
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: BQx99u1jW/El/2j16cU0nCM4hdJ4VMnEUdK2+8TKGuo=
Subject key identifier: A7:16:8B:D9:9A:2B:E1:1B:92:89:53:5A:DA:23:E2:B1:0F:17:E3:69
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: 01DF
Signing time: Wed 07 Oct 2026 04:00:01 +0000
Manifest this update: Wed 07 Oct 2026 04:00:00 +0000
Manifest next update: Wed 14 Oct 2026 04:00:00 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: +FeOlCI4YPV/GOpl8K0dPa8u9x7w5yI2tdb3YiM18pI=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Oct 7 04:00:00 2026 GMT
Not After : Oct 14 04:00:00 2026 GMT
Subject: CN=6ac5c3c1-48d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:2a:d8:e4:86:0f:e6:60:3d:01:0c:2f:29:
91:be:70:ce:58:db:ae:ce:11:8e:6c:bd:7e:6b:1b:
1d:f0:d5:60:89:d5:ee:02:92:c3:d4:9b:18:4b:0f:
16:e5:42:77:dc:03:08:89:da:52:bd:cb:f9:91:f7:
03:6f:f3:c6:e2:78:34:c4:b3:76:09:26:26:c2:61:
c2:3e:01:f7:9c:2a:f4:46:6f:d6:b3:a5:b1:47:d9:
d2:ac:21:68:97:0b:b9:dd:c7:8b:4b:ba:36:f2:1f:
9b:7b:80:a8:5a:ca:3d:1b:d2:6b:4b:4b:5b:ef:ef:
cd:c2:e3:9f:dd:ec:aa:c9:2c:7f:54:cb:00:fc:03:
11:cb:f7:94:0a:16:07:dc:5b:ca:ae:f4:09:49:91:
82:88:d0:88:f8:a4:4f:f9:77:0c:5b:b8:f0:aa:1a:
2d:99:2c:91:5b:09:f6:86:e8:a5:0e:e5:58:7f:a6:
09:5d:7f:b2:42:07:f0:94:bd:1d:02:48:05:f9:cb:
ba:67:b7:f4:52:ee:a8:81:f8:94:f9:54:55:b9:69:
e8:61:2e:85:fe:1a:3c:8d:c0:e7:2c:56:83:11:82:
6d:9c:3e:c0:ff:d4:1a:82:0b:09:4b:30:ef:00:37:
4f:5c:f6:75:3d:1e:a7:17:fc:71:e8:3f:d2:7d:cf:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:8B:D9:9A:2B:E1:1B:92:89:53:5A:DA:23:E2:B1:0F:17:E3:69
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:7d:2a:25:1a:ef:33:b1:fb:7d:3c:53:33:e6:a8:08:d3:
16:07:c3:1d:38:cd:a8:a3:c3:eb:88:04:b2:68:ee:b9:75:48:
dd:65:d2:0d:48:df:4e:83:c9:4a:0c:39:1c:26:95:00:7a:57:
7a:7e:f8:83:fe:2a:6b:42:ec:3a:aa:f8:a2:39:cd:ea:0a:cb:
c8:ec:1d:fa:57:05:94:ee:17:f2:46:7f:f8:6c:00:fd:34:ad:
14:e7:18:c3:e7:e2:4f:7a:86:1d:a5:9b:28:c6:ff:74:c8:3f:
fa:8f:8a:91:e1:fc:6e:f0:65:d7:73:40:1c:2a:86:9b:7e:22:
fd:26:83:ee:08:ea:17:ca:16:15:8d:81:ae:b2:8e:a6:a4:5f:
4e:a2:4a:16:63:df:93:a0:00:6f:7d:3f:14:c4:e5:43:74:27:
cc:af:83:dd:99:09:b1:9b:99:2c:ab:ec:f6:79:ad:29:5b:bd:
c6:24:32:cb:47:1a:1d:d3:c3:c0:c8:73:2f:b2:b6:9f:a6:1f:
ae:72:8a:4d:4b:8c:1f:fe:d0:8e:08:fc:ba:c6:71:2a:f8:3e:
c0:ab:72:93:8e:98:4c:15:2e:53:66:b8:d7:17:8e:11:2f:ac:
b7:62:7d:4a:c3:af:1a:01:80:72:13:07:1c:7e:18:45:c5:a7:
24:7e:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:26:19 2026 by rpki-client