
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier: ursWOVJdQA3AqDlj9FBiC8eNag4yd1WMypIpwGRm6cM=
Subject key identifier: 96:ED:64:3C:D4:E4:D3:4D:F5:FE:2C:F5:4C:EF:30:66:36:99:64:38
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number: 6C
Signing time: Mon 11 May 2026 08:03:42 +0000
Manifest this update: Mon 11 May 2026 08:03:41 +0000
Manifest next update: Mon 18 May 2026 08:03:41 +0000
Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: 6ieURwmG376WrOlP8qxU5ENp6U2g/RaUppc/tYEkQBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Validity
Not Before: May 11 08:03:41 2026 GMT
Not After : May 18 08:03:41 2026 GMT
Subject: CN=6a018d5e-300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:f6:ac:0a:e7:24:1f:6f:50:f6:e9:06:35:
d2:72:c3:9e:a0:b6:e0:fd:a6:7e:5e:20:cc:23:fd:
bc:73:c0:8a:c2:12:6d:76:1b:4b:63:09:c2:f4:de:
59:ed:b8:22:b5:dc:96:02:b0:85:9f:33:26:a7:2c:
c3:ed:9d:4b:02:c5:5a:b9:53:c8:5f:ea:5e:23:52:
8a:2e:b9:eb:ed:30:ab:aa:ee:28:ed:ef:30:0e:e5:
c0:6a:4d:61:b4:d2:5c:31:0e:1d:4a:46:ad:ef:c6:
19:6e:a2:9b:09:ff:3b:96:81:e1:51:ce:5f:3c:e7:
f8:04:4e:19:2a:12:38:ae:6e:3c:a7:96:5c:55:cd:
3b:70:f2:c9:c7:1d:db:cc:d6:7a:94:21:dc:dd:bc:
37:3e:49:7e:78:aa:98:59:94:5c:0d:63:e9:94:99:
b7:2d:f2:4f:da:7d:ba:02:c7:fd:7e:f5:50:0b:20:
d6:af:a7:76:72:b2:65:ff:6c:9a:7c:29:84:4a:78:
05:5d:77:4c:77:0c:66:23:23:59:a2:7b:a7:6c:af:
d3:50:63:07:8c:d1:01:01:cc:6d:54:02:ec:0b:dd:
3c:84:8b:b5:0e:8c:5e:ab:47:2b:aa:51:95:9a:cc:
3f:3e:5c:cb:2c:fc:b1:1f:0e:52:9f:f2:15:be:8b:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:64:3C:D4:E4:D3:4D:F5:FE:2C:F5:4C:EF:30:66:36:99:64:38
X509v3 Authority Key Identifier:
keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:ed:c3:2b:b7:a9:23:0d:72:55:d2:65:8c:55:52:b2:3a:
94:2b:71:e1:34:56:b7:f0:54:03:0c:c4:99:21:5a:bc:de:a9:
35:77:09:91:06:09:dc:47:b5:df:48:61:59:b1:ec:f1:4b:7d:
6b:82:b6:6a:43:6b:3a:8a:38:9c:4d:c6:5e:54:bd:82:c1:9e:
06:f0:ee:79:a7:40:d3:22:1b:70:27:fd:3b:53:43:40:2f:e1:
c3:66:b3:a3:4b:ea:de:77:96:e0:5d:fd:e7:2a:ca:c8:18:f0:
0c:41:5f:dd:fb:85:93:50:57:2a:f7:c9:72:5c:72:b3:cd:55:
48:18:b2:f5:a6:85:3a:33:e8:09:92:a4:99:cb:44:e8:c7:06:
35:0f:6e:a4:4d:3d:12:82:a2:d8:8b:0a:75:5e:04:45:87:2a:
78:8c:6c:5d:7d:44:c4:99:e8:c5:8a:5b:1c:a0:06:f7:bc:66:
10:88:b4:85:45:2d:f4:96:16:55:ee:2e:19:98:37:3e:57:15:
a2:3a:4f:fb:01:94:09:84:36:f0:9d:7d:5b:68:c9:c9:2f:fb:
21:00:16:54:c2:ee:3d:63:02:89:11:6c:0c:7a:f7:6a:60:c5:
0e:1b:75:ad:93:eb:d3:31:24:0b:ea:50:42:b8:72:60:4c:14:
7c:89:9d:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDY1NjExMC8GA1UEBRMoREM5OTNGQUU4ODEwRTkzMTRGNUE3REYwOEQ2RjBDRDU3
RUE1OTE2RTAeFw0yNjA1MTEwODAzNDFaFw0yNjA1MTgwODAzNDFaMBgxFjAUBgNV
BAMTDTZhMDE4ZDVlLTMwMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbm/asCuckH29Q9ukGNdJyw56gtuD9pn5eIMwj/bxzwIrCEm12G0tjCcL03lnt
uCK13JYCsIWfMyanLMPtnUsCxVq5U8hf6l4jUoouuevtMKuq7ijt7zAO5cBqTWG0
0lwxDh1KRq3vxhluopsJ/zuWgeFRzl885/gEThkqEjiubjynllxVzTtw8snHHdvM
1nqUIdzdvDc+SX54qphZlFwNY+mUmbct8k/afboCx/1+9VALINavp3ZysmX/bJp8
KYRKeAVdd0x3DGYjI1mie6dsr9NQYweM0QEBzG1UAuwL3TyEi7UOjF6rRyuqUZWa
zD8+XMss/LEfDlKf8hW+iyL5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlu1kPNTk
0031/iz1TO8wZjaZZDgwHwYDVR0jBBgwFoAU3Jk/rogQ6TFPWn3wjW8M1X6lkW4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzU0MUNDNkZBQjAw
RDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRGUFduM3dqVzhNMVg2bGtX
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM0prX3JvZ1E2VEZQV24zd2pXOE0xWDZsa1c0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
NjU2LzU0MUNDNkZBQjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyLzNKa19yb2dRNlRG
UFduM3dqVzhNMVg2bGtXNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAUSO3DK7epIw1yVdJljFVSsjqUK3HhNFa38FQDDMSZIVq83qk1dwmRBgncR7Xf
SGFZsezxS31rgrZqQ2s6ijicTcZeVL2CwZ4G8O55p0DTIhtwJ/07U0NAL+HDZrOj
S+red5bgXf3nKsrIGPAMQV/d+4WTUFcq98lyXHKzzVVIGLL1poU6M+gJkqSZy0To
xwY1D26kTT0SgqLYiwp1XgRFhyp4jGxdfUTEmejFilscoAb3vGYQiLSFRS30lhZV
7i4ZmDc+VxWiOk/7AZQJhDbwnX1baMnJL/shABZUwu49YwKJEWwMevdqYMUOG3Wt
k+vTMSQL6lBCuHJgTBR8iZ0N
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:30 2026 by rpki-client