
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier: wnwiGrIw1wtJ8fpte6pFlDSnpiTe/9AEgJ6mCs1o1aA=
Subject key identifier: 90:A3:85:2A:92:E1:FB:DE:AE:75:56:BE:A7:5D:E2:03:38:9F:7C:F5
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number: 0144
Signing time: Mon 11 May 2026 05:20:56 +0000
Manifest this update: Mon 11 May 2026 05:20:56 +0000
Manifest next update: Mon 18 May 2026 05:20:56 +0000
Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: +cvt1NK/11WUHlnI1iI7ZfpBN5jlXVcicu738MAorW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Validity
Not Before: May 11 05:20:56 2026 GMT
Not After : May 18 05:20:56 2026 GMT
Subject: CN=6a016738-a253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:8d:97:a4:0b:ab:eb:1f:b0:ce:7b:6e:38:
ba:39:a8:e6:b2:3a:70:9f:41:1f:4e:0d:af:51:58:
f2:62:33:64:49:cb:da:38:30:bc:1b:45:9e:e3:13:
fc:4c:bb:8c:a4:a6:60:61:f4:95:0a:f1:df:9f:84:
0a:85:5e:fa:31:b7:60:07:d0:e8:24:99:a3:1b:64:
3f:41:3d:a2:b8:83:b2:b2:9d:53:e5:74:52:e2:35:
da:07:a0:26:b1:de:b9:68:15:2a:8f:1b:6c:96:21:
ec:69:79:d4:6f:b2:0c:c2:82:3b:63:c1:8d:e4:6e:
71:03:17:63:0e:85:74:51:4c:8d:b5:c3:89:17:56:
85:51:9f:54:98:c8:1f:1c:23:f2:03:76:b7:b3:99:
f8:de:8f:57:d1:cc:05:8c:8e:bf:69:d7:42:d8:e6:
4c:dd:fb:e3:14:52:fd:0e:e7:34:71:5a:32:e1:3a:
8d:3c:74:b9:de:7e:ba:b4:25:7d:fd:7b:86:c0:37:
ea:03:2b:11:20:a7:d4:ad:cf:92:6d:4f:3d:3a:b4:
6c:17:f1:71:a6:e0:6b:21:16:7e:dc:8b:5a:d5:c5:
0f:cd:ed:f4:e3:81:5e:1a:8f:85:d8:27:dd:ec:53:
c5:ae:e2:64:fe:d3:11:c7:da:ff:d1:c7:4e:90:ad:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:85:2A:92:E1:FB:DE:AE:75:56:BE:A7:5D:E2:03:38:9F:7C:F5
X509v3 Authority Key Identifier:
keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:94:65:ec:0c:26:40:a3:fb:38:68:36:ea:c0:f5:0e:f7:
84:30:e0:72:fd:0d:4d:48:d2:8f:3a:c8:d8:8f:1f:67:85:a9:
3f:7a:fb:0d:34:d6:62:3f:d3:f8:8b:ee:ce:20:62:d9:7c:4c:
33:1c:ac:b5:78:0d:a4:07:4b:02:93:93:2c:61:d4:87:74:e4:
91:87:90:7d:c2:4e:b8:82:55:16:ba:a3:ce:e8:91:15:78:9f:
6b:19:d0:02:82:4a:42:43:0b:10:3c:d1:a9:e3:53:97:ff:b7:
dc:35:8e:0f:6f:f3:f4:fe:24:37:a1:99:f5:4d:4d:af:c3:94:
8b:be:e9:2e:a7:e3:05:7f:ba:90:5b:e5:70:bb:5e:05:b6:19:
57:83:e0:29:e4:6f:57:61:f7:9b:5b:c0:0f:f2:57:53:51:c7:
0b:0d:7d:44:51:09:3b:99:cf:76:b6:25:c6:8a:43:e4:96:be:
9b:a2:e5:c2:bb:48:56:48:77:b9:04:d4:d7:fc:8b:36:bc:ec:
8f:74:2f:a7:49:71:dd:c2:a2:ad:7c:34:ff:6d:10:d9:87:93:
d6:fa:12:f7:6b:f4:e2:4e:31:6f:d6:9d:1a:60:69:a8:50:8b:
a2:53:6c:36:cd:0c:74:af:72:2b:63:84:fe:36:77:c2:53:e1:
a1:fd:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:53 2026 by rpki-client