
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier: ifE88RP7HLUKODlPXL+gAWrN+wbalwDDGjjqC7MMWqw=
Subject key identifier: 87:52:51:9C:20:08:86:5C:54:4E:27:2D:1C:86:A8:0A:85:0F:61:CE
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial: 03FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number: 03E6
Signing time: Wed 29 Jul 2026 01:18:00 +0000
Manifest this update: Wed 29 Jul 2026 01:17:59 +0000
Manifest next update: Wed 05 Aug 2026 01:17:59 +0000
Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: ug5tbLtspmD6XJrbt2s2F15bHb7P67QwolH9SCHdn6I=)
2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: 4btki8MufbxcYjK/3ldd2OyHnoFsKyUfQZm8u1lkOas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Validity
Not Before: Jul 29 01:17:59 2026 GMT
Not After : Aug 5 01:17:59 2026 GMT
Subject: CN=6a6954c7-a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:ab:ec:1d:4b:d9:7f:09:11:5a:d2:c5:2a:
17:7f:94:fd:61:9d:74:1f:81:6e:9e:00:b9:53:42:
0d:0a:0e:72:5c:77:e9:27:dc:44:1d:0f:34:a4:d0:
21:de:c3:ad:df:c0:84:4a:3c:a8:db:cd:8b:a3:b0:
c4:2d:14:3e:4f:62:11:e2:c8:ae:ce:9c:b8:c1:b4:
67:03:af:ce:87:b6:4e:d5:e2:fe:3b:75:15:34:0f:
74:dc:67:62:8c:88:80:f2:32:07:53:55:20:30:9d:
7b:1a:e9:1a:5f:79:1d:6e:a8:6d:07:19:c3:da:85:
87:fd:a4:a8:20:6c:bb:14:5b:65:dc:9d:54:09:76:
8c:57:dc:44:f4:15:b0:b9:e6:6e:ce:82:56:b2:c2:
5d:48:a5:5e:41:d0:de:20:c1:c1:72:aa:6b:2c:47:
03:c0:3c:81:de:c8:8b:91:9b:0a:83:61:55:73:9d:
81:45:46:f5:70:4d:43:74:b4:fc:9a:f2:ce:6f:7c:
c3:92:42:b5:47:73:e7:28:89:05:e9:45:76:8b:3c:
ee:c9:b4:0b:a4:ed:32:6c:2c:2b:2a:42:47:ed:9b:
5e:4e:c0:33:ac:7d:76:7b:88:34:a4:8e:d9:46:18:
fd:7b:dc:58:38:9d:73:2b:e3:8b:20:3e:e7:76:a8:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:51:9C:20:08:86:5C:54:4E:27:2D:1C:86:A8:0A:85:0F:61:CE
X509v3 Authority Key Identifier:
keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:f3:5d:75:ad:66:ab:77:47:a8:5e:00:3c:d6:9c:2e:19:
45:f0:43:39:ae:33:00:43:c5:0a:dd:bc:3c:d5:95:4f:01:28:
81:a4:98:07:0b:67:eb:d6:ab:10:4d:57:11:10:04:42:9f:31:
1a:f4:15:e4:fa:ac:29:e8:ff:c7:d3:a0:25:8d:73:6a:64:98:
b7:5e:66:78:57:9e:85:8f:32:1a:2e:c0:f9:f9:bb:8f:62:3e:
c9:ab:1c:78:8c:fa:e9:91:33:71:ff:6b:6e:79:69:0e:08:d8:
5f:77:59:29:73:a7:40:39:56:e3:f9:59:47:dd:86:6e:4f:b8:
88:e6:1b:4c:2b:61:17:a2:be:eb:2d:99:97:d6:b4:c0:47:ba:
77:fd:d5:66:a5:c1:01:67:1c:b3:6f:b1:17:b9:44:fd:28:f9:
f5:77:2b:20:bd:d9:c2:a4:b5:cc:fc:b7:49:db:30:8e:f2:27:
b0:bd:32:7b:78:fd:98:45:bf:51:30:47:ef:c0:c4:c2:47:c6:
01:c9:f3:a5:f0:ee:a1:5a:ba:2a:30:6c:d1:e0:ad:75:0d:de:
24:f3:12:3b:9e:c2:42:60:1d:46:3f:7a:da:d1:d2:13:50:13:
d2:91:70:e3:a1:dc:1c:b3:ea:d5:69:6a:b7:d4:04:3b:71:4c:
57:e0:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:30 2026 by rpki-client