
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier: sZUmRnAbMVzUc0z2oHM2uAOzgZYFMY09xhpv69i4m58=
Subject key identifier: 45:F3:67:DF:96:3B:99:F8:A0:34:ED:A6:96:04:02:C1:D2:EA:9D:B1
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial: 0ED9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number: 0ECE
Signing time: Thu 16 Apr 2026 17:35:39 +0000
Manifest this update: Thu 16 Apr 2026 17:35:39 +0000
Manifest next update: Thu 23 Apr 2026 17:35:39 +0000
Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: b1qbvIDzaRlsr0UFLEgBlxQGKn2E3D8faBp93JwYlpg=)
2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3801 (0xed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Validity
Not Before: Apr 16 17:35:39 2026 GMT
Not After : Apr 23 17:35:39 2026 GMT
Subject: CN=69e11deb-93ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:7c:af:92:b6:fd:a7:c5:7b:c9:df:5a:6a:
ac:96:d8:5c:c1:5b:89:56:77:8c:53:94:d3:4b:ce:
2a:4e:1b:36:d8:0f:23:97:40:8f:0c:a8:a9:e3:d1:
15:dc:12:0c:b1:aa:d2:02:c4:fb:d7:df:dd:f1:6e:
92:0c:b4:0a:11:80:d9:da:f6:18:7b:06:3e:96:b5:
3d:cc:b8:d4:d9:3b:11:cb:7d:b9:a1:34:11:4d:c5:
02:6e:a7:28:49:f9:c9:5a:7d:1f:21:90:26:ac:d8:
07:7c:c5:fc:a9:b7:f3:d2:a5:0e:71:ee:86:e3:e3:
15:61:19:90:6d:09:01:45:83:b6:50:c4:9d:5a:ec:
c7:63:18:c0:59:d8:f4:a1:c3:64:92:11:b9:ed:84:
5e:1e:58:37:0f:33:47:ff:03:49:4c:4c:be:a3:0a:
3b:2b:21:e4:4f:32:ce:f3:16:8d:3d:3f:a3:6d:b0:
58:95:a9:bb:8c:61:fd:fe:8b:86:05:ab:8b:cd:05:
fe:05:89:77:97:1b:26:87:49:6c:e8:cb:86:9d:62:
12:48:69:4f:fe:ef:95:6d:15:14:7e:1d:ad:55:0e:
ca:b4:17:6a:7d:af:7f:61:41:12:34:03:13:43:d7:
24:d9:fb:82:5e:37:3a:d0:ec:6f:5f:10:0b:bb:3a:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:67:DF:96:3B:99:F8:A0:34:ED:A6:96:04:02:C1:D2:EA:9D:B1
X509v3 Authority Key Identifier:
keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:41:24:d5:94:e2:8c:55:33:07:65:7c:45:37:39:75:7d:
17:2b:45:b5:20:05:8c:32:18:b1:1d:eb:a5:c2:58:bb:fc:cf:
4e:c0:ed:c3:4e:dd:0f:2b:40:23:62:b1:dc:ad:a4:4e:c1:85:
7d:5f:8b:96:4d:d9:d0:88:44:46:38:a6:0b:5e:c8:49:13:df:
d2:11:a8:53:c5:2f:f0:55:9c:15:50:8b:85:ee:e3:a4:a2:f4:
b2:93:7c:96:06:2c:56:df:fc:2e:e6:33:44:42:64:d8:b6:68:
da:c1:38:48:93:8e:67:94:9f:42:a5:b2:46:bd:54:94:8b:e3:
56:b8:ab:18:86:86:aa:1d:1a:d3:08:6b:f2:4e:28:05:c1:25:
68:95:b8:d0:10:3d:c6:43:77:68:84:0d:c6:02:51:de:e7:5f:
fc:66:88:93:cb:6a:a4:b4:86:df:29:7c:11:cb:ec:44:26:aa:
20:f3:2b:33:18:38:40:99:a6:6a:fc:18:f5:07:c9:24:fb:1b:
d2:da:d6:28:fd:8d:1f:ed:88:02:2f:d6:51:cd:42:72:91:fa:
03:0d:33:80:54:25:26:e6:52:84:85:6b:ed:1e:94:05:a2:8f:
17:4b:ea:55:a3:84:cd:b0:27:c6:52:69:48:4d:a3:97:6e:40:
40:a2:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:53 2026 by rpki-client