
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: PF3Ai370LVAmsAl/JCbF/ZOmpiT3+/ze7eaSP3K86v8=
Subject key identifier: AD:F0:3B:A6:D0:AF:01:45:78:76:CB:FD:CF:7B:6E:21:C1:4E:92:7B
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BA3
Signing time: Sat 28 Feb 2026 19:15:09 +0000
Manifest this update: Sat 28 Feb 2026 19:15:09 +0000
Manifest next update: Sat 07 Mar 2026 19:15:09 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: Dd04TBc27qDtI7sGzTphxezQcUTyOe7FqKG5tPouRoE=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: e8DrNgU6wclV+/cuRuh0FDYWi/CeredwOHLzSK+l0vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993 (0xbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Feb 28 19:15:09 2026 GMT
Not After : Mar 7 19:15:09 2026 GMT
Subject: CN=69a33ebd-5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:94:68:bb:bc:0b:fe:83:ce:82:9e:8d:5e:
0d:d3:72:07:7c:27:ed:a2:72:39:db:1a:fc:95:14:
8f:da:90:b4:b7:5e:0d:e7:f4:fe:9b:22:b4:75:b7:
5e:63:32:d6:30:38:f0:ce:56:f9:65:47:7a:f4:4e:
36:48:da:17:0c:f6:b7:83:80:47:18:98:7d:81:f2:
1e:09:b1:10:99:82:cd:19:02:76:78:bb:63:49:8b:
1f:e1:9e:aa:13:29:ed:03:42:1c:be:51:a5:66:13:
9b:4a:87:ac:ca:bf:02:f3:5b:4c:ba:99:74:47:82:
d0:e8:c1:69:b1:ea:d0:89:c3:95:48:57:7d:08:81:
1a:83:f2:53:c2:7b:41:a1:0b:d5:d4:e8:9f:33:ba:
90:ae:87:92:1b:66:8d:49:56:57:4b:94:10:05:1d:
45:6b:dd:ee:e2:c7:2c:36:51:5b:ed:ae:30:97:0a:
5a:52:20:05:78:a7:d2:ab:a3:52:54:93:ad:69:72:
23:48:5e:7b:c3:56:74:bb:c4:4c:d3:49:0a:8a:a3:
25:aa:7c:21:f4:2a:58:c0:fc:49:86:b1:b8:43:1b:
47:82:9e:67:34:ba:25:89:52:ea:c1:0b:72:fa:9b:
6d:e4:7f:ee:09:78:3e:75:ce:6c:b9:49:89:22:9a:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:3B:A6:D0:AF:01:45:78:76:CB:FD:CF:7B:6E:21:C1:4E:92:7B
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:02:f1:f0:e0:af:6a:99:0c:be:0f:9d:bf:35:e6:bf:b1:
12:45:89:38:84:ed:5f:ea:24:79:a5:c5:d5:a4:52:b7:01:0d:
54:a1:a6:57:c6:f7:12:8e:48:7f:4f:9c:a6:95:ab:92:f5:16:
2e:0f:b6:77:1a:81:51:0a:51:36:19:92:dc:7a:6c:64:aa:2f:
1e:cb:3c:b8:5a:85:e5:29:7e:7d:2d:be:e9:ce:6d:34:c3:19:
82:4f:af:26:5e:40:dc:63:71:73:00:5e:01:0f:34:98:34:3b:
b6:6a:18:8d:1c:8b:a3:c3:c0:32:f1:95:33:d7:d8:c4:47:a6:
0b:53:4f:95:c3:b0:34:82:23:41:f4:7a:ed:f6:1a:de:15:d1:
ee:e5:25:84:9b:67:e9:0a:3b:df:f5:ac:cf:a1:66:70:9c:9f:
3f:a7:bc:06:89:20:85:76:7d:11:4b:50:cc:50:2e:df:eb:7d:
1d:30:a5:41:81:20:36:41:e8:f8:29:b0:c9:79:00:7b:92:c9:
11:1e:f0:fa:a0:3b:10:73:99:ef:32:a3:fb:be:a9:fe:d9:5a:
bf:36:8b:38:c9:ee:f9:68:9b:3d:b3:57:32:b6:8a:9b:23:af:
4c:c8:50:05:c4:3d:94:7f:22:f4:a4:5d:c0:81:01:c3:97:f4:
78:3b:cc:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjYwMjI4MTkxNTA5WhcNMjYwMzA3MTkxNTA5WjAYMRYwFAYD
VQQDDA02OWEzM2ViZC01MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwImUaLu8C/6DzoKejV4N03IHfCftonI52xr8lRSP2pC0t14N5/T+myK0dbde
YzLWMDjwzlb5ZUd69E42SNoXDPa3g4BHGJh9gfIeCbEQmYLNGQJ2eLtjSYsf4Z6q
EyntA0IcvlGlZhObSoesyr8C81tMupl0R4LQ6MFpserQicOVSFd9CIEag/JTwntB
oQvV1OifM7qQroeSG2aNSVZXS5QQBR1Fa93u4scsNlFb7a4wlwpaUiAFeKfSq6NS
VJOtaXIjSF57w1Z0u8RM00kKiqMlqnwh9CpYwPxJhrG4QxtHgp5nNLoliVLqwQty
+ptt5H/uCXg+dc5suUmJIppMpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3wO6bQ
rwFFeHbL/c97biHBTpJ7MB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox
NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT+oC8fDgr2qZDL4Pnb815r+xEkWJOITtX+okeaXF1aRStwENVKGmV8b3Eo5I
f0+cppWrkvUWLg+2dxqBUQpRNhmS3HpsZKovHss8uFqF5Sl+fS2+6c5tNMMZgk+v
Jl5A3GNxcwBeAQ80mDQ7tmoYjRyLo8PAMvGVM9fYxEemC1NPlcOwNIIjQfR67fYa
3hXR7uUlhJtn6Qo73/Wsz6FmcJyfP6e8BokghXZ9EUtQzFAu3+t9HTClQYEgNkHo
+CmwyXkAe5LJER7w+qA7EHOZ7zKj+76p/tlavzaLOMnu+WibPbNXMraKmyOvTMhQ
BcQ9lH8i9KRdwIEBw5f0eDvM5g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:34 2026 by rpki-client