
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier: feo63tMeRbSbpw58Tx4sHFcvT9dc2ZFdixyWiEwbzPI=
Subject key identifier: 27:61:93:D4:81:79:9B:3B:F2:82:52:20:92:73:F7:91:90:EC:8E:C0
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial: 03E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number: 03CD
Signing time: Sat 13 Jun 2026 00:39:14 +0000
Manifest this update: Sat 13 Jun 2026 00:39:13 +0000
Manifest next update: Sat 20 Jun 2026 00:39:13 +0000
Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: MnUU6l3g3h6tCHWRqlP34CRPXVqOdo2vgnJeZ3TWSZc=)
2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: 4V/uXg1Hzl2+xIxX70vDwjRaqN/UDTZ6oLov6TMPRqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Validity
Not Before: Jun 13 00:39:13 2026 GMT
Not After : Jun 20 00:39:13 2026 GMT
Subject: CN=6a2ca6b2-d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:fe:d0:2e:3c:58:fd:53:3e:b2:81:7e:af:
51:1b:8e:15:94:20:b1:ff:12:e0:51:16:2e:47:66:
ea:b5:ff:70:f4:7e:c8:46:05:7d:0f:43:01:fd:a8:
ca:c9:45:72:b4:bd:00:d0:51:7f:65:18:36:75:a6:
ad:b8:2f:3f:b8:e2:75:32:51:3a:7f:f8:90:7d:67:
0f:c3:00:d2:a6:b2:30:29:ac:cc:f3:da:1e:52:3b:
2e:17:03:e9:5f:32:40:0b:d9:3a:50:33:01:32:7a:
1e:c2:d1:ae:89:d0:a3:1f:54:3d:3f:ba:59:04:20:
25:8f:78:2f:1d:76:b3:72:3e:ac:3b:58:7d:11:2c:
0d:55:72:43:08:2d:e0:0c:89:e2:ed:ae:6d:1f:2f:
0c:b5:e3:26:b7:6e:be:4f:ab:3c:96:80:84:21:fc:
54:7d:af:89:35:9c:a8:b2:dc:30:5c:c7:d2:30:a6:
1d:28:6e:13:2f:e4:17:c8:ba:64:54:de:af:c7:f5:
53:75:be:8d:de:03:82:ea:a7:8b:94:fc:f0:32:05:
72:1d:95:cd:58:43:d6:ea:ee:47:34:03:60:db:be:
e1:0f:0b:43:22:46:f7:91:14:54:b9:98:3c:1a:7d:
48:17:c2:21:f7:97:0b:30:e0:fa:e7:ba:eb:03:fc:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:93:D4:81:79:9B:3B:F2:82:52:20:92:73:F7:91:90:EC:8E:C0
X509v3 Authority Key Identifier:
keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:8c:52:7f:de:2f:09:30:82:29:c6:29:59:bd:03:06:c4:
30:8f:bd:8c:76:11:69:f6:68:52:65:27:48:11:0e:ed:74:f8:
6a:70:22:7b:15:5c:99:39:1d:92:f8:ea:21:aa:6d:e5:b2:ed:
2f:eb:15:aa:be:3b:23:e5:51:22:a0:42:ab:37:77:fb:58:bb:
4a:e7:78:a7:cc:ed:d1:01:a5:43:fe:b1:f7:63:69:3f:cb:99:
f7:0a:f2:2b:e5:33:cc:cc:c0:00:bd:a5:c3:03:03:16:25:34:
f7:b4:32:62:06:2c:88:ca:95:b1:af:89:65:11:85:bf:5c:02:
df:43:b2:88:87:0c:f0:42:2a:13:e2:2b:ce:26:2f:64:9f:b1:
94:7d:7d:9f:eb:1c:95:df:0f:11:02:81:c1:e9:c1:6c:e2:3c:
38:c9:ea:59:cf:f7:7f:d7:dd:37:6d:f7:38:c7:24:0e:19:29:
a2:66:9c:3b:87:87:4f:a5:39:a6:d9:7e:31:70:a5:32:a0:b2:
ab:c6:7b:c6:49:69:14:02:32:81:8e:9e:7c:17:ca:01:68:e6:
fc:d7:03:74:1e:e8:6d:d9:42:fc:e4:b6:ed:26:6f:6e:82:86:
f3:89:d7:38:5f:ca:0d:72:f1:44:f0:6f:4f:24:e4:f9:d8:27:
2f:d1:51:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx
RDUyNjQzNUMwHhcNMjYwNjEzMDAzOTEzWhcNMjYwNjIwMDAzOTEzWjAYMRYwFAYD
VQQDEw02YTJjYTZiMi1kMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUb+0C48WP1TPrKBfq9RG44VlCCx/xLgURYuR2bqtf9w9H7IRgV9D0MB/ajK
yUVytL0A0FF/ZRg2daatuC8/uOJ1MlE6f/iQfWcPwwDSprIwKazM89oeUjsuFwPp
XzJAC9k6UDMBMnoewtGuidCjH1Q9P7pZBCAlj3gvHXazcj6sO1h9ESwNVXJDCC3g
DIni7a5tHy8MteMmt26+T6s8loCEIfxUfa+JNZyostwwXMfSMKYdKG4TL+QXyLpk
VN6vx/VTdb6N3gOC6qeLlPzwMgVyHZXNWEPW6u5HNANg277hDwtDIkb3kRRUuZg8
Gn1IF8Ih95cLMOD657rrA/zyNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdhk9SB
eZs78oJSIJJz95GQ7I7AMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5
QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3
Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKmyMUn/eLwkwginGKVm9AwbEMI+9jHYRafZoUmUnSBEO7XT4anAiexVcmTkd
kvjqIapt5bLtL+sVqr47I+VRIqBCqzd3+1i7Sud4p8zt0QGlQ/6x92NpP8uZ9wry
K+UzzMzAAL2lwwMDFiU097QyYgYsiMqVsa+JZRGFv1wC30OyiIcM8EIqE+IrziYv
ZJ+xlH19n+scld8PEQKBwenBbOI8OMnqWc/3f9fdN233OMckDhkpomacO4eHT6U5
ptl+MXClMqCyq8Z7xklpFAIygY6efBfKAWjm/NcDdB7obdlC/OS27SZvboKG84nX
OF/KDXLxRPBvTyTk+dgnL9FRUg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:40 2026 by rpki-client