
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier: TKgvqw5+e0daf6Kewfvq43KdFaaZw/bRRurv2Z+hGvo=
Subject key identifier: 1B:45:8B:EC:07:30:8E:59:8F:D9:FD:DB:69:29:51:F8:38:84:91:7E
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 35A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number: 3569
Signing time: Tue 12 May 2026 14:39:04 +0000
Manifest this update: Tue 12 May 2026 14:39:04 +0000
Manifest next update: Tue 19 May 2026 14:39:04 +0000
Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: ItyyFhWUMr3qmhwq15WHcIiRpcUyNJAD2/+d5VVTeIw=)
2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
3: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=)
4: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13729 (0x35a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: May 12 14:39:04 2026 GMT
Not After : May 19 14:39:04 2026 GMT
Subject: CN=6a033b88-f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:63:db:1f:57:ea:a9:57:69:51:12:ea:47:
88:bd:f7:8a:b9:3c:26:b2:ba:af:0f:58:27:10:3e:
2b:03:e7:11:b6:25:82:55:33:8d:ff:ab:b6:61:37:
bf:a9:a8:64:27:12:0d:ff:60:ee:36:a0:ed:ec:b6:
ad:5b:07:ed:73:d8:73:56:1e:58:e7:85:ec:e7:ea:
43:84:b2:5f:a0:27:5d:0d:f0:c6:1c:3f:93:e8:e1:
ea:e8:51:fa:20:a5:f2:8a:53:11:d1:5f:21:53:98:
b0:4b:f0:b1:8a:3a:91:8c:f6:d9:bb:dc:2b:d8:6b:
00:51:cf:c4:72:57:a8:53:cf:d2:94:49:81:59:41:
2d:5f:41:93:3c:d5:f6:a8:0c:02:bf:7a:44:62:6b:
2f:2f:e5:9d:1d:1b:52:2d:0a:1d:c2:82:39:c7:26:
25:e9:05:79:c6:fc:e3:f6:98:47:ab:f9:51:4b:8a:
15:2b:cf:a4:1e:50:92:2c:02:93:11:73:c2:e4:5a:
65:a0:d6:5b:a6:33:88:57:cd:3d:f4:e4:0b:3e:d2:
a2:13:05:43:2c:60:13:28:77:70:20:46:a1:97:c2:
c2:67:04:44:ad:15:6e:f2:b7:63:ff:10:07:44:00:
68:10:7f:37:22:07:d9:40:c8:78:5a:bc:9c:44:5c:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:8B:EC:07:30:8E:59:8F:D9:FD:DB:69:29:51:F8:38:84:91:7E
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:a4:56:1f:2e:e0:8b:6c:4d:e7:01:22:43:c2:bf:e1:b9:
99:14:86:4d:60:a7:9e:c6:81:d7:3d:15:69:f6:a5:1b:73:d0:
93:90:fe:77:c3:4d:1f:67:34:f2:96:89:83:48:a2:94:f4:f1:
7e:cf:69:fc:2e:fe:56:84:dd:a8:59:08:9c:bb:67:8b:45:c7:
c2:f2:8b:7c:95:bb:ef:dd:13:d8:50:ef:7f:d5:6d:47:18:93:
ce:12:35:0a:e1:5b:1d:ac:84:16:6e:a3:e4:35:39:d4:ca:1a:
de:31:c7:6a:f7:d9:39:93:d8:c4:ee:d8:fb:a9:5e:73:ae:10:
be:98:39:ca:1f:70:3f:ec:9a:ff:10:e7:d7:9d:f2:17:c2:fc:
07:37:90:83:a8:2b:cf:1b:5f:75:31:5f:ae:d5:f7:44:8a:cb:
d2:88:a9:04:9e:8a:38:77:62:b9:f7:13:e9:27:7e:14:2c:53:
4b:e4:5b:10:de:76:b7:f0:ff:eb:33:d7:54:0d:4f:f7:58:f6:
51:53:be:77:08:90:92:fd:c6:cf:34:b3:13:f6:2b:47:9a:03:
e2:9d:02:a4:9f:62:aa:bc:1e:46:fc:05:04:d1:d5:ac:e3:16:
b5:d3:d1:7c:1f:7d:1e:ad:c3:b8:b1:03:f9:58:1e:e0:4a:fc:
34:8e:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:46 2026 by rpki-client