
$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: DTplQIAc7/zWv0SSxxp8rBPNPWz51GJ47tx024dySIA=
Subject key identifier: B4:2F:2E:B6:8B:F6:E9:6C:61:0D:0B:9A:A6:4B:BC:6E:4D:85:4B:49
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 11
Signing time: Fri 17 Apr 2026 08:49:16 +0000
Manifest this update: Fri 17 Apr 2026 08:49:16 +0000
Manifest next update: Fri 24 Apr 2026 08:49:16 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: YpWjyNBHpqUrMXQwFsjd5SQ6R6+yhMtl5IMZ8FuWaRs=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Apr 17 08:49:16 2026 GMT
Not After : Apr 24 08:49:16 2026 GMT
Subject: CN=69e1f40c-3a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:01:9a:94:2a:30:d4:6d:3a:84:26:93:2e:
45:a1:c0:da:c9:f9:17:d5:0f:a0:97:e6:c8:46:d5:
30:36:d7:23:42:b2:1a:c0:57:94:52:a7:95:b7:50:
c1:1a:44:34:e7:77:6c:c5:c1:76:c4:16:81:5d:e6:
1d:b3:68:c9:09:40:ed:a0:ef:d4:7c:d0:6d:29:19:
9a:22:7b:4d:20:29:06:a6:d5:8d:bc:5d:b2:94:fb:
68:65:ad:be:7f:8a:0f:6f:1a:3d:d2:0d:ec:97:92:
17:df:eb:fb:43:2e:38:2b:a5:e1:21:78:39:c6:4f:
0a:6a:9a:8f:16:5a:60:e2:6b:5b:43:8e:38:5b:0f:
8a:61:5b:9f:4b:35:2d:4d:e0:06:df:06:e5:6c:15:
a8:50:1b:04:56:b7:e0:f5:0a:00:ae:51:4c:01:87:
f1:de:e8:fa:e9:13:1c:b1:33:e4:fb:1d:00:38:0e:
de:0c:3e:f3:c8:8e:e9:c9:ea:8a:d7:7b:19:17:82:
91:e3:a7:80:17:44:b7:00:17:b8:ba:10:5f:16:2f:
51:02:df:e1:7d:d4:df:11:cd:f9:5f:60:1f:21:6a:
e1:6a:93:40:c2:09:a4:bc:fb:fe:fd:bf:1e:52:a9:
52:6f:a4:1a:64:c7:86:35:57:a9:d2:58:72:32:e9:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:2E:B6:8B:F6:E9:6C:61:0D:0B:9A:A6:4B:BC:6E:4D:85:4B:49
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e6:a3:c2:44:b1:b7:63:b7:be:48:ab:b3:ed:d4:97:0a:cd:
a3:8c:6e:b1:df:b1:cc:9e:78:c0:f7:e9:45:4c:23:8d:aa:79:
c1:97:74:8a:a5:bc:87:b9:c9:95:92:32:b6:0b:e1:12:af:06:
d9:2d:54:b6:49:db:c5:0d:75:2e:e2:00:79:22:15:02:b4:a1:
76:8f:36:3a:c9:85:e7:f1:aa:b7:95:a1:55:0b:89:86:1b:00:
ee:4d:90:0d:6a:73:ae:b7:c1:63:5e:28:bd:0b:c2:25:d2:b4:
bf:fb:9f:63:da:f4:4e:52:3d:a7:99:d6:40:29:13:f5:42:41:
95:50:5e:a7:77:99:d4:36:3a:e1:35:f5:c7:6c:1e:8c:9d:9d:
51:d0:f4:99:b4:d7:82:40:b4:c6:ac:43:07:42:a0:af:05:22:
7f:44:f0:5f:aa:c6:5b:55:ff:e0:95:43:6e:6a:a9:7c:c1:a1:
60:94:97:3b:20:0d:28:29:3f:94:0b:a8:b4:16:0a:16:ed:46:
3b:78:61:de:9b:c0:c5:69:cf:d4:c0:c6:58:10:c1:78:c2:2e:
6c:bf:3d:06:de:df:4a:53:14:f5:90:6f:15:6e:ef:45:38:a1:
c1:82:ba:92:7a:4c:64:0a:c4:7a:82:b5:30:10:5e:99:2e:fe:
3f:e7:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:26 2026 by rpki-client