
$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json)
Hash identifier: HXXStFFNhFRann++DV40t2IXiGDq92Ng7in3jiua2QI=
Subject key identifier: 5F:E4:82:82:E4:88:A8:D8:F9:88:29:54:AE:FC:E7:7E:99:FC:52:B5
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial: 1DCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
Manifest number: 1DB4
Signing time: Thu 16 Apr 2026 16:04:15 +0000
Manifest this update: Thu 16 Apr 2026 16:04:15 +0000
Manifest next update: Thu 23 Apr 2026 16:04:15 +0000
Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: Yy0wNwXAswz/J10WXpF9rROisKoQZaYH+O015MgQtaA=)
2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: CiMRetgqfOHyT+t0oT0VnFidFPg4QE9lc+5bTN+xNPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7627 (0x1dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Validity
Not Before: Apr 16 16:04:15 2026 GMT
Not After : Apr 23 16:04:15 2026 GMT
Subject: CN=69e1087f-065d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:2a:e8:19:8c:9a:e1:d1:87:14:0a:8e:4d:
9b:c0:37:af:c3:3b:36:74:33:f9:07:c5:dc:51:ad:
99:b0:e5:41:f0:47:a8:79:9f:c4:c4:b7:12:50:e7:
79:38:c2:a8:18:07:d2:ff:68:d3:c5:06:d2:7a:cc:
1a:51:64:62:b4:d5:55:a7:1e:00:6a:0f:c7:3a:4f:
11:f7:db:23:8a:d4:9d:e6:a7:64:77:41:a1:9b:72:
ca:bb:99:c6:98:90:9a:07:fc:a7:4f:55:d7:49:9b:
22:97:c9:f3:5d:22:8f:22:fc:de:f6:41:65:b3:e4:
99:b6:84:6b:78:9b:42:20:7b:d0:8b:77:fc:bc:29:
ad:81:8e:d8:81:d9:46:21:3e:a6:71:cc:6e:66:60:
f6:0c:43:bf:43:a9:27:34:fe:71:03:22:39:c7:ab:
2d:e0:7e:2e:fd:6c:d7:48:3a:a4:8e:2d:dd:a6:04:
8f:98:1a:cd:7e:71:48:dd:60:b5:ae:8d:ae:01:56:
7e:55:2b:94:9b:b2:d6:e2:be:0c:c4:6d:1a:e5:98:
b0:3f:f6:ce:58:39:28:f2:12:14:ab:ad:47:d7:25:
28:41:86:52:66:3c:83:eb:c9:39:ae:0f:9d:f0:95:
9b:ad:80:4a:79:f6:52:66:1a:96:31:78:4f:40:ac:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:82:82:E4:88:A8:D8:F9:88:29:54:AE:FC:E7:7E:99:FC:52:B5
X509v3 Authority Key Identifier:
keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a0:b8:e5:5d:48:50:15:3e:83:91:38:b2:b8:c3:c3:a7:de:
d2:b3:bd:08:f1:28:e0:2b:15:11:84:42:6c:d4:a5:d2:48:ec:
a1:68:8b:bf:cb:39:cd:b0:bd:9a:ea:d4:de:01:9c:a2:b9:f1:
bb:04:3d:36:92:4f:96:3e:e2:cc:a3:8c:c6:ab:72:e4:06:29:
36:8b:75:52:e5:fd:e2:51:b2:0f:f5:a0:ff:cb:50:86:0b:78:
62:f8:8b:15:b5:4c:26:01:2e:cb:e5:2b:ad:ff:68:93:38:07:
d6:a1:30:0b:ac:41:f8:02:a0:6b:4a:d7:01:5f:4d:ea:64:9e:
93:07:ed:1e:3b:8f:50:6d:41:e1:3d:22:7d:ab:68:4c:ed:12:
c8:30:b2:ae:d2:23:22:77:f7:9f:14:93:18:a5:5f:25:84:91:
de:e3:ae:56:6c:e2:74:d1:82:16:e8:d8:41:17:8c:75:9b:17:
f6:7c:72:bd:58:4f:93:e9:83:42:2f:98:b2:13:f6:92:9c:09:
59:04:9f:ee:d6:9a:82:c0:ea:97:2c:29:21:65:4a:f0:10:3c:
93:84:c8:0b:78:72:c2:a1:41:65:d8:f2:d9:fb:cb:8d:fd:60:
37:d4:81:a8:4c:38:d1:6c:dc:5b:ea:56:ee:fe:68:42:a7:aa:
ac:35:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:53 2026 by rpki-client