
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: yKEDBDRhm8NgjXEskUUU2Vbw3lYQvTCzhIHE2tPazvo=
Subject key identifier: CC:EE:8C:69:50:A8:08:26:B8:FF:AB:9A:87:81:68:C3:5F:C6:0F:A0
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BDA
Signing time: Fri 12 Jun 2026 18:58:32 +0000
Manifest this update: Fri 12 Jun 2026 18:58:31 +0000
Manifest next update: Fri 19 Jun 2026 18:58:31 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: n4kNLy5u1bX+f5t6LQ3z2HEkAvJCSrQQfh+qU3a6Jyc=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3050 (0xbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Jun 12 18:58:31 2026 GMT
Not After : Jun 19 18:58:31 2026 GMT
Subject: CN=6a2c56d7-e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:96:7e:cf:87:38:e1:4a:0b:cb:f8:b6:da:
86:15:c2:ce:e6:0b:07:e8:d7:05:f9:cb:25:ac:1b:
86:e4:73:57:7d:18:a5:7c:62:32:23:79:02:35:6b:
1f:7c:53:33:ae:e4:dd:17:5d:e9:4f:79:fa:b8:24:
1b:79:49:91:1e:fd:f8:e2:e5:19:56:dc:a7:7c:5e:
19:01:40:e6:65:72:4d:eb:5b:04:0b:f2:3f:64:f4:
63:c1:ec:85:c1:7b:d0:31:9a:d6:78:a6:a0:9f:82:
0b:05:1e:35:95:13:0b:de:02:ca:ae:56:5b:2d:17:
1a:da:21:22:3f:3d:bf:4a:de:d4:c0:5e:40:e5:08:
3b:fb:6d:f5:7b:6d:61:7f:cc:c0:ae:4c:27:de:06:
78:f6:c8:0f:55:e4:79:b8:49:a6:99:81:dc:27:8e:
ad:b0:be:8d:a9:0f:1b:44:55:a2:1d:9f:33:81:15:
84:6e:4c:b9:39:c7:67:95:e8:85:06:d4:c8:04:3e:
c1:3e:df:d7:c3:86:a5:df:43:8b:d1:ab:55:fe:38:
12:14:7f:14:c3:14:e2:ad:6e:59:ef:5a:11:80:bc:
c6:19:23:cc:18:90:90:23:fd:b8:dd:8c:b0:b6:57:
12:f9:91:ae:fe:82:9a:e9:db:db:6f:5b:74:ca:d7:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:8C:69:50:A8:08:26:B8:FF:AB:9A:87:81:68:C3:5F:C6:0F:A0
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:cc:ed:35:92:de:77:5d:aa:1e:de:18:8c:4b:25:4b:22:
98:db:69:9d:f7:f9:50:20:5b:1a:35:52:fb:29:9d:c8:0c:37:
f8:e7:40:55:ad:d8:72:17:a0:cd:21:70:c3:ab:f2:1f:ec:4b:
ac:1e:0d:27:42:95:91:28:f4:29:f9:32:6d:bc:a6:ef:cd:fc:
0f:3a:80:41:ef:0c:4f:67:39:ef:93:fc:2d:ee:f4:86:24:73:
46:6c:a7:17:bf:84:aa:ae:f1:1c:53:64:22:c6:73:7f:94:d4:
57:14:5f:d2:36:5e:0a:2d:12:bb:3e:64:7d:b3:af:a4:14:08:
e0:23:79:06:90:51:7a:4e:7f:52:b1:1c:b9:40:72:36:a6:3e:
10:44:c3:1a:42:c0:02:22:1c:0c:d0:c9:3d:2b:75:07:72:11:
e5:43:ce:f0:ea:6f:3e:45:10:e4:7e:e5:f0:e7:30:12:28:1b:
b4:46:d2:86:36:07:63:14:7e:69:d0:1e:ba:9d:13:df:b3:5d:
dc:b2:9b:9b:db:82:30:93:f0:7e:0f:9c:ec:ac:d2:a8:07:a2:
a9:3c:f3:11:01:91:92:96:71:53:96:93:88:29:41:63:da:8b:
c0:3c:14:9c:3f:35:fa:c5:22:5c:33:55:3c:b4:65:df:8a:9e:
df:a7:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:28 2026 by rpki-client