
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json)
Hash identifier: drWG1UsGmtiyJViVCHfaPBuUzbVZjCv444i3U3VE8iY=
Subject key identifier: 90:B3:4F:7B:2F:B7:01:F7:A3:62:38:E5:DC:E7:AC:A3:4B:89:69:1B
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
Manifest number: 0BB0
Signing time: Fri 12 Jun 2026 19:33:46 +0000
Manifest this update: Fri 12 Jun 2026 19:33:46 +0000
Manifest next update: Fri 19 Jun 2026 19:33:46 +0000
Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: YLq4dfFBgBJ37Lp4Yt2X8LbYZLX1+bBy0NK+71cYXNE=)
2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Validity
Not Before: Jun 12 19:33:46 2026 GMT
Not After : Jun 19 19:33:46 2026 GMT
Subject: CN=6a2c5f1a-39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:db:c3:70:16:24:d7:3f:7f:b6:15:67:1f:
e8:5d:e8:a9:8f:ce:87:11:64:3e:ff:11:a3:e7:b1:
a9:28:78:31:42:5c:39:d8:2b:5c:67:3f:a4:81:d2:
fa:26:a6:1c:f1:94:8b:e9:17:d9:69:d6:cf:c3:50:
75:51:1e:25:db:2c:11:8a:8f:4c:d0:70:2b:ea:da:
9e:88:2a:6e:af:97:f6:83:22:00:4b:9e:66:cd:f6:
40:9a:39:b8:93:e3:8e:9a:4e:df:a6:58:9c:f9:c7:
c9:77:09:cd:79:51:f2:ce:ed:87:b5:c8:00:81:56:
da:e5:67:da:8d:dc:7b:3e:ea:17:0a:99:fd:3e:21:
24:68:f7:aa:fa:e8:b8:70:8b:94:f6:26:5e:78:1c:
93:3e:73:43:60:65:b5:26:dd:a0:ff:a3:93:45:7c:
07:76:a5:dd:28:cd:e4:44:ae:d0:91:40:26:2f:21:
78:8b:3c:4a:b8:69:d3:22:04:17:ed:81:15:6c:4c:
60:cc:54:6a:5e:e4:df:51:3f:3f:e6:d3:e0:89:25:
93:60:02:8f:14:36:48:bd:9e:89:f3:5e:53:54:1e:
e0:ce:b2:96:bb:26:05:bd:6e:e1:44:90:6f:00:97:
51:51:a4:72:00:fb:a2:0c:86:d3:a0:fd:9a:88:70:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:4F:7B:2F:B7:01:F7:A3:62:38:E5:DC:E7:AC:A3:4B:89:69:1B
X509v3 Authority Key Identifier:
keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:28:81:89:64:58:f2:9c:8b:6a:24:95:33:fb:7b:f9:ae:77:
cc:a1:d1:a3:4e:2f:56:bb:01:9a:b8:4c:60:13:0b:4f:ba:8b:
8b:9a:14:dd:c6:cc:b3:58:b6:7c:16:b5:eb:7b:ea:2c:03:c3:
bc:1c:36:70:66:d8:38:6a:45:5f:e1:ed:f9:a4:ae:bc:ca:47:
7c:7d:08:5c:6b:ea:05:ed:6c:fb:3d:7f:ee:43:e2:ad:99:9a:
5f:77:0c:83:12:61:61:da:a5:c7:82:1b:dc:37:05:da:7a:23:
23:2d:66:93:ff:9c:52:cb:22:1a:46:53:b1:b0:cd:01:57:20:
9d:cf:db:6c:78:25:97:31:c3:6e:af:e5:87:fa:8a:b6:41:fd:
37:5c:0f:95:86:bb:a3:31:91:09:eb:98:b3:57:53:6f:08:10:
95:fd:f1:31:b6:74:21:dd:92:5b:31:03:52:a1:bb:75:fc:1e:
13:7e:5e:a6:7f:9f:b5:05:7d:2f:dc:de:7a:e5:b2:b2:96:3d:
3e:b3:bc:5a:71:72:db:c6:86:16:84:28:76:9b:1e:38:d4:07:
0b:54:5a:f9:06:b5:3f:ca:34:05:76:2a:35:70:14:2b:02:39:
3e:6b:26:d5:95:e4:f6:7e:b2:92:45:dd:14:af:2e:1b:c2:ea:
fc:ca:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:15 2026 by rpki-client