
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier: G2pH3fBZO3JFTzZ0OJo6yrod10L1c5mI+sjY22aun10=
Subject key identifier: C8:54:43:8B:93:A3:A7:88:13:B7:34:08:D4:6C:C5:2C:6A:35:D7:D9
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 05B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number: 05A8
Signing time: Tue 12 May 2026 23:15:36 +0000
Manifest this update: Tue 12 May 2026 23:15:36 +0000
Manifest next update: Tue 19 May 2026 23:15:36 +0000
Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: KovpXUm4gUQFNZ4hReR4G5QJj0MG6ceTGSpmEyspaZI=)
2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: VPPi3dJeAt7qkytBiZVUgcwXbytIV2nTrZSwyU7H/iY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Validity
Not Before: May 12 23:15:36 2026 GMT
Not After : May 19 23:15:36 2026 GMT
Subject: CN=6a03b498-4378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:e1:6a:aa:1a:72:d0:cf:1e:f3:0f:38:cc:
2a:35:89:41:8c:bd:5a:5d:23:6c:96:71:08:6c:22:
f9:49:6f:e1:55:27:a2:ce:7a:42:db:35:ce:2b:4c:
2f:df:b3:b7:13:f4:59:2d:b8:eb:23:78:bb:4f:c0:
e3:6e:51:05:54:9c:45:88:08:f9:fc:b3:c1:09:1a:
57:b5:84:0a:ad:c5:9c:ad:a3:a8:49:e4:b1:f2:b3:
9d:eb:7a:e8:97:bb:e4:d9:50:9f:ef:ca:bd:59:cb:
79:89:ab:a3:a2:f5:fa:19:40:33:71:96:62:0f:4b:
23:36:df:4c:2c:70:75:92:ff:df:fc:da:05:71:e5:
66:4c:ed:68:e5:80:c0:77:f7:74:07:b0:71:7d:cc:
2d:19:04:8f:02:3d:55:e0:73:6e:ee:e9:1a:7c:17:
63:4a:70:4a:c2:7c:84:d9:99:f8:fd:84:ae:e9:6f:
3c:c9:bc:53:ee:04:6c:13:c6:84:20:9c:64:5f:8e:
5a:3c:08:71:03:49:bf:cd:52:4e:0f:25:cb:24:e6:
57:af:56:6d:5a:6f:b6:5d:36:2d:85:d9:b2:10:1c:
9d:70:33:e5:91:2b:5f:c6:87:ba:11:a0:f8:09:91:
95:38:c2:88:a7:5d:70:f9:f9:0a:66:41:7b:6f:ea:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:43:8B:93:A3:A7:88:13:B7:34:08:D4:6C:C5:2C:6A:35:D7:D9
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9a:0f:79:d9:fe:09:66:d9:90:48:9d:81:ab:fc:c3:aa:90:
52:10:7e:f6:0f:21:3b:3a:bc:54:48:65:ea:5d:cb:78:cc:95:
41:87:d3:0e:71:32:17:0a:8a:ec:6f:19:28:be:9f:60:32:4e:
85:97:7c:07:e1:6b:fb:84:59:5d:25:84:c2:ea:66:f7:a4:32:
bb:4c:f7:ca:b5:2b:9c:30:93:0f:1b:3a:06:24:f8:f4:0a:9f:
31:69:66:4b:79:0e:87:dd:5c:7d:69:66:2f:aa:7d:64:38:c9:
7d:b7:37:67:04:09:47:04:12:78:4c:f3:72:4a:63:59:66:7c:
39:62:a4:f7:3a:2d:30:e5:cc:28:3d:63:d9:83:8a:9b:af:1b:
ce:a5:e7:e2:03:78:ec:b1:f6:c2:6f:b3:f1:81:d4:24:63:5b:
31:dd:9e:7e:9a:b8:54:b8:84:b4:1a:a3:4d:70:44:62:1b:6c:
02:f9:df:ad:d1:fd:df:b0:b2:a8:9a:08:da:a1:08:8e:b5:f4:
bd:cd:38:91:ce:0b:51:f9:60:27:8d:6b:96:39:fe:67:ea:f3:
05:f4:29:67:c9:83:75:c1:09:00:a3:c3:2b:3b:92:26:b5:9a:
34:55:61:02:c3:b3:cf:5e:e6:ad:5b:a9:1b:87:e8:2f:2d:ab:
70:b1:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:30 2026 by rpki-client