
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: acdxqfFaBmDIAuO8hYGuzGQqaUjHuE1Mh/phL7c6hkQ=
Subject key identifier: 38:7B:78:00:22:AC:59:85:B8:9B:DD:EA:D9:74:2B:93:95:07:26:0D
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 0816
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 079C
Signing time: Tue 12 May 2026 21:41:41 +0000
Manifest this update: Tue 12 May 2026 21:41:41 +0000
Manifest next update: Tue 19 May 2026 21:41:41 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: 5mzGgqjjbzU4HpqdNAXq4FVpMyqqESSc3P1AWDTKPWc=)
2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
3: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
4: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
5: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
6: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
7: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
8: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: May 12 21:41:41 2026 GMT
Not After : May 19 21:41:41 2026 GMT
Subject: CN=6a039e95-2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:b2:8d:dd:f7:a8:6f:e4:80:f0:f6:73:64:
6c:05:ad:aa:b8:75:30:ab:17:c2:9d:fc:5c:dc:16:
27:90:c7:aa:ac:54:b9:2a:0f:9c:5c:b9:0d:08:06:
6d:c6:cb:d3:16:ca:72:6b:d4:26:6d:64:ee:44:7b:
cf:1f:a7:86:1e:26:c8:15:9e:33:15:c4:57:67:6e:
99:7a:6b:a0:25:36:ce:db:50:ec:a1:b7:28:d4:01:
5a:bd:7b:3a:08:db:dd:7c:1a:e6:62:3d:22:36:40:
a9:75:6b:ee:4c:3c:bd:e3:59:e1:8a:4e:00:f3:d9:
e6:6e:33:f7:87:3e:2c:ea:31:f6:fd:e8:78:fc:d0:
28:17:d7:e8:6b:d7:54:f9:e1:57:ab:a1:71:e0:bc:
7b:ee:50:be:9f:12:20:cb:d7:a6:d8:2a:31:87:47:
8d:b2:5c:4f:e0:c8:68:13:49:1a:7a:17:29:a4:c1:
d5:95:7c:48:0d:6e:7b:81:4a:8d:da:aa:78:1a:7d:
2f:18:e4:4a:bd:01:7a:4e:d5:96:79:3d:3a:61:b4:
c4:d7:4a:e4:05:64:1b:61:4b:4d:41:62:b4:fc:29:
db:59:11:94:85:d5:84:7b:54:5c:d8:d9:f7:ba:dc:
7d:51:9b:c4:06:0b:7c:08:94:83:a4:f3:2b:fe:10:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:78:00:22:AC:59:85:B8:9B:DD:EA:D9:74:2B:93:95:07:26:0D
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:86:9f:a5:ce:68:92:94:f6:25:b5:71:c3:17:f2:30:1d:1b:
20:7f:c1:74:6a:cb:f2:1f:b0:0d:8e:86:e1:0e:ac:0b:8e:77:
ca:60:bd:9c:94:b9:72:9c:6f:41:bb:64:5c:47:b2:10:c2:8c:
d8:0b:aa:ec:dc:66:fe:7d:e8:e0:c5:96:e1:69:55:d9:20:34:
51:24:f8:8b:44:68:3d:d4:c6:28:7b:13:6d:43:f0:de:3c:94:
fe:25:24:e7:ed:46:9a:bd:2c:ab:fa:ff:e0:eb:d9:a9:13:f9:
fc:e7:04:9a:f2:b4:74:70:92:2f:30:59:72:a9:c5:db:82:5e:
c1:48:ee:2f:b9:0b:21:60:b0:dd:5c:fa:bc:6b:53:e0:af:6b:
bc:ab:22:06:df:45:b3:e2:89:02:15:84:48:c1:e8:79:61:c8:
4c:d1:57:76:7e:53:a7:b1:7c:b0:ab:a8:25:4d:2b:2c:91:b5:
a7:f3:03:15:18:fa:2d:3f:2d:a7:58:6d:39:9d:76:01:dd:69:
4b:c6:82:59:7f:8c:8c:f3:78:a0:cd:23:da:62:7b:8a:99:bb:
0f:2d:1e:25:b7:f0:3f:2c:41:f5:64:6e:be:ff:8d:ad:a5:6f:
c9:80:1f:be:c3:57:72:e0:a3:71:a6:b5:c7:ea:de:4c:02:f3:
d9:1a:d4:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4
QjZFMzYzRjUwHhcNMjYwNTEyMjE0MTQxWhcNMjYwNTE5MjE0MTQxWjAYMRYwFAYD
VQQDEw02YTAzOWU5NS0yYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUmyjd33qG/kgPD2c2RsBa2quHUwqxfCnfxc3BYnkMeqrFS5Kg+cXLkNCAZt
xsvTFspya9QmbWTuRHvPH6eGHibIFZ4zFcRXZ26ZemugJTbO21Dsobco1AFavXs6
CNvdfBrmYj0iNkCpdWvuTDy941nhik4A89nmbjP3hz4s6jH2/eh4/NAoF9foa9dU
+eFXq6Fx4Lx77lC+nxIgy9em2Coxh0eNslxP4MhoE0kaehcppMHVlXxIDW57gUqN
2qp4Gn0vGORKvQF6TtWWeT06YbTE10rkBWQbYUtNQWK0/CnbWRGUhdWEe1Rc2Nn3
utx9UZvEBgt8CJSDpPMr/hC0aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDh7eAAi
rFmFuJvd6tl0K5OVByYNMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD
NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB
NXFnTndTN2tJdjZMYmpZX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhYafpc5okpT2JbVxwxfyMB0bIH/BdGrL8h+wDY6G4Q6sC453ymC9nJS5cpxv
QbtkXEeyEMKM2Auq7Nxm/n3o4MWW4WlV2SA0UST4i0RoPdTGKHsTbUPw3jyU/iUk
5+1Gmr0sq/r/4OvZqRP5/OcEmvK0dHCSLzBZcqnF24JewUjuL7kLIWCw3Vz6vGtT
4K9rvKsiBt9Fs+KJAhWESMHoeWHITNFXdn5Tp7F8sKuoJU0rLJG1p/MDFRj6LT8t
p1htOZ12Ad1pS8aCWX+MjPN4oM0j2mJ7ipm7Dy0eJbfwPyxB9WRuvv+NraVvyYAf
vsNXcuCjcaa1x+reTALz2RrU3w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:48:45 2026 by rpki-client