
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: QX4NGXnPED8Jfbbd5kGJZxr+bYdyxjlZ5HhBqc+KfD8=
Subject key identifier: A9:B0:EE:CE:3A:54:AE:7E:B2:83:60:E4:93:ED:97:69:E2:E3:5D:8C
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BBD
Signing time: Thu 16 Apr 2026 18:54:41 +0000
Manifest this update: Thu 16 Apr 2026 18:54:41 +0000
Manifest next update: Thu 23 Apr 2026 18:54:41 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: VoaKUOocg1vv3ZzuJMSxEw2Ufd+mYnTIG9E3ymlOBJY=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Apr 16 18:54:41 2026 GMT
Not After : Apr 23 18:54:41 2026 GMT
Subject: CN=69e13071-2bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:e6:23:aa:17:1f:c4:3f:1a:7a:0e:9f:90:
cb:32:74:cd:df:a4:ba:cb:cb:20:35:87:92:71:31:
cf:a7:17:03:67:3c:78:60:f8:ff:1d:7b:b2:a2:9a:
fa:26:03:f9:14:5c:18:01:84:4c:06:ea:a2:1b:db:
5f:81:d2:89:55:72:e4:0c:e4:50:1e:a7:ed:2b:2c:
80:90:47:46:87:55:76:26:bf:22:41:1c:60:74:78:
e3:48:59:c9:01:4d:c3:a8:a8:b4:5b:a4:b5:e1:4a:
c8:ff:3b:5c:ac:14:f2:ce:d4:57:44:e8:40:55:22:
4f:c3:db:fd:68:7a:31:46:97:df:cb:84:a5:d7:68:
6e:a8:7c:b3:fa:08:58:42:12:19:c0:a6:dd:c9:36:
ed:73:4f:1c:b7:5d:bf:70:e8:cb:07:99:66:d9:13:
c1:cf:34:2a:72:db:83:f0:12:88:0e:7c:93:e2:44:
7b:0c:8b:3f:0a:d3:26:36:34:2f:e8:ef:ae:b5:2a:
61:a4:cc:6b:05:22:f7:c3:f6:e5:f0:d9:28:4c:92:
34:3f:3e:30:39:d2:ad:8d:ed:ca:4a:ce:5c:f2:96:
c2:cd:f4:69:73:52:84:c3:7b:fa:2e:fb:e2:36:d7:
fc:4b:95:6c:fe:eb:a8:54:a9:62:89:e1:38:55:2f:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:EE:CE:3A:54:AE:7E:B2:83:60:E4:93:ED:97:69:E2:E3:5D:8C
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:c9:be:70:ba:2c:ce:28:d3:47:7e:a1:18:7c:da:40:65:
d4:5e:87:d6:70:25:c3:d2:77:3f:40:f1:bd:7c:4a:a5:df:64:
fa:fc:39:52:19:f8:36:91:b8:3f:57:52:4d:ce:81:d9:28:49:
72:72:97:5d:fd:ab:15:72:32:17:7f:9c:ea:a6:78:2c:7b:70:
7d:41:45:2d:8f:62:a1:aa:be:a9:43:82:66:b6:12:4f:05:87:
ab:ba:69:2d:7c:6d:47:e6:82:5e:77:e5:e9:ad:03:9e:77:4f:
b3:47:e6:af:d7:51:a4:d6:80:28:19:ce:81:8c:59:f1:9e:24:
6a:ee:1a:e1:31:bd:8e:77:c6:77:3d:27:66:d1:a5:b6:f3:d1:
ab:2f:04:a0:e8:95:5c:3e:af:80:cb:b7:b0:8b:9d:b4:29:9e:
40:3a:62:95:0a:27:c1:e8:9c:a1:fc:9e:cc:57:b3:c3:51:09:
d6:65:f0:e2:1b:c3:8f:2a:06:1d:4f:ff:44:91:de:c0:2c:2a:
53:bc:35:f3:b0:da:36:42:91:e0:1f:37:c3:83:f7:f9:66:51:
0e:eb:42:db:fa:2f:4a:9e:60:81:f3:de:9e:ff:9e:d2:c3:c0:
ad:74:73:8d:c2:7e:c8:93:27:08:0d:e6:6c:e9:c5:ac:14:b2:
5b:e5:81:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjYwNDE2MTg1NDQxWhcNMjYwNDIzMTg1NDQxWjAYMRYwFAYD
VQQDEw02OWUxMzA3MS0yYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp07mI6oXH8Q/GnoOn5DLMnTN36S6y8sgNYeScTHPpxcDZzx4YPj/HXuyopr6
JgP5FFwYAYRMBuqiG9tfgdKJVXLkDORQHqftKyyAkEdGh1V2Jr8iQRxgdHjjSFnJ
AU3DqKi0W6S14UrI/ztcrBTyztRXROhAVSJPw9v9aHoxRpffy4Sl12huqHyz+ghY
QhIZwKbdyTbtc08ct12/cOjLB5lm2RPBzzQqctuD8BKIDnyT4kR7DIs/CtMmNjQv
6O+utSphpMxrBSL3w/bl8NkoTJI0Pz4wOdKtje3KSs5c8pbCzfRpc1KEw3v6Lvvi
Ntf8S5Vs/uuoVKliieE4VS/t8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmw7s46
VK5+soNg5JPtl2ni412MMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox
NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGhDJvnC6LM4o00d+oRh82kBl1F6H1nAlw9J3P0DxvXxKpd9k+vw5Uhn4NpG4
P1dSTc6B2ShJcnKXXf2rFXIyF3+c6qZ4LHtwfUFFLY9ioaq+qUOCZrYSTwWHq7pp
LXxtR+aCXnfl6a0DnndPs0fmr9dRpNaAKBnOgYxZ8Z4kau4a4TG9jnfGdz0nZtGl
tvPRqy8EoOiVXD6vgMu3sIudtCmeQDpilQonweicofyezFezw1EJ1mXw4hvDjyoG
HU//RJHewCwqU7w187DaNkKR4B83w4P3+WZRDutC2/ovSp5ggfPenv+e0sPArXRz
jcJ+yJMnCA3mbOnFrBSyW+WBvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:44 2026 by rpki-client