
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier: DJI1CA7JTSR50+O1okImO7m5igKPE8CQq3cN6bf8O8k=
Subject key identifier: 5D:27:64:37:0B:BE:D0:26:D2:0B:60:F1:38:2E:25:2E:1D:AE:8F:77
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 05D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number: 05CE
Signing time: Wed 22 Jul 2026 23:48:32 +0000
Manifest this update: Wed 22 Jul 2026 23:48:32 +0000
Manifest next update: Wed 29 Jul 2026 23:48:32 +0000
Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: IHpmHgQCNcGRYcc+bwxqRLkE/RtRSwEDkruOyWNmSdA=)
2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rpeucbwRthNChjV1mTa6b5UV/jF0VBkI5SXoALE4F0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Validity
Not Before: Jul 22 23:48:32 2026 GMT
Not After : Jul 29 23:48:32 2026 GMT
Subject: CN=6a6156d0-2f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:21:82:9b:26:0a:32:56:1c:e6:6c:92:cb:
44:a6:1a:e4:08:c7:1f:73:45:35:98:12:6a:d7:5b:
24:cd:8a:7d:2a:b0:12:ad:e4:6a:0f:a1:b3:a3:d0:
cf:26:c7:6a:2a:ae:82:04:58:a0:e9:a6:f5:bc:22:
bd:07:c7:67:e5:6e:dd:f7:06:fd:5c:5b:f3:02:77:
f5:d6:88:84:ea:7a:00:d3:a9:c2:0e:07:cd:99:df:
23:2d:45:ed:bc:11:ab:de:04:5b:60:df:9f:cc:a9:
3b:bf:ef:4f:5e:fc:78:03:16:1c:6a:31:01:d9:b9:
f0:d1:3b:39:5b:22:99:1d:da:e0:b6:59:77:8f:38:
0d:4b:51:50:7c:c9:84:6d:e1:9c:bb:1b:35:ab:7a:
f0:7c:18:01:d6:ed:47:bd:75:87:05:00:b4:21:66:
d2:72:f2:f3:5f:26:15:f3:90:e3:82:f4:a2:14:cc:
8b:d8:c7:37:0f:d8:ec:b2:74:12:f3:82:0a:db:3f:
33:41:09:d6:73:9f:79:c1:f3:e4:71:4a:68:6a:07:
02:fd:60:dc:b7:e5:06:78:5a:81:06:bb:89:c9:9b:
03:f7:df:4e:6d:79:a8:57:3f:d4:23:6c:01:04:b0:
d6:31:e8:f9:5a:b7:48:18:d8:6c:50:71:98:f3:57:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:64:37:0B:BE:D0:26:D2:0B:60:F1:38:2E:25:2E:1D:AE:8F:77
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:18:8b:f6:35:aa:80:33:70:cd:42:ee:39:8a:41:72:be:22:
9d:8f:dc:ac:4c:80:f6:e9:68:3d:33:52:45:41:79:3f:a0:55:
5d:19:25:40:5e:d4:53:d0:9d:cc:79:bb:f0:69:6e:62:38:73:
eb:2a:96:3c:e3:05:96:6c:06:b7:14:41:a2:18:8d:1a:f5:d2:
34:08:ef:b8:2f:89:f5:c2:53:45:50:0f:19:c2:60:5e:a8:87:
84:7f:aa:1c:8a:49:b6:e0:ff:13:b5:3f:d2:02:03:2f:42:6e:
fe:59:79:65:f4:2f:62:99:ed:3f:19:f8:a0:7c:c9:f3:0a:0f:
d1:70:f7:6e:23:ab:e5:12:1d:17:b7:03:f1:f2:78:d4:e3:44:
5d:93:a8:56:fb:9f:f4:38:31:5f:76:86:c9:0c:8f:20:64:19:
5c:e0:d8:17:dd:55:9d:1f:f8:c4:7f:f4:67:b6:b5:43:35:42:
a7:db:8c:17:6a:ea:6c:96:92:a3:f2:ac:fe:c7:4e:62:5a:2c:
00:69:10:b4:4d:63:1e:54:d4:82:63:6f:70:5c:0c:ce:b2:33:
0e:b0:80:68:69:ae:64:8e:6c:32:a5:f3:37:d1:a2:3f:48:b9:
35:7b:02:3f:03:06:f7:fd:01:84:5b:a2:47:0a:3a:6b:0f:a5:
a3:22:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:42 2026 by rpki-client