
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier: w1Qm+YkVvgm6xKxCpLGQ/8HkyeFUUYvB5rebHTM++d8=
Subject key identifier: DC:27:C9:92:9A:24:BA:D1:12:DD:19:9F:A1:D7:9B:73:4C:50:BA:AF
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number: C7
Signing time: Mon 01 Jun 2026 07:41:15 +0000
Manifest this update: Mon 01 Jun 2026 07:41:15 +0000
Manifest next update: Mon 08 Jun 2026 07:41:15 +0000
Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: pb1jZhqQheMXub/g0f6Zj9cMZ7hrD6BI5EXnXcOZQ7U=)
2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Validity
Not Before: Jun 1 07:41:15 2026 GMT
Not After : Jun 8 07:41:15 2026 GMT
Subject: CN=6a1d379b-2648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:86:8b:0d:ad:bf:f1:c2:3b:0e:6c:71:5f:
04:8b:2b:1a:ba:47:ea:5b:95:e4:87:96:08:78:74:
4d:8d:02:7c:32:2f:3d:52:fc:7b:e6:d8:de:37:53:
9b:03:b3:ae:e6:ad:1d:73:99:39:ea:b4:91:4b:52:
bb:9c:be:f2:45:15:35:59:64:b2:62:dd:73:ee:49:
ca:d5:14:75:90:c3:8e:32:41:71:d9:5f:ed:03:23:
1f:40:4b:66:be:0d:a2:1f:81:88:bc:f0:42:ea:fd:
52:d4:bb:3c:7e:c1:3a:6b:e2:51:c9:c8:68:ab:90:
90:3b:c5:cf:7d:82:32:e2:9f:7b:ab:c2:af:3e:e4:
ab:07:5e:b3:80:54:24:a1:45:e2:04:95:d1:1d:a5:
ab:4f:12:45:70:7b:6c:bb:59:e0:ca:f3:1c:ef:3f:
a9:9f:79:69:e3:5d:5e:55:c9:3a:be:d0:48:98:c1:
c5:ac:e7:02:37:1f:74:c2:2c:27:71:aa:b7:31:4d:
8e:28:97:89:2b:8a:5b:2a:b9:2e:b6:e6:a2:82:30:
bd:72:d4:ed:62:ec:9e:1b:dd:64:70:97:47:4b:2b:
27:38:3e:aa:30:6a:b2:99:0e:43:2a:d7:75:95:6e:
73:2a:1a:19:2a:2f:6a:13:44:eb:13:10:4a:2b:3c:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:C9:92:9A:24:BA:D1:12:DD:19:9F:A1:D7:9B:73:4C:50:BA:AF
X509v3 Authority Key Identifier:
keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:89:39:68:a2:67:70:a0:1c:08:f7:3c:59:41:5f:94:c6:
b7:a4:e1:44:c9:ed:fa:d7:9e:22:7a:00:bf:d7:65:5f:8d:ad:
5e:b1:6f:d9:ed:6c:d3:6e:f5:50:99:73:c0:10:dd:b8:a6:fa:
fa:81:a7:24:ae:f9:6e:fb:af:1c:d7:3d:09:c8:92:ba:75:77:
f4:23:8b:e0:49:bb:76:b0:cb:c7:72:77:56:4b:0d:f5:3a:dd:
05:15:18:15:dd:77:d4:14:f0:83:1f:20:d9:46:88:68:d9:4d:
68:44:3f:e6:4f:74:6c:34:99:ee:c4:7e:5f:7e:8c:bd:0c:0c:
3c:57:da:59:62:15:4e:de:28:0b:78:20:f5:94:b8:a4:63:fc:
5e:0e:32:e4:86:eb:75:dd:58:0c:93:7f:7c:51:e6:f9:99:cd:
19:a9:f4:b8:eb:4e:2b:60:79:8f:ce:f4:b2:47:88:fd:dc:b4:
bb:b3:7b:aa:78:69:70:6d:c2:7e:6e:47:b3:10:d2:88:34:2d:
84:cc:80:ef:96:ec:dd:1d:97:e5:f7:01:c4:70:f5:19:f0:a5:
8a:61:5f:1e:47:19:ec:28:de:73:23:8b:16:fd:80:a3:9b:19:
08:df:e4:1e:ec:a0:d7:79:0f:e1:83:c8:ab:72:64:d6:79:63:
29:36:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:14 2026 by rpki-client