
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
File: e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json)
Hash identifier: 7CSa6ESmv1fLo2lS8pLHYWVhgTSUM48g06hmBo/iwOM=
Subject key identifier: EC:04:D3:DE:9A:BD:6F:9F:29:AC:8D:11:84:75:39:DC:27:13:ED:5C
Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
Certificate issuer: /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Certificate serial: 282A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
Manifest number: 2811
Signing time: Mon 02 Mar 2026 00:25:23 +0000
Manifest this update: Mon 02 Mar 2026 00:25:21 +0000
Manifest next update: Mon 09 Mar 2026 00:25:21 +0000
Files and hashes: 1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: V4CBEMCqACCcZ/mq8r043XHoidErwuPYKK86ss2hgjI=)
2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: jX+faSi98u6rI1llUGpD7X8uVE2k5e81nnO0sXDJRio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl
rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10282 (0x282a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Validity
Not Before: Mar 2 00:25:21 2026 GMT
Not After : Mar 9 00:25:21 2026 GMT
Subject: CN=69a4d8f2-79eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:28:63:c1:86:89:06:4b:1f:84:a7:10:17:
43:3a:2a:55:54:35:1d:63:12:f7:d6:ba:05:5f:5c:
df:22:f6:3f:12:38:34:dd:51:92:ce:2e:0b:65:a9:
17:f8:51:fc:3d:aa:79:34:b4:04:f5:77:0d:49:f7:
a6:ef:e5:3d:c3:b5:9f:1f:ca:b6:0b:0e:01:8d:b4:
34:2e:df:5f:a5:86:00:48:9f:11:92:7e:41:2f:ed:
9e:1d:a0:e0:2d:10:bb:ae:62:de:e4:45:f1:71:8b:
bf:73:00:6c:70:2e:4d:8b:81:0b:b2:40:96:75:6c:
03:7e:9d:ac:43:e7:8b:66:bd:05:7b:fc:8e:88:4b:
2f:04:8b:ec:f9:25:e8:f4:6b:a5:3b:58:8d:86:99:
c5:47:58:f0:d9:07:23:fc:13:39:53:9b:90:2d:7a:
43:1f:e7:06:57:e9:a4:bd:7b:34:2d:e1:ca:90:b1:
24:fa:d6:e0:6b:48:6c:4b:b1:06:c3:0a:4d:ce:e9:
0e:66:d8:b3:19:a5:24:12:7b:6b:4d:b2:26:4b:01:
1b:39:89:a2:bd:fc:72:15:78:96:e9:66:b3:b2:5b:
ad:a8:cb:9c:dd:ef:55:3c:af:05:cb:6f:e8:34:45:
43:23:5e:a0:21:ff:7e:23:2c:89:fc:9f:cd:c6:3a:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:D3:DE:9A:BD:6F:9F:29:AC:8D:11:84:75:39:DC:27:13:ED:5C
X509v3 Authority Key Identifier:
keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:94:b9:a5:0b:11:ab:8b:4d:f2:0f:ab:c8:46:96:ec:79:
ee:5f:fa:c4:f1:32:5c:ed:a8:e6:ea:f0:54:82:30:c3:49:60:
a7:d7:2c:da:62:6d:32:5f:cc:7a:6b:24:04:26:ca:61:47:5c:
5c:88:c6:26:bb:16:86:69:8c:be:42:cd:67:87:48:11:0d:70:
62:b2:d2:34:a7:91:f4:46:8e:ee:5f:f0:ab:9e:a1:22:f9:97:
72:9e:45:0f:2f:00:bf:76:a2:3b:c3:fe:16:04:90:9c:b9:10:
0f:fd:aa:28:9c:8d:45:83:77:af:eb:13:00:6a:d7:67:63:ca:
1c:5b:f1:27:f1:fe:07:7e:68:80:48:50:65:94:05:1b:ff:80:
e2:5d:1e:28:4f:4e:74:a4:22:db:ca:50:cd:82:0a:7c:84:1d:
90:f3:b1:d6:06:df:cd:71:11:a4:14:36:96:53:10:29:21:a3:
29:af:95:4f:6a:09:21:3d:90:cb:cb:57:bb:a2:26:4f:35:1a:
82:9a:71:59:01:dd:2e:38:e6:f1:6f:c9:77:c1:57:f9:8f:7d:
ab:39:cc:40:09:34:87:20:62:5c:a3:22:01:f7:3e:c8:65:6b:
fd:f1:90:ad:bf:d7:76:7b:c3:ba:c3:34:ea:b6:e9:59:b5:81:
b6:d1:ea:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkzMTExMTAvBgNVBAUTKDdCNzc1NEE4MkREMDYzQTQ3RThFQzM1RDE2M0VGNkIy
NDQ4RDEyREIwHhcNMjYwMzAyMDAyNTIxWhcNMjYwMzA5MDAyNTIxWjAYMRYwFAYD
VQQDEw02OWE0ZDhmMi03OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWIoY8GGiQZLH4SnEBdDOipVVDUdYxL31roFX1zfIvY/Ejg03VGSzi4LZakX
+FH8Pap5NLQE9XcNSfem7+U9w7WfH8q2Cw4BjbQ0Lt9fpYYASJ8Rkn5BL+2eHaDg
LRC7rmLe5EXxcYu/cwBscC5Ni4ELskCWdWwDfp2sQ+eLZr0Fe/yOiEsvBIvs+SXo
9GulO1iNhpnFR1jw2Qcj/BM5U5uQLXpDH+cGV+mkvXs0LeHKkLEk+tbga0hsS7EG
wwpNzukOZtizGaUkEntrTbImSwEbOYmivfxyFXiW6WazslutqMuc3e9VPK8Fy2/o
NEVDI16gIf9+IyyJ/J/NxjpIhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwE096a
vW+fKayNEYR1OdwnE+1cMB8GA1UdIwQYMBaAFHt3VKgt0GOkfo7DXRY+9rJEjRLb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMxMS8xM0FGRjZGNkIy
NEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2Ui1qc05kRmo3MnNrU05F
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzZFVxQzNRWTZSLWpzTmRGajcyc2tTTkV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTMxMS8xM0FGRjZGNkIyNEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2
Ui1qc05kRmo3MnNrU05FdHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJDuUuaULEauLTfIPq8hGlux57l/6xPEyXO2o5urwVIIww0lgp9cs2mJtMl/M
emskBCbKYUdcXIjGJrsWhmmMvkLNZ4dIEQ1wYrLSNKeR9EaO7l/wq56hIvmXcp5F
Dy8Av3aiO8P+FgSQnLkQD/2qKJyNRYN3r+sTAGrXZ2PKHFvxJ/H+B35ogEhQZZQF
G/+A4l0eKE9OdKQi28pQzYIKfIQdkPOx1gbfzXERpBQ2llMQKSGjKa+VT2oJIT2Q
y8tXu6ImTzUagppxWQHdLjjm8W/Jd8FX+Y99qznMQAk0hyBiXKMiAfc+yGVr/fGQ
rb/XdnvDusM06rbpWbWBttHqtg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:53 2026 by rpki-client