
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File: T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier: MNHXYVU5fXexjLm8LNk237JiUJYk/8favjeGR45QCHY=
Subject key identifier: 7C:01:F4:A1:65:63:2D:0D:67:2E:80:30:37:AD:7B:0C:38:C0:74:22
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer: /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number: 6C
Signing time: Thu 15 Oct 2026 09:08:07 +0000
Manifest this update: Thu 15 Oct 2026 09:08:06 +0000
Manifest next update: Thu 22 Oct 2026 09:08:06 +0000
Files and hashes: 1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: qzyziaT6/g9hokkAC1nHxdbcFR9sD+YgXVtXD/W4zt4=)
2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Validity
Not Before: Oct 15 09:08:06 2026 GMT
Not After : Oct 22 09:08:06 2026 GMT
Subject: CN=6ad097f7-51b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:27:38:c1:d6:da:0e:23:83:a3:7e:df:34:
66:30:b3:79:b2:6f:30:6e:52:a0:7e:fd:00:d4:07:
dd:9b:5e:f4:f9:e2:d1:40:b3:54:20:de:78:dd:db:
7b:cf:c4:45:c5:03:97:7e:2f:15:f2:dc:21:c3:48:
65:13:a3:4c:d8:1b:dd:50:1b:df:97:4a:66:0f:8d:
1a:ab:af:34:da:d6:3c:70:9a:14:fc:0d:ce:bd:68:
fe:5e:1a:83:54:6c:45:d3:fc:18:e1:a6:ff:95:56:
30:ef:2c:2c:b1:fd:dd:2b:e2:ca:ab:92:f6:ae:2a:
4c:17:1a:74:7b:c4:ed:af:6b:cc:a3:93:6d:b6:87:
5b:bb:0f:c8:a2:1d:21:e1:3f:15:62:f9:e2:8d:08:
dc:f2:fa:fc:e9:ff:47:d3:0d:34:47:55:10:58:5c:
8e:08:3e:18:9f:eb:51:71:7b:d3:9f:7f:7d:05:8f:
4a:55:0b:ed:4e:34:9a:84:fd:cb:94:b7:22:20:06:
b0:86:5a:bd:18:8d:76:b7:d4:73:eb:84:2a:bd:f3:
4a:b9:b2:e5:ef:0c:5d:fd:d6:4e:a8:e6:15:0b:52:
17:33:3a:9a:31:a7:fb:74:3e:2a:06:9b:21:ff:31:
e3:2d:52:29:0c:e5:79:eb:e0:b1:08:e6:5f:3b:58:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:F4:A1:65:63:2D:0D:67:2E:80:30:37:AD:7B:0C:38:C0:74:22
X509v3 Authority Key Identifier:
keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:35:55:6f:6d:ca:4d:ba:9e:be:91:05:00:79:23:25:60:d7:
3e:f1:7e:34:de:01:b9:d5:e9:11:d8:5c:02:68:e0:06:2d:fd:
9e:90:d8:56:48:af:67:22:8d:4e:b7:7d:65:7f:90:d7:87:a1:
94:82:c2:30:9f:e9:ba:ec:ec:c6:21:e5:e3:93:3e:b3:60:2e:
60:af:ab:36:19:74:4f:b9:8d:28:89:94:e6:9a:0c:8d:ea:d9:
2b:09:6e:95:2f:a6:6e:c3:7e:60:08:67:1e:6d:e9:13:7a:e4:
ba:85:21:d1:4c:42:11:8c:6d:8a:b5:06:04:77:c3:23:33:ec:
50:9d:e7:43:0d:8f:9c:73:e3:bc:37:07:df:14:2d:9f:e5:d6:
98:87:c7:f1:67:21:7c:55:0c:e8:2b:ba:57:b0:64:73:fb:d2:
b4:71:20:f4:a5:12:64:f5:2f:d5:19:0b:69:a1:77:cd:0e:df:
14:9c:f7:24:fd:e8:f9:1b:2b:96:64:2e:99:c9:14:a0:85:36:
35:4f:ae:7e:c6:ea:37:4d:37:fa:9b:51:d3:30:07:5c:e5:b4:
ba:b2:f0:b0:7b:c2:aa:2f:ff:ca:40:3f:da:01:3d:94:d0:21:
fb:3b:27:1f:d6:04:68:8c:ed:c4:6f:bc:84:49:2f:75:4a:6f:
60:5f:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:31:18 2026 by rpki-client