
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier: xnItXJZ/osSB+JeIK+vPb4DlZrSG0AyYoLV6JlGDYmw=
Subject key identifier: 98:0E:BE:CB:C6:D5:9D:84:3D:40:A2:3B:58:D0:8B:D4:9D:57:F1:55
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number: 0A00
Signing time: Tue 18 Aug 2026 20:42:45 +0000
Manifest this update: Tue 18 Aug 2026 20:42:44 +0000
Manifest next update: Tue 25 Aug 2026 20:42:44 +0000
Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: ICylScBc3VBVebHbUfnpHSTF/JoF/LnUw7iNbhRRuJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Validity
Not Before: Aug 18 20:42:44 2026 GMT
Not After : Aug 25 20:42:44 2026 GMT
Subject: CN=6a84c3c5-e944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:37:e2:9a:26:fa:39:f2:78:e7:b2:e5:0c:
33:f3:42:ed:37:0c:22:d0:43:75:4e:29:ab:a0:7b:
b8:d1:1e:4c:b9:73:c3:3c:fe:ee:de:8b:10:93:6e:
f7:71:25:9a:f8:54:9e:a1:25:f1:86:e4:fc:9a:84:
86:67:fd:84:a7:3e:09:16:a7:9f:a5:49:5d:b4:b6:
be:a6:16:5c:89:13:4f:55:bb:40:41:ad:e4:1f:f3:
0c:f2:2a:04:af:74:4e:7f:a2:f5:e3:52:f5:0f:41:
d6:6b:9b:fd:61:10:41:3f:75:31:ff:19:d4:36:af:
a6:97:a8:5b:9b:4c:e9:9f:e2:87:ab:30:8b:82:63:
36:36:2b:ab:68:02:a2:d2:3c:23:79:9e:90:68:a5:
66:af:4d:d7:87:c8:a2:c8:1d:38:6f:49:42:b7:ee:
f6:ef:ad:bb:29:ec:49:4b:3e:90:52:25:44:9a:34:
22:81:e0:59:48:18:60:51:5e:3c:17:30:5e:1d:e7:
a1:a1:da:00:12:1b:fb:37:34:3b:be:fe:a5:8d:f3:
46:0f:6e:9c:06:a6:b4:37:32:ac:67:d9:1b:27:37:
40:a9:b3:8e:f4:e0:01:64:00:0b:0c:2c:b0:ec:a3:
46:a6:0a:33:ed:4c:56:19:e9:40:f0:d8:9f:b4:6c:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:BE:CB:C6:D5:9D:84:3D:40:A2:3B:58:D0:8B:D4:9D:57:F1:55
X509v3 Authority Key Identifier:
keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6a:f1:63:7c:07:c7:29:0c:77:81:42:0a:11:8d:97:17:63:
66:99:46:70:bd:ae:b4:fc:43:3a:c5:8d:93:1f:25:7c:4f:33:
44:17:0f:23:7b:96:a7:c0:55:d8:2a:9b:da:7a:91:8e:f1:7f:
d2:e5:b2:34:b8:be:b1:34:97:40:d2:02:0c:06:5d:3a:fb:01:
36:d6:42:c0:50:a6:ac:56:36:44:cb:8f:61:8b:b2:b6:a7:90:
ea:4b:6f:00:36:ff:13:77:76:ac:79:66:c8:0b:f9:19:f4:22:
6d:bc:e3:59:e5:a3:72:20:39:42:de:be:78:38:97:e9:b2:31:
3e:ee:d2:b9:99:9f:e7:63:66:d9:8f:2a:22:f1:f1:7f:af:c2:
e4:48:f4:3f:54:1f:b8:ac:da:83:24:99:39:a0:dd:6d:97:21:
52:69:90:79:78:00:b9:8b:bf:b9:f0:0f:4d:13:e4:2f:7d:dd:
e4:ed:da:03:b8:e7:bd:f9:c3:0d:13:25:9a:e6:03:b3:14:96:
25:0a:c2:3a:59:14:c4:4c:f0:e2:4f:01:74:57:0b:e6:90:aa:
d7:da:ab:c6:de:a1:f9:28:8e:58:b4:04:97:56:41:1d:fe:c0:
7d:fc:85:3d:0d:e0:1d:44:51:35:c4:35:19:56:96:9d:28:c7:
90:40:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:21 2026 by rpki-client