
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: GXjq9tcrZwQjjFgpSXC/DPQsYSsTnMc5RFwfXrDwYrs=
Subject key identifier: A5:33:00:0B:13:F9:86:04:6F:1B:AD:2A:85:90:34:E7:4A:C9:D0:09
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 0161
Signing time: Wed 22 Jul 2026 23:57:26 +0000
Manifest this update: Wed 22 Jul 2026 23:57:26 +0000
Manifest next update: Wed 29 Jul 2026 23:57:26 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: f+2Fhz7ylTuD5I/KpYLWUV67+gPKbm4GXaSfNdXx3fs=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: Q2bBWQkMnv2ryibhtyKcKnbpBqQPJlfX2lDfvclSTKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: Jul 22 23:57:26 2026 GMT
Not After : Jul 29 23:57:26 2026 GMT
Subject: CN=6a6158e6-a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:db:a5:69:6d:52:2a:68:31:d3:cd:65:3b:
ca:06:7f:8b:d7:30:6e:77:5a:82:7a:f9:1d:8a:c6:
17:7a:d9:87:52:80:1b:3a:93:fd:5e:d9:71:2c:71:
af:a5:90:95:bb:2a:e3:e4:83:88:ad:51:c4:a1:95:
7d:38:db:01:84:47:20:09:9b:38:57:e2:ac:09:7a:
0e:dc:51:2e:71:53:fb:e0:aa:52:05:da:19:be:92:
72:48:48:9e:3d:6f:9d:a8:7f:d6:87:00:12:9c:7f:
a2:32:bd:c3:84:f0:24:91:d6:d8:a6:7f:38:ce:2e:
79:4e:e4:7b:dc:ee:51:7b:54:9f:28:1e:a1:db:d2:
2c:7a:00:bc:16:b6:79:d3:72:e9:26:21:73:ed:b0:
43:91:42:3c:b9:57:ab:7f:05:22:a5:bc:08:b2:55:
6d:7c:9e:49:4f:a6:23:d6:b0:ab:4e:0a:0c:9f:28:
63:ea:77:89:d7:04:00:27:0a:5b:f3:7d:eb:a5:07:
ad:23:e7:2b:b6:d4:ec:12:b9:b0:7c:5f:bc:69:87:
03:a4:f6:ea:2d:9f:23:f4:72:be:0d:28:3d:81:7a:
98:5e:59:e4:b6:43:27:59:18:f2:54:79:70:d3:51:
c3:55:44:f7:c7:99:6c:49:e6:71:f2:37:fd:60:a2:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:00:0B:13:F9:86:04:6F:1B:AD:2A:85:90:34:E7:4A:C9:D0:09
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:59:4a:f6:b9:72:3d:f6:b2:95:98:18:df:6b:e4:f1:ee:a0:
cf:82:6e:db:27:6e:3c:11:dd:5d:c8:64:84:1c:ab:ce:d2:ae:
17:cf:c4:3b:7d:e4:e1:a0:c5:4a:df:34:da:ed:6d:9d:3f:8b:
36:d1:92:e0:fc:1c:33:91:51:31:6d:67:26:fc:3a:da:53:fe:
bb:20:22:0f:77:87:95:3c:42:a1:24:80:1b:53:4f:17:ef:9b:
13:05:4e:cf:77:d7:e0:6b:e3:b7:67:c7:03:f2:26:3d:49:e5:
9a:02:ca:23:8c:e0:4f:d2:e9:f2:23:33:2a:7e:15:17:ae:f8:
b6:67:51:b9:a2:09:31:7a:af:4a:9c:44:71:38:8a:ea:b9:1e:
c1:76:d4:a1:a2:03:4e:d6:b7:46:b6:66:bd:ce:f4:e0:ae:7f:
1f:56:52:a2:e3:a6:a6:82:35:74:44:07:dd:fc:26:70:57:dd:
3f:cc:97:1a:32:2d:85:98:0e:c5:cb:a8:af:39:90:36:4d:79:
8b:c2:d0:cb:ea:21:b8:50:e8:e9:a8:7b:5d:a8:5d:45:67:4d:
de:20:52:cb:81:66:cb:f0:61:39:f8:c8:1e:92:7e:51:de:39:
a5:5a:d0:cb:b1:76:72:77:c5:56:be:73:3b:fd:e3:f9:33:f8:
1f:f2:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:32 2026 by rpki-client