e8:6c:e2:12:8b:4a:b5:13:ad:59:51:37:7c:
f7:38:bb:66:d3:73:38:c0:fd:f9:17:a2:17:c6:41:7c:ad:4d:
12:97:0c:b7:a0:44:12:57:5c:9d:eb:28:d3:5a:df:db:a5:4e:
a7:f0:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:43 2026 by rpki-client