
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier: G+Zx/c3qmhpK6f3b4hKq4lW7RYhk3mFCj9iQE+PokL8=
Subject key identifier: 08:AB:0F:D0:D4:7A:E4:4C:D7:2B:6F:B9:76:3D:A0:C3:13:85:24:30
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number: E2
Signing time: Mon 27 Jul 2026 08:40:04 +0000
Manifest this update: Mon 27 Jul 2026 08:40:03 +0000
Manifest next update: Mon 03 Aug 2026 08:40:03 +0000
Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: 94397WAMKKtM2UO09z25LlurywlcpZq2DQpru5nIae8=)
2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Validity
Not Before: Jul 27 08:40:03 2026 GMT
Not After : Aug 3 08:40:03 2026 GMT
Subject: CN=6a671964-69de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2c:cf:82:98:3a:15:7a:49:95:c3:45:2f:8a:
0d:9a:1d:82:1e:8b:ae:84:bf:90:1d:f5:72:29:34:
ef:bb:02:67:a5:ca:0f:ce:e3:2e:bb:d0:77:63:f8:
cf:8d:95:75:1c:99:98:57:74:69:62:36:17:ac:26:
9d:3e:d2:ae:19:6d:9e:5b:25:a7:d3:09:6f:0e:a0:
a0:76:87:61:59:eb:23:a3:e7:8f:67:16:54:f0:27:
40:0a:4b:a7:98:83:36:b8:2e:bf:8d:c8:60:06:1f:
58:92:92:07:75:8f:b6:79:23:ef:a2:af:63:5a:e2:
28:6b:0a:74:a3:3e:cc:73:25:e1:e9:7b:a9:89:7b:
43:ca:86:f7:61:af:6a:76:3c:bf:73:04:47:5b:57:
8a:28:ed:71:86:ea:c3:3a:2c:fe:4e:ac:07:97:e4:
b2:78:10:cf:59:24:7f:67:ed:cf:2c:73:de:94:b7:
42:04:43:fb:60:6c:92:61:a2:06:88:22:63:0d:ca:
77:d8:8a:5c:bb:8a:44:9c:c3:f8:53:f1:52:52:fe:
61:bd:21:85:98:a0:95:16:9b:d7:3f:2f:f1:d6:d7:
f0:c0:9f:da:db:9d:4c:21:9a:72:5d:34:6e:72:4a:
85:3a:e7:80:c4:fb:d1:6c:f8:74:27:6f:95:2f:af:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:0F:D0:D4:7A:E4:4C:D7:2B:6F:B9:76:3D:A0:C3:13:85:24:30
X509v3 Authority Key Identifier:
keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:71:75:3b:47:3a:2f:f9:af:66:79:00:50:d4:6e:d8:9a:
0b:65:59:df:3b:a7:2b:4e:35:3f:b8:d9:fc:ea:b5:8d:52:18:
fd:c5:d0:12:d7:ba:ab:b6:19:18:27:d8:61:be:c1:0c:a1:f6:
eb:1b:97:7e:10:ba:e6:e9:9c:e3:2e:26:1f:38:8e:40:c5:1a:
84:2b:b7:8b:cb:49:c5:9a:11:81:ac:b0:a8:d8:ce:d5:c7:4f:
1b:16:ad:42:b3:48:d4:0d:79:8f:4e:ee:41:b8:1c:e9:b3:12:
6e:3a:bc:5b:1f:1e:47:3d:ba:77:e4:e3:fd:97:b8:45:ef:b6:
e4:49:c3:f4:5b:be:e5:86:13:86:40:9f:8d:ee:0b:d1:b4:55:
81:36:df:9f:6b:ae:05:5a:4c:45:8c:3f:1e:5a:ca:ae:c2:5b:
1c:89:c2:92:67:71:9a:60:0d:0a:60:91:f3:a0:49:5f:e5:a5:
f5:ef:81:5d:71:82:af:ee:e7:02:b1:7b:5d:86:be:83:f9:b1:
71:00:39:70:4b:dc:11:a0:16:57:59:ad:b5:34:aa:1e:c4:31:
c1:67:18:70:7b:ec:69:68:01:65:2e:5f:28:3e:d5:22:4c:98:
04:c6:52:f7:8a:72:fc:22:0f:98:dd:d5:35:56:07:1b:29:2a:
ca:ff:d1:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQyQ0ExMTAvBgNVBAUTKERDRUI5QjZEODNGQjAyREM0NUU5MjAzNTM4QTVDOEFG
NkY5NDFGQTkwHhcNMjYwNzI3MDg0MDAzWhcNMjYwODAzMDg0MDAzWjAYMRYwFAYD
VQQDEw02YTY3MTk2NC02OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9izPgpg6FXpJlcNFL4oNmh2CHouuhL+QHfVyKTTvuwJnpcoPzuMuu9B3Y/jP
jZV1HJmYV3RpYjYXrCadPtKuGW2eWyWn0wlvDqCgdodhWesjo+ePZxZU8CdACkun
mIM2uC6/jchgBh9YkpIHdY+2eSPvoq9jWuIoawp0oz7McyXh6XupiXtDyob3Ya9q
djy/cwRHW1eKKO1xhurDOiz+TqwHl+SyeBDPWSR/Z+3PLHPelLdCBEP7YGySYaIG
iCJjDcp32Ipcu4pEnMP4U/FSUv5hvSGFmKCVFpvXPy/x1tfwwJ/a251MIZpyXTRu
ckqFOueAxPvRbPh0J2+VL68ukQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAirD9DU
euRM1ytvuXY9oMMThSQwMB8GA1UdIwQYMBaAFNzrm22D+wLcRekgNTilyK9vlB+p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDJDQS8xMjM4NEFERTM1
NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0eEY2U0ExT0tYSXIyLVVI
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDJDQS8xMjM4NEFERTM1NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0
eEY2U0ExT0tYSXIyLVVINmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApNBxdTtHOi/5r2Z5AFDUbtiaC2VZ3zunK041P7jZ/Oq1jVIY/cXQEte6q7YZ
GCfYYb7BDKH26xuXfhC65umc4y4mHziOQMUahCu3i8tJxZoRgaywqNjO1cdPGxat
QrNI1A15j07uQbgc6bMSbjq8Wx8eRz26d+Tj/Ze4Re+25EnD9Fu+5YYThkCfje4L
0bRVgTbfn2uuBVpMRYw/HlrKrsJbHInCkmdxmmANCmCR86BJX+Wl9e+BXXGCr+7n
ArF7XYa+g/mxcQA5cEvcEaAWV1mttTSqHsQxwWcYcHvsaWgBZS5fKD7VIkyYBMZS
94py/CIPmN3VNVYHGykqyv/RSg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:39 2026 by rpki-client