
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier: 1fvrW53DNaz0YpeD6ULdPxCk7cTUvC/7a5lsVMZq9k4=
Subject key identifier: CC:07:C2:F8:65:B8:BE:33:BF:08:49:44:10:67:BD:4D:A2:EA:FD:03
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number: 02B7
Signing time: Mon 01 Jun 2026 02:10:12 +0000
Manifest this update: Mon 01 Jun 2026 02:10:12 +0000
Manifest next update: Mon 08 Jun 2026 02:10:12 +0000
Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: GAvlieYe9M1N1ugT1JZb67oVcCIb7OMVKO2JuQE0jZY=)
2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Validity
Not Before: Jun 1 02:10:12 2026 GMT
Not After : Jun 8 02:10:12 2026 GMT
Subject: CN=6a1cea04-c93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:9f:5b:55:17:de:8c:15:c3:d1:80:52:8c:
bb:18:d7:64:cc:05:8e:d7:fc:73:e2:4b:75:54:31:
7a:f1:3d:a7:d5:b7:8d:01:95:de:22:7f:a8:ab:a1:
64:89:39:25:85:ae:de:2d:86:dc:92:d3:7d:c0:aa:
01:3e:25:5c:a9:8f:f7:7c:4f:dd:e8:fd:f1:79:b9:
27:25:30:2e:a3:ab:e0:c0:55:3b:44:6e:88:a7:2a:
b1:ce:95:9b:4f:70:c5:1c:fc:23:23:c2:32:37:1d:
69:ca:2d:9f:ff:31:a7:c7:53:86:59:83:d3:50:66:
8f:36:09:91:ce:28:b2:78:8a:31:ba:8d:0f:44:6e:
19:2c:00:96:d4:ae:3c:05:b5:30:75:80:4c:39:f9:
0e:b6:ed:2a:9f:57:ba:07:4a:65:fe:bc:82:27:c2:
c8:fa:8d:bf:df:85:cf:86:d4:9c:41:86:b8:76:22:
d9:c9:2a:41:d7:ea:a7:a7:be:60:bd:a3:26:08:d4:
89:90:bc:39:fc:cc:d7:32:49:43:86:b4:98:0a:d7:
03:48:9f:48:e3:76:84:67:39:9d:d5:ba:8c:b0:f7:
bc:d5:fc:fc:d6:58:e6:b1:8b:a5:1b:89:7c:9a:15:
c6:30:b1:f2:99:3d:40:19:fc:e8:66:9b:58:fb:de:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:C2:F8:65:B8:BE:33:BF:08:49:44:10:67:BD:4D:A2:EA:FD:03
X509v3 Authority Key Identifier:
keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:df:79:5d:1c:39:f3:92:0f:56:33:43:21:01:fb:d3:42:
8c:62:a6:0f:8c:e3:35:fb:b1:cf:5e:08:a0:51:b4:ee:22:66:
b1:fd:b4:d2:ba:0b:40:84:ed:c4:11:2a:d5:f1:9a:1f:71:4f:
ce:35:0e:6e:c4:21:91:01:58:c1:dc:7d:44:a3:49:93:f7:27:
36:f4:8b:e1:ba:1a:8c:e8:46:28:6c:46:c3:26:50:15:4b:2a:
58:bf:5c:e1:6a:86:5b:27:6c:55:36:e4:be:2b:0a:17:26:d4:
c1:80:a1:d6:6d:22:be:98:eb:97:fb:26:a1:9f:ca:c2:4d:5d:
2e:50:b7:cc:97:51:91:c3:f7:6a:c3:11:eb:5b:86:44:66:5f:
88:b5:86:db:67:11:fa:9c:34:9c:56:50:c5:c2:13:a9:72:9d:
c7:44:26:05:91:7d:ba:b6:51:24:a9:e6:ba:c1:0f:ff:fa:98:
bc:fc:7c:fa:4f:3f:fb:fe:a2:da:33:ea:de:2f:91:d5:b8:a5:
c4:91:0c:a0:1f:0a:19:72:02:6a:75:d0:aa:15:f4:64:26:0e:
8b:0f:5e:a3:fc:26:cf:4d:55:69:41:34:80:f0:b6:76:2d:fa:
49:cd:91:3a:cd:7c:43:68:71:ed:19:f3:0a:a6:d7:5d:9a:1e:
01:01:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:00 2026 by rpki-client