
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json)
Hash identifier: G3XYvvkDyBQCmXCvzzNimPXvzq3vsAN1am4EE/9rI4M=
Subject key identifier: 44:3D:84:DF:52:4A:EA:86:38:52:98:D2:5A:DD:B6:03:3F:F0:93:CA
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
Manifest number: 09FA
Signing time: Tue 12 May 2026 19:53:30 +0000
Manifest this update: Tue 12 May 2026 19:53:30 +0000
Manifest next update: Tue 19 May 2026 19:53:30 +0000
Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: FvmTZua8bHTzZ+/lpUOORdVD7sEdIfKIT+QelBMX2JQ=)
2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Validity
Not Before: May 12 19:53:30 2026 GMT
Not After : May 19 19:53:30 2026 GMT
Subject: CN=6a03853a-e53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:67:29:b7:ca:47:c4:82:32:94:9f:f4:0d:
af:38:fe:86:7f:ba:83:7c:ed:03:a4:88:8e:0d:8b:
78:1b:f0:7c:2b:e9:d9:09:15:7e:8c:29:37:e8:00:
ff:cf:9e:b4:6e:7b:68:7a:f7:58:f4:6c:a3:a9:75:
98:5b:fc:0a:45:4a:4f:4d:90:10:c0:a9:2d:b0:38:
47:3f:6a:41:ff:14:13:34:27:b3:c1:f3:12:28:57:
0a:d6:1d:48:fa:11:96:53:ec:16:45:c9:8d:e6:f0:
2b:a3:45:83:74:2e:be:75:45:01:57:92:8f:ef:3a:
1a:fb:28:2b:93:a0:42:9e:8d:30:33:c5:1d:d3:37:
27:09:81:4c:8b:f2:2a:ae:f7:6a:ff:f7:35:75:3b:
99:64:c2:2b:e4:d8:a1:eb:20:a3:9c:e4:92:48:11:
83:64:2f:10:96:55:d0:f6:57:26:4c:0c:5a:b1:94:
b0:e0:73:22:c7:c9:c2:84:99:c6:af:14:e7:bc:a0:
69:6d:f8:82:36:51:4f:6e:39:8b:ac:6a:26:d1:8c:
96:02:1d:69:19:42:ff:33:a2:f5:02:b9:e2:4f:98:
3d:52:5a:34:c9:0c:1e:89:0d:a3:20:fa:b7:a1:dd:
57:25:b5:e5:8d:4a:e8:e9:85:b7:9b:92:1b:58:05:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:84:DF:52:4A:EA:86:38:52:98:D2:5A:DD:B6:03:3F:F0:93:CA
X509v3 Authority Key Identifier:
keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:07:c0:b4:61:b7:60:21:8c:e4:68:b4:ff:9b:32:f7:df:9a:
4a:43:cd:f7:44:b2:d7:ed:21:16:39:b3:a8:8c:b9:b0:25:50:
f1:e1:ea:e3:ad:28:3b:b2:ec:c5:99:fa:7a:b7:46:56:96:52:
d3:a5:fd:af:13:1e:f0:e8:f1:50:52:62:2c:34:4a:1c:77:70:
df:84:3b:e5:e0:99:7f:a2:37:eb:62:1a:fa:8d:6d:e4:d9:c2:
28:b1:e6:48:df:7c:da:d3:a1:5f:0d:0a:c6:f5:b6:6a:a1:68:
21:3e:81:89:cd:13:d6:55:ec:5d:96:f4:2f:5e:07:c2:1b:4f:
59:24:95:e6:dd:4b:c4:51:45:a9:9f:33:64:2e:ae:87:8c:ff:
7b:d3:1f:55:8f:2d:98:6e:d0:cc:4d:f7:ee:05:e2:5b:c0:d8:
77:76:73:2f:b3:df:90:3e:4f:3f:86:7c:9d:fb:40:b0:6e:2d:
3e:a6:83:08:3b:2e:a3:30:3a:e0:88:06:f0:d3:85:7d:58:b9:
a1:d7:2f:6e:b5:5d:f5:83:d4:a5:1b:0a:f8:5e:af:eb:c6:e1:
e4:65:e8:3a:56:46:ac:75:4e:19:2e:ea:18:c7:3b:be:8d:a9:
7f:75:f7:a4:db:df:d1:2a:1c:92:93:b3:f9:fe:0b:b5:40:dd:
12:d5:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:38 2026 by rpki-client