
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json)
Hash identifier: TKvywRIAQjDxG2bvOzbDnsINjo855WquV8dkvQjmn7Q=
Subject key identifier: 9F:03:1D:F5:E8:4E:80:12:CD:77:35:85:96:80:46:14:88:70:67:99
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
Manifest number: C2
Signing time: Mon 11 May 2026 07:00:58 +0000
Manifest this update: Mon 11 May 2026 07:00:58 +0000
Manifest next update: Mon 18 May 2026 07:00:58 +0000
Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: NcNaMoIIf4e1DPRzyRdoPv+W8pas56Re1ubB93Ogo6Q=)
2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Validity
Not Before: May 11 07:00:58 2026 GMT
Not After : May 18 07:00:58 2026 GMT
Subject: CN=6a017eaa-4e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:75:ac:66:71:31:77:77:a3:ac:57:f4:bd:
4b:e7:67:8d:f4:d6:1c:d7:9d:bf:dc:3e:af:07:60:
2c:34:0c:5d:ae:22:c7:3a:c3:e5:18:0d:fc:90:b6:
37:a0:5d:68:e2:ae:a2:09:a6:41:5b:43:84:6a:4b:
83:c5:1d:1d:84:10:c4:53:d3:e8:69:06:c7:d5:c0:
11:2f:6e:24:5a:aa:a7:eb:7e:4b:96:a2:b7:c1:d2:
06:f9:90:2f:96:f6:0a:21:d4:7b:e9:70:5e:7b:f3:
53:a7:f4:c3:61:62:38:13:a4:72:b1:cc:bc:6e:85:
cb:b4:a9:23:49:74:59:a1:f9:c4:45:33:38:36:e3:
08:4e:58:af:c5:bc:d4:d6:fe:88:73:6d:35:ae:78:
42:cd:7c:a2:c1:f7:46:f8:30:c3:5e:a9:9b:c1:8b:
c5:50:b9:ad:07:6a:2f:b1:1b:21:0f:3a:fc:33:74:
18:40:d6:3a:d9:24:bf:c3:56:a5:53:32:a9:35:25:
eb:6a:d8:4b:06:e5:5f:26:26:0a:94:a9:ee:dc:9a:
fb:8d:05:4a:88:91:6f:3d:fe:db:e0:0f:c8:43:50:
fe:82:7b:8b:58:d9:f6:a8:04:c3:92:2d:cb:13:97:
12:38:1c:f6:38:f3:29:87:4d:4b:ba:e7:09:1e:46:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:1D:F5:E8:4E:80:12:CD:77:35:85:96:80:46:14:88:70:67:99
X509v3 Authority Key Identifier:
keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:a7:49:d2:c7:d1:27:2b:36:b3:39:e1:78:4d:c6:4c:0a:
91:bd:03:e6:25:6b:5b:c5:14:70:e9:5d:43:35:b6:06:9c:b2:
3d:bc:82:1e:7a:7d:3d:66:62:ab:aa:f6:3a:75:3b:c4:08:85:
c0:58:9d:6e:d0:d4:20:ba:be:22:e0:93:2b:59:4e:4b:b9:8f:
8b:5e:c0:b5:c6:1b:4e:bc:b2:80:67:0a:0c:9d:ca:cc:19:ba:
31:68:ac:9a:84:38:84:d1:0f:a2:b4:be:89:34:eb:b4:71:92:
b1:0a:72:bb:b5:3d:35:6a:a0:30:5c:af:ef:13:2c:cb:ba:32:
a7:4a:22:d2:eb:e5:2b:7d:06:f3:89:66:06:eb:29:07:9b:21:
9e:0c:8f:a3:0f:9d:bc:9c:46:eb:1a:62:40:b1:a5:6a:af:4f:
d5:b9:84:d8:c9:6c:66:f2:97:8e:a6:27:4f:d8:7c:1e:6d:09:
eb:5c:ea:0b:1a:5f:2d:37:cb:bb:28:17:9e:85:6c:23:8b:ef:
85:d1:e8:d3:06:36:77:0d:7d:e2:ed:1b:e9:54:58:21:af:49:
0b:49:4f:b3:c7:22:46:22:af:d9:7c:a0:d5:c1:ac:67:9c:51:
b7:53:c4:3e:b0:41:6f:e1:6d:77:26:0e:0b:04:7c:44:48:d6:
f3:28:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:02 2026 by rpki-client