
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier: vK7YMqgEq8vhFr4dzX+4RwiXVV7MDJNN8i8YfpjcSYw=
Subject key identifier: 14:1D:31:5C:AF:32:03:69:E2:8E:86:0B:CA:32:49:7D:88:E5:3C:6B
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial: 0EF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number: 0EE7
Signing time: Sat 22 Aug 2026 17:35:11 +0000
Manifest this update: Sat 22 Aug 2026 17:35:10 +0000
Manifest next update: Sat 29 Aug 2026 17:35:10 +0000
Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: IUBzlEu86LoW5g01QO3E2b4JWWac86ot1KqlwBz4XIo=)
2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Validity
Not Before: Aug 22 17:35:10 2026 GMT
Not After : Aug 29 17:35:10 2026 GMT
Subject: CN=6a89ddcf-9d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:7d:39:d2:bc:bb:54:94:5e:15:2a:bf:86:
9d:26:df:1d:c6:a0:79:c4:2e:59:93:ae:98:1d:ed:
5e:2a:76:d3:8a:66:51:24:27:d7:1e:67:a4:87:18:
32:ad:bf:86:bc:30:91:05:9f:65:55:c9:92:f7:ff:
78:cb:55:31:11:2b:45:f2:54:14:82:57:cd:21:08:
37:e6:59:09:f2:7e:10:ff:eb:7f:9d:34:0c:e1:f9:
de:25:62:3c:3d:6b:fb:91:5d:23:5b:b0:f4:37:bf:
5f:ff:9f:7d:24:e9:40:74:27:fd:9f:a0:be:92:d3:
2d:fc:6f:d0:eb:11:7b:86:64:6e:2c:a7:6a:7e:b2:
ad:d8:b8:27:a0:ee:73:8e:25:d8:33:2b:3b:8a:f3:
86:1d:b3:cb:04:72:44:96:c7:eb:bd:71:8a:a7:33:
f0:85:c8:a2:26:4b:de:12:8a:c8:1d:f7:f4:d7:f1:
67:54:bd:02:49:19:65:90:da:55:7f:2c:50:be:c7:
43:e2:90:0b:f6:21:6c:c6:a7:26:cf:f1:5d:c1:31:
dc:3e:11:f9:39:1e:83:6a:af:01:5b:7f:1c:74:02:
45:48:b1:60:bc:a9:71:9a:34:72:f5:0c:00:d8:1a:
6c:08:24:2c:6b:06:31:83:bc:c8:62:d4:06:29:32:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:31:5C:AF:32:03:69:E2:8E:86:0B:CA:32:49:7D:88:E5:3C:6B
X509v3 Authority Key Identifier:
keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ae:7e:e6:51:91:4e:31:72:9a:ae:15:0c:65:10:7b:b2:2e:
e8:2e:0d:0b:49:55:a8:a2:29:d8:68:bb:26:76:9e:ce:37:f3:
1c:a2:6c:6c:1a:04:81:8e:2e:5c:97:63:3f:d3:1f:c5:ba:1c:
5e:25:4a:c7:76:d4:25:18:25:39:cf:92:c3:d4:4f:80:75:4f:
06:b3:36:17:ab:c4:41:51:93:0d:ce:e8:e0:93:c3:b7:13:23:
80:0e:f0:0b:ec:de:74:21:29:a0:d3:de:9a:00:eb:90:fd:18:
88:c4:78:4d:10:66:a5:19:a7:49:e6:ba:d4:d3:38:2c:f7:bf:
cc:3e:4a:80:49:c7:ba:52:fd:fd:1d:fe:3e:2a:59:09:b0:85:
ce:fa:84:10:14:d5:d8:9b:12:13:32:ae:19:b5:bb:de:c2:22:
a6:39:2f:79:7e:11:d4:74:b1:67:05:13:ac:bb:9f:5d:c8:cf:
e8:cc:1c:b5:36:9b:63:51:e3:c5:a8:ed:da:a0:7c:7b:91:f1:
b2:dd:82:c6:92:be:2f:5b:11:ad:e6:dc:f4:7f:0a:58:e5:6c:
d5:b9:6c:8c:59:fd:af:47:44:ea:ec:aa:a1:6c:e9:fe:0f:e6:
83:34:cb:a2:11:bc:3d:eb:d6:03:dd:6f:50:20:e5:2e:8a:32:
6f:81:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:57:39 2026 by rpki-client