
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: q3zGkqAZsGDZbxJxPCm1c7aauKjwlGOZORUoTgx21L8=
Subject key identifier: 69:02:D0:89:AF:95:3A:6A:40:7F:79:EC:24:54:77:FF:85:B6:01:49
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 085B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 07E1
Signing time: Thu 24 Sep 2026 21:20:29 +0000
Manifest this update: Thu 24 Sep 2026 21:20:28 +0000
Manifest next update: Thu 01 Oct 2026 21:20:28 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: 0XuOBCrn7DwCtoY4SpXSMg5dlp3OGve3rhnpoHbfwmc=)
2: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
3: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
4: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
5: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
6: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
7: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Sep 24 21:20:28 2026 GMT
Not After : Oct 1 21:20:28 2026 GMT
Subject: CN=6ab5941d-db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:93:a9:2a:cd:da:e3:01:ec:e3:f9:48:b1:
0e:63:9d:42:c7:e2:73:aa:53:b1:4d:d0:97:f6:6b:
6a:e0:0b:a2:5c:42:f9:6f:54:8d:79:f8:82:84:93:
09:93:1f:16:46:fb:0f:11:df:06:eb:dd:28:e3:32:
ab:f4:ef:f7:26:24:e5:81:54:be:78:c9:9e:48:63:
25:4a:26:be:81:6e:43:17:35:79:f1:07:35:a5:6d:
53:86:4d:0b:06:13:5b:76:54:10:5a:9b:6d:ef:e6:
5c:69:0e:5a:fb:b8:75:74:b0:78:5b:70:a4:b1:dc:
90:53:c4:08:ce:6f:1e:7d:a8:1f:bb:5c:11:eb:0d:
92:3d:3a:c0:64:8d:8c:4b:eb:be:09:a7:e2:3f:65:
8a:d0:58:fb:8e:3e:6f:b8:99:3d:da:df:82:6e:98:
cd:f2:63:a7:91:7d:7d:18:0f:ca:20:21:44:f6:ae:
8c:9e:b7:85:28:ec:b0:6e:26:17:68:f9:3a:92:88:
03:e3:a7:19:c5:38:ab:db:c2:5d:97:a4:43:a4:24:
a2:3c:b3:35:8c:15:dc:2e:4a:64:74:ed:6e:04:21:
09:30:0a:c0:fe:ac:14:a7:e4:b7:e2:41:90:c4:e3:
8a:c8:02:4e:51:60:31:3e:55:83:d1:ef:9c:92:14:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:D0:89:AF:95:3A:6A:40:7F:79:EC:24:54:77:FF:85:B6:01:49
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:76:06:91:9d:8f:4d:14:4d:36:62:23:d2:75:6f:fb:e6:
52:ca:9e:f8:ea:82:40:45:a5:b2:36:5a:e0:a2:60:23:27:4c:
06:03:e9:29:9d:78:5d:e1:be:c9:2c:8d:5b:77:8c:2c:b3:a9:
90:48:1b:8a:c5:97:3b:fb:9a:80:50:1d:93:92:94:f4:6f:24:
ed:06:91:58:63:07:e5:79:e0:68:36:74:b7:8e:97:4a:78:b1:
5e:e2:c7:48:18:46:0e:cc:83:a2:9b:5f:43:d8:6c:f4:a9:77:
be:74:6d:e2:7d:6d:cc:3b:3a:51:78:97:3d:47:99:3b:43:97:
89:82:e5:38:6b:13:09:50:6d:d2:dc:21:17:e8:89:3a:fe:ae:
c9:3b:9d:22:2d:52:ed:5f:6f:d4:c9:f5:9e:b4:5b:8d:b3:7c:
94:de:b3:97:2e:8b:50:5e:fb:1e:61:ee:6a:22:c2:39:fc:1a:
b4:d4:0a:42:cd:06:ab:af:a0:bc:51:a9:26:2e:2e:b4:3c:13:
20:b8:5c:a9:9d:ed:a1:6e:ff:75:39:85:2a:df:23:ee:4e:60:
d6:e7:42:e3:10:94:ad:53:64:f5:cc:92:4b:f4:e4:6a:46:03:
ea:8c:72:95:0d:53:6c:20:52:e1:7a:66:66:ac:a7:f2:99:3b:
37:0f:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:14 2026 by rpki-client