
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json)
Hash identifier: q0NUzdaYe+hrjN0UchituyohunXZLwgjgUNbKOIGM+I=
Subject key identifier: 3D:81:74:CE:BD:F1:59:BD:E6:9B:9A:DB:16:2A:99:41:E2:F2:3E:61
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial: 0797
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
Manifest number: 0782
Signing time: Wed 28 Oct 2026 21:49:50 +0000
Manifest this update: Wed 28 Oct 2026 21:49:49 +0000
Manifest next update: Wed 04 Nov 2026 21:49:49 +0000
Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: Dg9/XToSy2mFhNy1W3LLSuYZ5ag6BAmjpm7rd1J4XNQ=)
2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: UCZT4HlQxE5/CxEJDXt/c4/8UOjUdEYG/b8XVIPU8ic=)
3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: DOXhX1leics2/OlA+16D6wHVTeejyQT2l+nsM3RKbHM=)
4: 2VzLu-saA4O38EKebJmmi6HIejc.asa (hash: FRfKj+Y27rZ38vsV8QEajHa2ffB4BqpfwdGj+2o59oA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 21:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Validity
Not Before: Oct 28 21:49:49 2026 GMT
Not After : Nov 4 21:49:49 2026 GMT
Subject: CN=6ae26dfe-9051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:6c:0b:79:2f:2a:e1:e5:73:a9:02:71:54:
8e:f5:c8:25:f0:e3:2e:aa:89:bb:bb:54:15:7d:00:
1d:81:40:44:ba:1e:ce:6d:98:a3:b8:0d:28:79:aa:
f9:12:60:07:13:67:c0:ed:f1:88:a0:51:60:f8:16:
1d:38:d1:37:07:f6:26:72:50:b9:fb:01:b9:e4:df:
62:b9:0a:17:f0:03:29:18:85:5b:55:fd:0d:f6:7e:
45:70:71:04:dd:90:29:94:c1:ab:99:12:ee:2a:f2:
46:d4:1c:65:15:b9:9a:cd:8b:98:87:6f:11:e0:a2:
27:f2:08:c7:0d:c6:0a:49:00:96:a7:21:b5:0e:45:
56:3f:ba:25:9e:d6:e6:25:e8:11:35:da:b6:2a:9b:
05:2a:a9:34:bf:aa:5d:86:93:e1:1f:1e:df:f4:81:
da:4c:4c:03:11:67:1a:fc:40:ff:93:ed:13:d4:0b:
45:2b:dc:90:7a:a7:06:8f:f4:e7:e1:b8:6e:ac:8f:
96:37:5c:72:e9:83:1f:37:52:75:d7:a4:7e:bf:01:
db:d0:94:46:dd:7d:1c:23:e1:50:db:23:67:ed:8c:
bc:ba:04:f3:90:ee:3e:db:33:6f:9c:bd:19:2b:5a:
c9:a1:df:06:5d:2d:b8:58:84:7a:cb:35:1e:7b:24:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:74:CE:BD:F1:59:BD:E6:9B:9A:DB:16:2A:99:41:E2:F2:3E:61
X509v3 Authority Key Identifier:
keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:1d:f4:87:9e:32:3f:c8:be:ab:71:b2:a1:9f:bb:00:3c:7d:
e2:71:a6:e6:ae:ca:1b:a5:5f:70:af:3d:52:20:80:da:b2:9a:
b9:60:5c:59:6c:4d:0f:e7:c4:2b:81:b9:dd:55:83:32:f1:fa:
d1:a7:14:a4:79:14:fd:dd:26:87:28:bb:c3:b1:81:80:fe:1b:
55:e3:c5:5c:e2:be:e8:65:73:fd:3d:1e:7c:00:32:52:5e:d6:
fb:74:58:76:8f:fc:51:65:3f:6c:46:e0:8a:b1:6e:32:09:0d:
59:4e:87:6c:20:c6:a7:06:0e:c8:fc:2e:e4:6d:20:b3:65:e5:
8a:75:f7:9c:e0:40:8b:16:75:b3:ad:3e:62:71:a4:02:67:3f:
5a:52:a2:d0:f9:5d:75:a8:42:cb:c8:07:b1:60:61:c9:4c:b9:
71:3a:fd:60:2f:05:2b:41:2d:ac:00:c8:68:22:e2:4f:e2:11:
87:7c:2d:60:f3:77:0f:a1:c0:c8:37:b6:e2:3d:c2:05:ee:80:
dd:14:97:1a:0e:96:32:d1:a7:21:3d:ff:d1:79:f1:dc:bd:fb:
cc:9d:81:0f:40:54:9d:a8:ae:04:ab:ec:67:9e:20:d3:4c:c6:
97:ee:9a:7e:d0:28:47:5f:2b:16:ce:e0:66:1b:03:46:69:fb:
d4:c3:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:14 2026 by rpki-client