
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier: Rkm/r7IbGhoXPDv7nDcdy6jlftlzqN5iQHHg5brfgQc=
Subject key identifier: A8:99:70:D1:C6:84:A5:A3:7D:AD:ED:71:19:D3:4A:80:1F:E9:31:98
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 07D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number: 07C0
Signing time: Tue 12 May 2026 21:29:55 +0000
Manifest this update: Tue 12 May 2026 21:29:55 +0000
Manifest next update: Tue 19 May 2026 21:29:55 +0000
Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: vSwEjY8Zh3HH67icv8zt/ljbeo57Ajan148glQuCNPs=)
2: 68894B22402811EB91B49250C4F9AE02.roa (hash: liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=)
3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: z+ZRB0bBSa8oaRsVRAkD/aqR3zkYjW0hmksq+X5D7QA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003 (0x7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: May 12 21:29:55 2026 GMT
Not After : May 19 21:29:55 2026 GMT
Subject: CN=6a039bd3-4092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:69:70:b5:12:e7:7b:d8:7d:6d:cb:e5:92:90:
82:a9:19:20:81:f2:f5:f5:ed:5c:a7:29:7e:52:c4:
9b:ba:da:d3:43:03:50:d9:e4:e5:01:0f:41:7b:17:
7d:c4:ae:88:e4:fc:9e:21:5c:7f:84:ca:d8:a4:e9:
3f:da:87:72:46:1b:d5:57:fc:81:4e:8c:8b:86:32:
f1:05:e2:0f:63:72:c0:60:4e:83:d7:30:22:26:ae:
c3:ce:56:51:75:12:70:1e:32:90:69:a0:56:49:7a:
94:54:66:fb:27:a0:e9:19:61:0d:de:77:8f:22:ca:
7e:07:7c:9b:f6:75:8c:11:2e:ab:91:36:99:93:42:
47:15:0f:e8:c7:0a:a0:ce:92:60:a1:04:dd:28:af:
6d:a8:41:ab:18:d0:60:cb:68:56:47:da:e6:51:1b:
7a:72:ba:a2:4c:c6:79:22:2e:e2:6c:47:33:87:df:
f7:9d:cd:d7:93:04:86:d4:b7:8b:b2:4b:44:50:fb:
0f:dd:bb:51:53:cf:24:17:3a:f4:a8:6a:3c:ed:0a:
6e:fa:a8:1b:44:91:5d:26:d1:54:75:9a:d4:54:7a:
68:1c:e2:06:f4:ad:7e:c3:3e:0f:6f:ec:e9:c4:2c:
15:26:22:6a:9f:d8:e3:5a:9c:d3:33:51:63:8e:22:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:70:D1:C6:84:A5:A3:7D:AD:ED:71:19:D3:4A:80:1F:E9:31:98
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:99:b0:8a:dd:2a:79:bc:b6:87:02:cf:c4:9b:eb:3f:ca:21:
69:cb:0a:64:2a:3c:15:dd:d2:7b:d7:a5:5a:f7:e8:83:40:ab:
f1:64:29:49:91:2b:21:ea:b7:7b:9e:de:70:db:fe:8a:55:39:
cd:a0:4f:cb:c3:b4:44:36:26:de:25:2c:1e:99:1a:dd:d1:e5:
ab:e9:9b:97:f3:5a:99:2b:0b:43:5d:18:b5:c0:34:b1:7d:06:
97:7c:90:cb:65:48:45:4a:d0:aa:d0:a6:68:bb:df:0f:da:54:
75:99:1c:ce:6d:8d:2e:01:0f:6c:09:3b:79:30:91:54:1e:e1:
f4:92:2a:36:23:57:4d:69:31:89:a2:45:64:6a:84:73:2b:e4:
3b:c5:6f:20:fa:d8:4b:82:97:e8:76:b6:37:22:97:ed:2f:0e:
27:24:02:e9:e4:e3:f3:5c:d5:fa:65:28:f5:c6:cc:5c:17:dd:
c2:ae:4d:04:48:2e:ba:d3:88:a9:53:42:37:e8:fd:25:7c:4e:
48:f0:bb:d1:a3:b8:bc:f7:78:73:79:47:be:f3:de:d8:63:23:
8e:06:d0:b7:eb:26:6e:67:83:18:33:c8:a3:00:80:69:70:9c:
96:ba:d2:80:d2:c2:92:73:94:f5:2d:f3:4d:64:77:bb:f3:05:
06:33:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:56 2026 by rpki-client