
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json)
Hash identifier: 8iMbHLT0M8ZGNy71FHeBGhfT4ghyNWSukueATwgsmYo=
Subject key identifier: D1:11:13:48:49:6B:BC:5B:4C:6D:88:38:C4:40:36:D1:33:0C:0F:CD
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
Manifest number: 0BDE
Signing time: Tue 28 Jul 2026 19:47:58 +0000
Manifest this update: Tue 28 Jul 2026 19:47:58 +0000
Manifest next update: Tue 04 Aug 2026 19:47:58 +0000
Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: yp4N6ALWKPuNdsvMFhesSuU+MmXRHiONPuXLI7s6SsM=)
2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Validity
Not Before: Jul 28 19:47:58 2026 GMT
Not After : Aug 4 19:47:58 2026 GMT
Subject: CN=6a69076e-25e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:89:c0:3f:2a:a0:55:2e:1a:5a:fe:42:42:
1d:79:f4:f2:a3:a6:52:10:4a:d3:86:bc:8a:58:b1:
58:e7:96:e1:86:73:10:d9:ed:c8:57:6d:f9:89:a2:
4b:61:45:c8:b4:69:b6:1e:a5:4b:0e:4b:80:22:3a:
fc:04:12:27:5b:28:03:26:55:64:a8:5e:2d:88:e0:
f6:9e:86:39:58:5f:b8:d3:64:fb:04:c1:40:1d:a8:
51:b1:a8:cb:cc:4a:fd:cc:16:0e:af:ad:3e:fc:fb:
ea:37:db:04:67:c4:55:c0:93:5d:ab:03:87:ca:bb:
36:88:6f:09:1c:12:c4:5b:1a:4f:74:e7:81:7d:aa:
5f:b2:72:3c:26:29:ec:3b:6a:6a:2b:4b:ea:d8:c0:
e0:22:4f:7e:b7:a2:d2:ee:72:db:02:04:47:8d:88:
39:82:18:b5:48:fe:60:17:ae:0e:bf:75:1f:70:57:
a6:d5:c7:15:b5:14:60:bd:de:5a:f3:4f:74:be:46:
49:cd:1b:1a:c4:d3:b0:13:e0:f3:7a:e7:b2:18:fb:
85:b7:27:b2:ad:70:42:0e:5a:4e:6e:69:50:5b:b1:
76:23:90:8d:ad:10:7e:ba:44:46:c6:d9:ff:e2:be:
f4:8a:94:37:d6:9f:a5:91:54:4a:06:b7:b7:30:e1:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:13:48:49:6B:BC:5B:4C:6D:88:38:C4:40:36:D1:33:0C:0F:CD
X509v3 Authority Key Identifier:
keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:74:37:e3:90:17:17:85:e4:61:5b:d4:60:70:0b:a0:2e:
ee:35:e7:33:0c:64:71:63:f3:3d:99:43:aa:15:b3:91:51:1c:
e1:b9:ea:af:a1:c2:a0:d3:27:7b:b7:95:8e:21:5f:6b:02:57:
e8:f9:fa:d5:9a:f4:fb:95:8f:2d:56:30:99:fa:71:cd:e8:3a:
3c:c9:93:63:1f:ab:98:76:01:9d:a1:b7:ce:da:77:0c:35:b1:
1e:7c:eb:3c:27:84:77:7f:63:c2:e7:88:8a:78:5d:32:b3:8b:
9f:fe:3a:b2:43:fa:9e:c5:a1:fb:31:4f:a5:44:cc:c4:7d:d9:
e6:6c:82:0e:09:f4:86:98:70:3c:f6:60:41:12:7a:4f:fc:a7:
99:17:84:9a:ab:ce:29:b4:d9:1c:1e:6e:16:b9:26:e6:15:88:
2b:8a:ce:84:6b:21:1f:e6:de:2c:35:b5:69:8a:6b:f1:d9:61:
65:98:8a:d3:c4:40:7d:83:ab:12:0f:47:75:fd:db:47:dd:bf:
76:80:38:15:f4:60:2c:5c:3d:26:24:67:4a:21:1e:e6:d9:75:
3d:48:a5:dc:3b:f7:b9:7e:e0:b6:06:26:a2:79:6c:17:5b:c2:
c6:e3:1b:5d:9d:9b:1d:3e:a2:3c:a9:fb:33:9a:5a:92:91:c7:
49:b7:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:33 2026 by rpki-client