
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier: 5HcCigK5Zm8oPOACS8ClzPmp/iW4AWbbm4Ii4yKLO1U=
Subject key identifier: 05:77:20:B2:5B:E8:21:59:83:3F:1D:FA:72:29:C3:F1:3E:A5:29:79
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0BCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number: 0BBE
Signing time: Sat 18 Apr 2026 18:52:51 +0000
Manifest this update: Sat 18 Apr 2026 18:52:50 +0000
Manifest next update: Sat 25 Apr 2026 18:52:50 +0000
Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: fPB+jt8QDv9WyMdybDMhtNGNoxIz4rbZxOaeAOlxv6U=)
2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Apr 18 18:52:50 2026 GMT
Not After : Apr 25 18:52:50 2026 GMT
Subject: CN=69e3d303-9635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ca:6d:0c:79:7e:3d:de:27:c2:bd:ed:8e:3a:
fe:9c:5b:7e:bb:7c:c9:00:93:06:39:1e:aa:cd:99:
99:ff:70:07:b1:1e:5e:67:e8:56:be:27:23:ee:9a:
81:35:c5:f4:1a:99:f0:a9:a9:b8:d5:fe:1b:25:c6:
af:c3:32:12:e9:fd:65:25:19:73:19:bd:a5:89:d2:
11:e5:f8:9d:bd:0a:74:64:15:7d:9a:4f:66:37:5a:
50:23:9c:f6:5f:c9:09:1c:ae:a6:d6:a0:f3:db:cf:
7b:74:d2:fd:1d:55:a8:a7:66:70:4a:f0:e8:32:b4:
cb:a1:a4:c9:6e:11:96:61:df:0c:7f:d4:0a:c5:ea:
32:2f:7a:da:8e:31:c6:b2:e3:d0:b9:7e:5f:8f:54:
18:e4:35:9b:fb:c8:bd:bf:ff:85:3a:ca:ef:b1:84:
05:29:23:87:ba:f1:d7:82:14:85:b3:03:f5:d8:d5:
5f:bd:39:a9:de:53:8d:55:98:f2:90:eb:03:ed:a7:
f8:ea:9f:db:01:c5:0a:ec:df:98:94:6a:54:41:7c:
d7:ff:58:07:7e:7a:4b:c3:8c:b9:10:42:4d:a3:c2:
ea:02:07:41:8c:fa:42:74:6a:03:17:1d:08:4f:59:
de:4d:d3:1c:91:0f:40:f6:5e:bb:63:f4:80:0e:3c:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:20:B2:5B:E8:21:59:83:3F:1D:FA:72:29:C3:F1:3E:A5:29:79
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:8e:7a:eb:ec:83:1b:56:59:80:2e:91:93:7f:67:c2:24:
5e:d6:fd:b5:ec:0c:a3:55:d8:59:d8:1e:e6:95:c2:99:0a:80:
39:e4:a8:bd:77:17:ad:64:06:68:ed:9e:bd:ba:55:ce:e1:32:
50:99:3a:b9:6a:62:95:6e:13:ac:47:14:95:1a:a9:0f:4b:98:
e0:7d:b6:d7:b4:d3:a1:cf:c0:17:28:1d:c9:43:81:30:5f:3a:
bc:c8:75:e0:fa:03:9a:1d:a0:ae:97:16:63:c8:b0:bc:75:86:
92:76:cb:4d:1a:c1:06:6e:f4:b3:c2:a6:99:cc:66:7b:80:1a:
d8:73:bf:7f:b5:58:22:cd:98:d5:99:3c:12:ec:94:11:60:5b:
82:53:e1:40:b8:8f:4e:6f:cd:c1:ec:33:72:7e:4b:80:a6:e4:
ab:1a:73:cf:7f:fe:fc:8d:90:0f:71:05:56:ae:0b:b1:b3:11:
09:84:c9:3c:d0:a9:da:5c:ea:52:83:02:e6:00:ca:39:cb:af:
0d:26:15:71:ae:1b:83:cf:d3:4d:7f:f8:50:ce:8d:32:81:b2:
31:1b:4e:67:b3:12:36:f8:42:09:51:8f:fd:13:92:d8:15:e5:
2f:f1:13:01:e7:2d:28:85:59:9b:93:41:63:43:c3:e2:45:38:
16:b7:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 21:37:54 2026 by rpki-client