
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: +iJZnrgzwlsFTgVDjQeIsAqOq0JQLnHmqvg5wAr2Gj4=
Subject key identifier: 15:43:9A:08:E5:3B:40:71:C0:DC:04:07:22:E1:A9:D4:F5:DC:23:9D
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 019F
Signing time: Mon 01 Jun 2026 04:58:25 +0000
Manifest this update: Mon 01 Jun 2026 04:58:25 +0000
Manifest next update: Mon 08 Jun 2026 04:58:25 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: C33AerP9RLdu5vnlLbtXFA8AZSO0xwOUhOF3IBGzU8s=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Jun 1 04:58:25 2026 GMT
Not After : Jun 8 04:58:25 2026 GMT
Subject: CN=6a1d1171-e63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:ff:7f:dd:e4:ac:23:e9:9d:b7:a0:06:13:
86:d6:d5:03:ea:7e:08:ce:f8:37:c1:09:dd:17:28:
c3:5b:79:f1:12:b1:32:3a:c1:ce:29:28:88:69:8f:
6c:1e:54:64:09:39:67:a6:bd:07:75:ff:17:62:b3:
65:d3:a7:be:ac:48:42:09:4b:bb:d5:03:74:ff:bc:
a9:4c:b6:2b:70:44:71:09:5d:b7:b8:c7:48:6c:cb:
18:1a:d5:6e:77:5c:35:9f:f6:cf:8d:48:36:6c:ed:
ad:6e:45:85:b8:b9:a2:09:ed:52:90:a9:a9:ab:5b:
f6:15:4f:6c:a6:f6:b0:6a:c2:b4:bc:ba:8a:5a:f3:
5f:6d:0c:cc:5e:29:7a:ab:bb:d2:b2:32:53:4a:e6:
4f:f4:48:d0:d0:27:9b:8b:9b:3e:0e:0b:77:09:ba:
b9:1c:47:02:15:9b:b3:29:c9:85:3e:35:be:65:81:
42:59:71:0c:1e:ec:12:10:c4:a6:26:4b:99:43:03:
05:a9:d9:90:aa:16:9a:1e:de:c3:18:25:25:2f:d6:
6b:d4:cf:6e:74:37:7d:8f:a8:09:44:d7:3e:0b:03:
d5:ec:d4:5a:9f:38:f3:9a:de:c9:2b:f7:9e:f1:3d:
d4:4a:1f:06:e1:df:94:9d:4f:20:98:64:b4:05:28:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:9A:08:E5:3B:40:71:C0:DC:04:07:22:E1:A9:D4:F5:DC:23:9D
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d6:97:2e:94:01:09:6b:d2:27:fb:91:0d:98:22:6f:7a:1c:
51:2e:f4:d4:79:f0:e7:bf:4f:ea:be:46:c3:cd:de:cd:53:7f:
21:97:ed:3a:29:66:72:09:b3:16:9e:97:27:d0:f1:41:9a:27:
e3:3f:2c:02:b4:c7:60:5d:f6:cc:a5:ca:e7:55:13:9a:f6:7d:
e1:3f:28:03:a9:e0:d0:37:14:4b:e4:76:4a:49:a6:b4:34:5b:
67:0b:79:72:2a:c9:5a:29:61:31:9c:3b:07:3d:48:91:d0:0c:
33:65:82:d8:ac:09:ec:59:b8:f0:84:ce:10:3b:2d:eb:ef:f4:
8e:42:c1:ce:e8:f6:5e:93:e4:9b:c5:87:34:66:c7:d9:2b:ba:
37:c8:c3:af:58:a3:5e:ae:eb:03:cf:44:2d:4b:d8:bf:55:7c:
1b:b9:77:9c:d3:dd:10:d8:02:27:67:35:4d:1f:49:10:01:cc:
88:48:ba:6a:11:d9:7b:8b:47:69:aa:84:1e:21:ce:df:24:12:
f2:71:4b:fc:bf:d3:4f:e4:cd:ad:93:ce:f2:6b:36:fb:dc:06:
1e:fc:fa:22:7d:06:d6:41:e5:75:b1:68:74:62:6e:b2:6f:9c:
ab:b1:6b:f5:83:ba:bc:ce:5a:82:bc:0a:b4:80:1c:e5:25:1a:
1c:7e:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:24 2026 by rpki-client