
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier: lrxmmhkBEUd8mKdE4Qum/vz5VtuZ8idGspp5Nv9ZQ34=
Subject key identifier: CE:A9:B0:24:07:0C:63:D9:AB:99:E7:47:4C:BC:58:2A:5C:3E:B5:1B
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number: CC
Signing time: Sat 13 Jun 2026 06:54:57 +0000
Manifest this update: Sat 13 Jun 2026 06:54:56 +0000
Manifest next update: Sat 20 Jun 2026 06:54:56 +0000
Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: 7NdF5Okt+kYXvPTWiphui0pc340dkVmiQfvsdRMrbyI=)
2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Validity
Not Before: Jun 13 06:54:56 2026 GMT
Not After : Jun 20 06:54:56 2026 GMT
Subject: CN=6a2cfec0-2a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:1b:0e:70:ce:22:4f:a9:b7:3d:2a:83:b9:
92:d8:02:f9:d1:bb:02:d1:8b:ed:7f:59:8d:b0:ae:
85:85:f9:c6:7c:80:59:f2:46:85:58:f8:10:ee:95:
68:62:13:dc:6b:b2:f1:10:46:a0:ae:0d:40:b6:92:
15:50:2b:4a:89:dc:bf:97:bc:b3:50:6e:6e:0e:79:
0b:ff:22:1c:8a:b7:e6:4e:f8:f2:9c:2b:e0:b9:05:
02:50:8d:94:db:d0:ad:97:b5:27:4c:ef:b4:dc:de:
da:10:6c:13:c8:f5:ea:3b:96:4a:fc:4f:b8:17:5d:
ea:d0:d2:58:3c:ce:47:2f:33:f7:62:e9:64:f9:72:
2c:93:f8:0c:18:2b:a0:db:71:35:1d:43:b1:f7:06:
d6:ec:2d:41:86:25:b9:1f:ba:7c:f8:14:5b:fe:33:
cd:7a:51:69:9f:7b:61:bc:87:77:86:03:90:47:16:
82:a6:e6:7e:ca:37:94:cd:ac:f9:7c:14:a7:6a:24:
53:48:ff:45:3f:ec:8a:6a:77:72:5a:6b:66:56:8f:
31:aa:d3:fd:19:92:3d:26:a3:7b:4c:9d:40:98:99:
17:47:5b:62:a9:75:b0:3a:f8:10:cd:01:5f:11:5b:
83:be:80:67:b4:3c:95:5f:64:6a:2f:6f:ca:cb:40:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:B0:24:07:0C:63:D9:AB:99:E7:47:4C:BC:58:2A:5C:3E:B5:1B
X509v3 Authority Key Identifier:
keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:9a:b0:25:2e:49:38:af:95:b6:cf:23:61:25:74:7e:d5:
3f:64:38:e0:e9:54:0f:79:c8:99:9f:3d:de:a0:d4:d3:e2:8c:
ea:e5:06:ae:d4:9f:48:a0:82:09:0a:e3:91:88:c1:90:75:38:
26:20:cf:7c:28:e9:f2:68:a9:d9:c8:08:f8:e6:af:b2:83:e8:
4c:f7:10:3e:f2:23:4d:68:c0:3a:23:d4:37:0c:ea:6c:1a:0b:
8e:4e:e6:c7:0d:ed:f6:43:ad:5e:01:74:c8:32:d0:5e:45:de:
eb:4e:d9:3f:d7:2b:3f:87:de:c6:10:0e:6b:0e:7d:4b:7b:ee:
83:01:0a:4e:58:74:13:de:e2:ce:9c:a1:b9:7d:a6:75:6c:f6:
20:19:8e:24:69:64:71:1b:64:75:b3:a7:02:5b:4f:b0:ec:fb:
92:30:d4:f7:0d:3c:a6:1e:aa:41:c0:8a:22:03:92:6f:ae:16:
1e:ce:05:94:17:7c:c1:c4:b8:5d:db:af:23:7a:2f:37:04:ac:
fe:8c:8a:2a:5e:d0:f5:b8:e2:34:07:e3:1c:ed:fb:ba:32:26:
4e:52:2f:8c:95:ce:cf:76:be:fa:2a:8f:4c:a7:f4:99:b4:61:
08:05:84:ab:48:b2:47:c4:53:6d:cc:ac:47:01:b8:b0:c3:41:
67:b5:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:52 2026 by rpki-client