
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File: anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier: YNer8C2JcFwu/dlF98PDEOjw0qjRqGaattZ/nuH0bno=
Subject key identifier: 16:44:17:F2:63:46:27:57:24:8D:4F:5C:20:B1:84:97:BB:45:7C:38
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number: 0239
Signing time: Fri 27 Mar 2026 02:10:22 +0000
Manifest this update: Fri 27 Mar 2026 02:10:22 +0000
Manifest next update: Fri 03 Apr 2026 02:10:22 +0000
Files and hashes: 1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: PV5XYQT7wv72nA7CKQnf2MErmzEKNvPsfYq7SuFM9VM=)
2: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: GzwABBRZESMcRwdfhn3IWi9v3B62zckT729lql6XQTc=)
3: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: E5JwjHvKutLbFiPLa2Rz4sSsTfVvUxmZuTHwfledEQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Mar 27 02:10:22 2026 GMT
Not After : Apr 3 02:10:22 2026 GMT
Subject: CN=69c5e70e-78eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0c:e0:7f:4b:11:6b:2c:f4:60:d7:5d:df:e0:
7f:64:9a:da:3d:58:56:e2:2c:65:bb:1a:8f:62:40:
65:74:0c:d5:d0:2d:30:c9:23:94:5f:d4:cf:ce:72:
0a:5f:f6:0b:a3:72:8a:e5:8e:8c:e7:af:5b:fd:f9:
7a:3a:d0:9c:d4:ed:da:d2:f8:81:a9:2e:98:b8:5a:
f2:7b:f2:ba:54:e4:7c:40:25:dd:fd:43:b8:ed:89:
1f:ca:98:2d:ae:23:33:26:e4:47:84:1b:76:a0:50:
e9:ca:d0:52:c1:42:70:61:21:7f:f8:a1:65:62:74:
77:2d:26:c1:2d:76:23:70:e4:fc:10:ce:20:35:3c:
1b:22:84:e0:f8:b1:8c:eb:cb:28:cf:64:e2:93:b1:
e6:7b:86:da:65:60:4d:0c:29:7a:05:01:1b:2c:9e:
c9:fd:a8:80:26:3b:f0:f3:88:f7:d8:b2:29:42:37:
90:02:90:d3:80:67:91:65:c5:55:0f:5f:a3:9d:9d:
13:af:83:a8:4b:23:f9:0d:7b:10:17:e0:14:50:9a:
9a:36:60:f9:0e:06:12:2b:b3:92:75:30:f6:30:cd:
b8:41:68:dd:6e:62:eb:5b:9e:76:96:80:65:5e:50:
15:f0:e2:b6:17:79:5f:49:d8:6d:5e:6b:7b:78:a2:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:44:17:F2:63:46:27:57:24:8D:4F:5C:20:B1:84:97:BB:45:7C:38
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:c1:a9:ab:e0:9d:11:77:0f:0c:d3:95:fb:c2:f5:8e:62:
25:be:01:92:eb:a6:00:1d:e9:fc:c1:61:ac:1e:01:e2:21:f2:
fc:b5:ad:97:26:3d:d8:40:a9:7f:bd:c9:54:90:aa:23:c0:f1:
67:f5:ec:22:db:1d:b4:6d:9a:db:01:1f:80:f3:4e:2e:35:ff:
c3:1d:4b:bc:58:29:93:ea:cd:b1:21:82:47:a2:d4:f3:02:c5:
cf:c0:aa:b7:a0:61:b2:3b:2c:e9:d3:ef:d8:91:cd:c0:da:89:
7e:98:3d:2e:40:8a:c0:8c:43:b3:1c:c0:e3:dc:df:1a:15:31:
cc:4d:5a:f4:a6:8a:28:70:ea:4e:23:bc:ab:29:3d:5b:d7:22:
f3:44:2c:42:82:f9:40:cd:91:6d:52:f6:55:b3:9e:28:a9:70:
7a:46:16:ad:eb:2a:8f:1f:b5:ce:0d:78:ae:88:29:9f:8b:c5:
94:6c:31:94:35:2b:cb:2e:aa:d3:0f:93:94:e6:b6:b8:57:60:
83:63:fe:cb:90:48:b9:4d:f6:52:10:a3:46:f5:2b:6a:52:b8:
2c:dc:76:72:e0:7e:e8:ad:b0:1d:cf:b2:42:78:22:b6:f9:5d:
76:b7:ad:40:be:c7:71:c5:ad:7e:94:4b:72:aa:0e:5f:8a:fa:
7c:22:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:31 2026 by rpki-client