
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier: Upvpuze1lYsceH584HOeeJg6YRNEBdfKrcUUUys+QqA=
Subject key identifier: 05:0E:52:E8:37:34:EC:28:1F:F5:CF:B8:2A:FE:18:18:4B:88:B4:EB
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0CFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number: 0CEF
Signing time: Thu 08 Oct 2026 18:33:32 +0000
Manifest this update: Thu 08 Oct 2026 18:33:32 +0000
Manifest next update: Thu 15 Oct 2026 18:33:32 +0000
Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: DBnhEBJp8c4exlKlkDdIfwu6xUQ6UQIdGYKMTsdPSuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: Oct 8 18:33:32 2026 GMT
Not After : Oct 15 18:33:32 2026 GMT
Subject: CN=6ac7e1fc-e37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:24:36:dd:cb:09:aa:63:dd:ae:83:e8:f8:
f9:5a:4e:25:59:43:53:1c:c5:2b:a4:2a:57:c6:d8:
4b:cc:21:d7:78:e8:26:82:d0:2a:86:2e:e7:66:f2:
de:a4:8a:03:c7:01:7e:11:1b:e2:17:11:2a:0b:03:
c2:e0:36:e9:df:85:c5:9e:92:a0:84:51:fa:71:16:
8c:1b:7c:d5:7c:dd:d4:6b:7b:c2:04:a7:c5:f4:ee:
60:0d:17:fd:39:56:7c:71:bc:b3:62:0b:ef:5b:97:
d4:6c:57:19:3b:ed:4f:df:89:17:e5:be:32:8c:21:
d2:cb:1d:32:e4:33:37:52:e8:56:13:cd:62:32:c3:
f3:3f:3b:24:cb:a6:1a:04:1f:c4:92:a0:5b:06:e7:
d0:21:d4:07:12:db:3c:ff:a9:d7:9a:2a:0f:72:de:
ad:17:1a:c0:0a:ca:77:30:39:33:e4:30:e2:9f:b3:
8f:cb:20:bd:a2:49:1a:49:cf:38:08:2e:b0:11:e3:
bb:5b:7e:b8:44:f1:90:39:2a:6a:d5:79:e4:cd:90:
05:b3:26:5f:ae:2b:6b:ae:73:16:8d:43:fd:09:dc:
96:ef:f4:29:fd:da:42:64:3b:a8:11:ca:0f:e4:7a:
40:31:bb:99:9b:e6:ad:aa:75:0d:f2:32:e4:92:19:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:52:E8:37:34:EC:28:1F:F5:CF:B8:2A:FE:18:18:4B:88:B4:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:b4:ae:1f:ba:91:95:54:86:9e:f9:3a:11:30:09:d0:da:
2f:68:ef:50:70:75:02:f9:7e:b8:3f:a3:e8:8c:d3:36:f4:a8:
71:2e:c0:56:6f:18:6f:90:5c:ea:de:8e:6a:b0:ad:76:46:3f:
e0:62:4c:8e:d0:db:c1:57:5f:6b:ca:7a:60:44:a0:a3:bc:32:
e4:5f:ef:90:5e:c4:31:6a:98:3f:a9:0c:3d:82:b5:ad:7d:af:
77:fe:3d:a6:c1:de:c3:de:9f:35:3c:e9:ac:2b:44:cc:42:08:
7e:08:5a:28:bb:8a:3a:72:7c:ab:a4:23:45:f0:fa:55:65:18:
ed:21:6d:bd:4a:ed:a0:c6:80:d4:44:67:67:67:fc:9c:7d:ef:
bc:b4:40:e7:c5:e0:3e:e1:64:1b:fd:4b:23:ab:b1:c1:5f:4d:
8a:6b:ce:f0:f8:7f:4d:54:41:be:8c:22:e4:f3:1d:cc:18:72:
ac:52:ee:71:43:71:f4:60:4c:40:75:a7:0a:28:b2:ad:8d:fd:
e1:fb:87:14:ea:cc:21:e8:6e:0d:8a:44:45:7f:be:ec:6f:81:
76:cf:f0:d7:6a:55:8f:b0:86:b7:b8:a8:f1:48:fb:3d:cd:b2:
b0:e2:3b:ae:a9:56:fa:ba:84:35:d7:81:30:67:ac:12:e9:93:
6c:de:19:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2
NUY4QjI1NzYwHhcNMjYxMDA4MTgzMzMyWhcNMjYxMDE1MTgzMzMyWjAYMRYwFAYD
VQQDEw02YWM3ZTFmYy1lMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwUkNt3LCapj3a6D6Pj5Wk4lWUNTHMUrpCpXxthLzCHXeOgmgtAqhi7nZvLe
pIoDxwF+ERviFxEqCwPC4Dbp34XFnpKghFH6cRaMG3zVfN3Ua3vCBKfF9O5gDRf9
OVZ8cbyzYgvvW5fUbFcZO+1P34kX5b4yjCHSyx0y5DM3UuhWE81iMsPzPzsky6Ya
BB/EkqBbBufQIdQHEts8/6nXmioPct6tFxrACsp3MDkz5DDin7OPyyC9okkaSc84
CC6wEeO7W364RPGQOSpq1XnkzZAFsyZfritrrnMWjUP9CdyW7/Qp/dpCZDuoEcoP
5HpAMbuZm+atqnUN8jLkkhlSVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUOUug3
NOwoH/XPuCr+GBhLiLTrMB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4
NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv
ekoyV3FNSktrNXBsLUxKWFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAblG0rh+6kZVUhp75OhEwCdDaL2jvUHB1Avl+uD+j6IzTNvSocS7AVm8Yb5Bc
6t6OarCtdkY/4GJMjtDbwVdfa8p6YESgo7wy5F/vkF7EMWqYP6kMPYK1rX2vd/49
psHew96fNTzprCtEzEIIfghaKLuKOnJ8q6QjRfD6VWUY7SFtvUrtoMaA1ERnZ2f8
nH3vvLRA58XgPuFkG/1LI6uxwV9NimvO8Ph/TVRBvowi5PMdzBhyrFLucUNx9GBM
QHWnCiiyrY394fuHFOrMIehuDYpERX++7G+Bds/w12pVj7CGt7io8Uj7Pc2ysOI7
rqlW+rqENdeBMGesEumTbN4ZDA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:23:23 2026 by rpki-client