
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier: n6kph6XspvwztRTR+n7z6WAAECRuXfvDXy9+SV3sQSU=
Subject key identifier: DF:CA:61:E7:9C:59:71:EB:4D:E4:A5:39:A1:8E:1A:63:C9:0D:7C:A9
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 0597
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number: 058F
Signing time: Tue 24 Mar 2026 22:55:35 +0000
Manifest this update: Tue 24 Mar 2026 22:55:34 +0000
Manifest next update: Tue 31 Mar 2026 22:55:34 +0000
Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: 4dwrR6arx9Jtr0VRGrrdU5KzjwViFeCkvurGDguYCwU=)
2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: VPPi3dJeAt7qkytBiZVUgcwXbytIV2nTrZSwyU7H/iY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Validity
Not Before: Mar 24 22:55:34 2026 GMT
Not After : Mar 31 22:55:34 2026 GMT
Subject: CN=69c31667-bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:67:b8:ea:1b:e9:11:2c:a1:fa:db:3a:d4:
44:c6:a1:22:08:57:79:72:1f:e9:47:63:bc:eb:67:
25:42:a0:7e:c9:de:7d:56:15:15:92:96:de:0d:c7:
ef:0d:20:26:e7:aa:f4:2f:dd:98:45:d3:34:e4:8a:
75:92:dd:f7:6d:47:ee:59:0d:2e:84:4e:0a:7c:bb:
ac:af:3a:00:58:72:f6:d6:3a:b1:51:7f:4e:41:42:
ca:b9:28:6a:6b:6c:33:d3:3d:d9:67:6c:f7:e4:89:
6e:e9:f0:a3:54:3f:6b:a0:15:0d:c0:aa:46:02:9b:
d5:d4:4e:81:49:7d:2a:7b:12:4c:2d:e8:00:56:0b:
94:f5:be:46:7c:8c:86:67:f2:b7:cb:0b:44:92:0f:
c2:46:65:e6:d9:75:ef:50:8b:6f:e0:01:22:0a:71:
0a:b2:77:e3:a3:7c:e1:65:0d:c1:ea:05:47:af:88:
36:1f:d7:75:05:0d:46:3d:02:4e:89:2d:40:89:a5:
97:52:e3:1b:91:cc:0d:fe:b4:2d:c5:ff:3b:4f:f4:
be:ac:d9:6f:29:96:88:a0:64:c4:05:1f:1d:9d:77:
11:0a:25:e2:d2:81:85:2a:e4:fa:02:f2:b1:3a:d8:
33:68:ce:ca:6c:62:db:3d:0b:f8:dc:75:75:b0:c3:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:61:E7:9C:59:71:EB:4D:E4:A5:39:A1:8E:1A:63:C9:0D:7C:A9
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a9:6d:3c:5c:05:03:0e:df:ef:46:46:6c:d8:47:13:ca:82:
15:a6:f9:9b:42:24:6f:38:f0:50:5f:d6:ab:e5:39:df:71:ba:
9e:2e:2b:80:85:ea:7d:68:da:76:e0:26:5a:4f:29:43:a0:13:
e8:05:98:cb:18:47:92:f3:53:e4:f8:61:d2:0b:f6:66:90:5d:
c8:4a:56:32:7e:cb:d8:79:dd:f1:12:d6:f8:b9:ac:49:bd:1a:
6f:08:7e:dd:55:48:6b:5c:75:ab:bf:77:04:16:fd:21:1d:a6:
6d:ba:4b:53:dc:6d:c2:85:29:1f:b3:10:54:71:dd:18:5a:34:
e0:64:77:37:b5:d1:97:05:c6:a9:98:17:00:5f:06:94:45:0e:
65:ed:c2:d9:0d:cc:28:e2:78:8a:ad:69:e2:a6:98:c9:d7:71:
e4:57:06:86:14:f4:07:96:73:55:34:66:95:ce:b5:5f:70:15:
24:50:a8:6d:38:4a:52:c6:4c:99:e7:d6:fd:24:b3:0f:15:fa:
3b:6c:cf:32:33:af:37:11:51:56:0a:7c:d9:3c:98:74:ad:47:
1e:4f:4c:e4:80:52:9f:88:33:d3:49:52:f4:ef:8d:dd:22:64:
d6:23:32:91:3c:b9:58:99:b6:6b:dc:8e:a2:4b:5f:08:b4:5f:
bb:15:9a:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2
M0QxNkVENUYwHhcNMjYwMzI0MjI1NTM0WhcNMjYwMzMxMjI1NTM0WjAYMRYwFAYD
VQQDEw02OWMzMTY2Ny1iZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfFnuOob6REsofrbOtRExqEiCFd5ch/pR2O862clQqB+yd59VhUVkpbeDcfv
DSAm56r0L92YRdM05Ip1kt33bUfuWQ0uhE4KfLusrzoAWHL21jqxUX9OQULKuShq
a2wz0z3ZZ2z35Ilu6fCjVD9roBUNwKpGApvV1E6BSX0qexJMLegAVguU9b5GfIyG
Z/K3ywtEkg/CRmXm2XXvUItv4AEiCnEKsnfjo3zhZQ3B6gVHr4g2H9d1BQ1GPQJO
iS1AiaWXUuMbkcwN/rQtxf87T/S+rNlvKZaIoGTEBR8dnXcRCiXi0oGFKuT6AvKx
OtgzaM7KbGLbPQv43HV1sMO1GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/KYeec
WXHrTeSlOaGOGmPJDXypMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz
MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM
ZGpyVllaa3JBOUZqMFc3VjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkqltPFwFAw7f70ZGbNhHE8qCFab5m0IkbzjwUF/Wq+U533G6ni4rgIXqfWja
duAmWk8pQ6AT6AWYyxhHkvNT5Phh0gv2ZpBdyEpWMn7L2Hnd8RLW+LmsSb0abwh+
3VVIa1x1q793BBb9IR2mbbpLU9xtwoUpH7MQVHHdGFo04GR3N7XRlwXGqZgXAF8G
lEUOZe3C2Q3MKOJ4iq1p4qaYyddx5FcGhhT0B5ZzVTRmlc61X3AVJFCobThKUsZM
mefW/SSzDxX6O2zPMjOvNxFRVgp82TyYdK1HHk9M5IBSn4gz00lS9O+N3SJk1iMy
kTy5WJm2a9yOoktfCLRfuxWacQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:41 2026 by rpki-client