
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json)
Hash identifier: O6YnE5UIDCNQXQAsH65bZg3+m2WN8gqxksDcMnS6CQI=
Subject key identifier: E6:ED:09:CB:58:C5:06:0E:A7:C3:64:79:81:A7:4E:28:A6:C9:4E:D3
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
Manifest number: 0C26
Signing time: Tue 06 Oct 2026 19:32:50 +0000
Manifest this update: Tue 06 Oct 2026 19:32:49 +0000
Manifest next update: Tue 13 Oct 2026 19:32:49 +0000
Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: WCSU83UIW52VbxDazb6rlYsokYQ0Kf4tGzdL+l0ve2I=)
2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Validity
Not Before: Oct 6 19:32:49 2026 GMT
Not After : Oct 13 19:32:49 2026 GMT
Subject: CN=6ac54ce2-b949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:a1:16:48:f0:eb:eb:19:36:64:d4:f0:0a:
c2:86:18:2a:74:b3:39:5b:e5:78:95:d3:91:d5:d5:
51:73:84:69:d2:b8:0a:8c:b9:0b:3d:63:b7:84:79:
9f:0d:9c:59:70:86:3d:22:00:a8:e9:6c:cd:a3:b3:
0f:40:e8:b3:6b:78:68:25:f9:d7:63:4b:23:0a:aa:
7d:a4:e8:ce:db:ac:b6:38:aa:59:39:ca:86:52:09:
bc:1a:02:f5:29:d5:7e:be:3b:dd:7c:1d:21:41:55:
9e:97:d8:9a:95:5e:3c:d3:e5:e7:77:82:07:3a:1b:
de:b2:21:ca:5c:bf:aa:86:bc:38:e2:aa:57:d0:2d:
78:7e:04:b1:c3:3b:7c:c5:88:cd:32:1a:74:0c:36:
1e:eb:01:58:70:04:59:4e:66:32:a3:9d:74:25:7e:
45:72:6c:76:e4:58:ba:35:42:da:87:93:06:2f:9d:
27:7b:51:9a:35:0e:df:be:dc:ff:69:1b:f3:15:aa:
55:8c:59:eb:f5:5a:a3:7a:de:a6:df:54:9b:a4:cb:
45:5a:cb:0e:9f:50:96:77:76:c5:71:77:a8:b1:cf:
22:58:1a:6b:47:66:66:c3:07:d7:99:b3:0e:8a:00:
8f:4b:a8:e2:c1:c6:43:13:77:1e:c0:47:15:5b:a9:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:09:CB:58:C5:06:0E:A7:C3:64:79:81:A7:4E:28:A6:C9:4E:D3
X509v3 Authority Key Identifier:
keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:55:81:e5:9b:1d:52:da:37:33:1f:52:1a:d1:62:ae:12:
a3:50:3e:3e:41:ca:f4:96:99:62:0c:fe:18:14:34:0c:68:8b:
4e:ea:09:10:83:38:82:66:07:fc:0e:9e:06:49:14:d6:fe:61:
38:7f:37:6d:17:dd:e7:3a:34:9c:24:34:d5:4c:0b:05:67:ed:
23:98:35:b2:8c:ce:36:91:72:f8:fd:ea:f4:bc:13:17:c4:9b:
86:92:63:2d:88:af:3d:e6:c4:d8:92:ac:cb:1d:22:cc:b7:ca:
c0:5d:44:f7:d3:20:7d:87:82:03:5f:d2:1c:e9:94:2d:1c:3c:
6d:d8:78:14:45:6c:9c:db:1c:90:1b:81:dd:58:77:0f:b6:09:
72:2c:4f:53:b3:03:ff:bc:7b:e3:e6:4f:be:cb:af:af:6e:e4:
3c:26:c5:1e:8f:e8:34:64:f9:a3:aa:13:b1:a9:23:c9:09:b5:
d2:81:da:94:91:8f:46:f6:e2:97:9c:b7:a5:d3:ef:80:8f:30:
e9:d2:43:53:a6:8c:c3:08:9b:a8:a3:db:82:ae:0c:3c:5f:13:
33:7b:25:ff:2e:c1:6d:77:4d:f2:dd:44:c5:19:be:3f:05:0e:
1c:ab:5b:2f:fd:dd:8c:94:83:99:e0:e9:27:c0:3c:c0:95:30:
1b:fb:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:11 2026 by rpki-client