
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: DJ69mnPBsyo7VqO2y09RLjkm5DdobajZs/msDPYywWg=
Subject key identifier: 99:70:B6:D5:13:E2:5E:B5:F8:37:08:10:95:23:15:23:A5:CF:67:3D
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 0583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 0578
Signing time: Tue 12 May 2026 23:24:06 +0000
Manifest this update: Tue 12 May 2026 23:24:05 +0000
Manifest next update: Tue 19 May 2026 23:24:05 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: CWztjZdgRsPDqI2Gwq056aNadEwcL75Dooxa0CZaOHo=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: May 12 23:24:05 2026 GMT
Not After : May 19 23:24:05 2026 GMT
Subject: CN=6a03b695-268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:1c:df:4d:25:df:57:23:3f:20:19:ee:1c:
f8:42:1e:88:8f:30:85:ad:b7:23:f9:89:45:72:8c:
0a:cd:85:1f:87:02:3e:3a:6a:d5:39:12:39:2a:1f:
81:72:8e:b8:0d:77:c0:d0:c0:6f:81:ba:06:4c:9b:
d2:4f:7c:64:75:3f:bc:93:0a:8d:60:a1:64:9d:3d:
fa:ba:c5:58:36:9f:11:2e:78:11:0f:66:d4:43:02:
74:81:75:bb:22:a0:12:2e:e3:3d:ec:c4:84:81:b2:
dd:f0:c8:fc:e8:87:e8:0b:c3:f0:b2:af:4a:0f:d1:
3d:9b:9e:71:35:a1:9c:4f:d1:05:08:1e:90:57:c3:
82:a2:c6:40:6d:86:c9:7b:37:ea:3a:e6:e4:58:96:
91:cb:1e:1a:97:14:05:6d:bf:98:cc:3f:1c:14:ad:
2f:3b:68:1e:be:55:a1:b2:fc:5c:15:dd:90:b9:7d:
c7:e6:5a:69:b7:6a:f3:54:a9:d9:0e:69:76:28:f9:
00:96:1e:17:94:ea:c1:3c:7b:21:0c:76:e4:d6:9d:
6b:65:18:89:a3:53:01:8a:22:ab:5e:2e:3c:9d:26:
d1:04:a8:39:2c:fc:8f:f8:f7:c8:ec:bb:a2:d6:85:
dd:87:2d:4c:da:6a:44:47:7f:e5:d0:ea:02:97:a7:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:B6:D5:13:E2:5E:B5:F8:37:08:10:95:23:15:23:A5:CF:67:3D
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:70:f1:55:a3:ed:20:a6:66:1d:7c:6c:b9:68:19:2f:72:7a:
b9:5b:a2:6c:10:fb:12:06:cd:05:ce:57:f9:89:81:92:ba:d5:
78:e1:e0:df:a5:d3:91:9b:6e:aa:42:e6:ae:3c:20:ca:3c:19:
f6:3d:cc:39:24:19:4d:f9:b9:94:e4:a4:29:25:a9:3b:13:49:
37:db:6d:1f:b7:45:64:80:7f:59:12:35:65:bc:5e:da:f7:94:
a3:00:f3:04:a8:c9:ff:f9:b7:84:83:79:4a:d6:b9:fb:d2:b7:
78:95:fd:42:f0:12:cb:34:5d:74:d1:17:72:60:93:69:8d:f0:
ac:b5:4c:7e:36:f9:d1:95:79:60:a2:7f:ab:f8:66:27:24:e0:
b3:e5:f3:de:b9:38:c4:7b:35:b9:3c:64:14:8e:77:1f:92:18:
df:7e:32:c1:57:4f:eb:eb:3d:4b:c6:f4:5b:c3:d8:2d:b8:2e:
02:5c:e9:a5:fa:bf:0b:a1:e7:9e:8d:ee:90:27:3a:86:41:f7:
14:ed:96:8e:29:6d:6e:df:30:ab:cb:97:c5:18:c9:3e:5f:66:
9d:51:a0:20:6f:76:79:6c:40:da:58:24:24:be:e0:7c:39:d1:
49:70:98:2f:b7:40:08:c4:53:bb:b8:f6:c2:db:e4:1e:33:27:
a1:ac:c1:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey
N0MxQTVCOUEwHhcNMjYwNTEyMjMyNDA1WhcNMjYwNTE5MjMyNDA1WjAYMRYwFAYD
VQQDEw02YTAzYjY5NS0yNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMAc300l31cjPyAZ7hz4Qh6IjzCFrbcj+YlFcowKzYUfhwI+OmrVORI5Kh+B
co64DXfA0MBvgboGTJvST3xkdT+8kwqNYKFknT36usVYNp8RLngRD2bUQwJ0gXW7
IqASLuM97MSEgbLd8Mj86IfoC8Pwsq9KD9E9m55xNaGcT9EFCB6QV8OCosZAbYbJ
ezfqOubkWJaRyx4alxQFbb+YzD8cFK0vO2gevlWhsvxcFd2QuX3H5lppt2rzVKnZ
Dml2KPkAlh4XlOrBPHshDHbk1p1rZRiJo1MBiiKrXi48nSbRBKg5LPyP+PfI7Lui
1oXdhy1M2mpER3/l0OoCl6eMrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlwttUT
4l61+DcIEJUjFSOlz2c9MB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4
NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu
SWlSME10YTZyM29ud2FXNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmnDxVaPtIKZmHXxsuWgZL3J6uVuibBD7EgbNBc5X+YmBkrrVeOHg36XTkZtu
qkLmrjwgyjwZ9j3MOSQZTfm5lOSkKSWpOxNJN9ttH7dFZIB/WRI1Zbxe2veUowDz
BKjJ//m3hIN5Sta5+9K3eJX9QvASyzRddNEXcmCTaY3wrLVMfjb50ZV5YKJ/q/hm
JyTgs+Xz3rk4xHs1uTxkFI53H5IY334ywVdP6+s9S8b0W8PYLbguAlzppfq/C6Hn
no3ukCc6hkH3FO2Wjiltbt8wq8uXxRjJPl9mnVGgIG92eWxA2lgkJL7gfDnRSXCY
L7dACMRTu7j2wtvkHjMnoazBOw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:46:37 2026 by rpki-client