
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: 5HefByM9EFGZd217rn8/sE3fSTI12JygsE3Itdcrw4c=
Subject key identifier: 8C:48:6A:6A:89:4F:46:35:07:8C:60:E1:4F:98:EC:44:13:61:4D:46
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 0182
Signing time: Sun 05 Apr 2026 04:00:45 +0000
Manifest this update: Sun 05 Apr 2026 04:00:45 +0000
Manifest next update: Sun 12 Apr 2026 04:00:45 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: yic0YYfvb7xbe7S7zlur3u05HXc4m+ggo3TVzAK9Gfg=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Apr 5 04:00:45 2026 GMT
Not After : Apr 12 04:00:45 2026 GMT
Subject: CN=69d1de6d-5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:98:fd:e3:25:2a:ae:48:50:d3:43:31:92:
68:0f:66:41:d4:38:40:80:24:4b:41:dc:4a:70:79:
21:cd:ad:7f:1e:5c:0d:56:dc:2b:3a:e8:f4:f1:4d:
8d:e8:91:29:fe:20:68:d2:a2:78:0e:cd:b2:08:49:
d6:d5:f7:de:dd:cd:7e:93:e7:4d:57:1e:41:0b:c5:
5d:f6:01:70:c8:71:50:10:58:d9:80:6b:59:e5:3e:
ee:bc:17:71:af:90:cf:ca:f7:e3:63:c6:27:2d:ed:
c2:30:34:9a:f5:8d:1f:c0:33:82:3e:58:8e:ec:c9:
eb:83:64:27:2f:13:89:f7:dd:62:ac:df:8f:f5:ce:
86:13:06:82:9d:ce:8b:cb:8a:38:03:ae:e9:02:d4:
bb:c3:56:7e:5f:07:6e:33:9f:6c:5c:50:9d:41:3c:
9f:96:d8:be:ad:04:1a:49:3b:9b:71:3b:b4:0f:27:
e8:41:5f:b0:09:0b:53:71:c9:72:04:fb:74:a2:75:
ee:cc:99:cc:2e:d7:6f:90:27:86:d3:ba:af:f6:0f:
4c:5e:3a:cf:4b:30:28:72:52:d2:8b:ba:4a:a4:f7:
39:24:2f:ea:ea:81:d1:c8:3a:f9:06:80:01:75:94:
78:86:44:ad:18:7c:10:29:ee:a1:14:a0:bf:97:ba:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:6A:6A:89:4F:46:35:07:8C:60:E1:4F:98:EC:44:13:61:4D:46
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:b8:79:7e:23:c0:e6:f2:11:3c:36:3e:dc:74:05:27:a0:1d:
1d:0d:90:e1:1a:2a:2d:6c:2b:56:8e:c2:59:a4:a1:7e:98:06:
3f:16:3b:81:87:e8:0a:11:39:ff:94:e2:8b:e4:72:21:fc:b5:
be:e1:10:8c:50:48:45:58:ef:6b:0a:19:23:ea:1f:6e:43:e5:
ce:3a:6b:e8:15:33:62:9a:43:9b:1d:7b:36:1b:0e:c4:20:1c:
a8:98:8f:4b:28:75:45:b0:44:d9:c8:01:14:ad:02:be:ac:1f:
70:f2:af:ee:52:9c:50:9f:4f:f1:79:10:51:d7:01:90:02:92:
df:c7:de:6f:79:e1:f5:4a:72:1a:7e:11:f8:82:e4:80:43:e5:
ee:92:5c:12:ae:8f:4f:b3:51:14:1b:e4:d7:92:c0:b5:e5:90:
b2:53:fd:df:37:5e:05:2d:e7:11:12:3e:a6:4c:e3:2a:36:8d:
98:c6:95:16:45:91:bb:27:ab:02:f4:89:72:46:6a:31:cf:af:
12:79:c2:4a:c5:e6:44:fd:d2:bd:b8:81:bb:50:17:85:39:7e:
37:8a:83:6b:79:4b:16:59:59:8f:d4:b8:f9:13:3a:3c:b8:06:
04:a5:16:2b:f3:62:a5:a6:2e:57:f6:77:e5:d4:0c:0a:bf:27:
64:06:e4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:25 2026 by rpki-client