
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier: qoZbeAPdXkX/s0hdn1ljl1Dd8fF5Xe5c2Qbt5Fn0drs=
Subject key identifier: 8A:47:AC:0E:34:9F:7D:48:AB:CC:42:03:3D:94:55:6C:3A:5B:5C:81
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 35A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number: 3553
Signing time: Tue 24 Mar 2026 14:47:10 +0000
Manifest this update: Tue 24 Mar 2026 14:47:10 +0000
Manifest next update: Tue 31 Mar 2026 14:47:10 +0000
Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: zwPflyQh1c5rHuITJVrnAoZJH3UDP8BsVDeSSgzv/+0=)
2: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: UcLtnXSONRE5QZnvIErqGBFx65gWWioUulACNYJ23YE=)
3: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: sMVM7zjChouZ/zKMndyZ4mwotxlwIoXBJqwxs0PySGc=)
4: C5859C724D7611EFBA188667C4F9AE02.roa (hash: /Wjn8/7TqXyccH0pwR3Hv+PIkhD00tL7mCG65vUT4Ns=)
5: E652AA52C40911EBA930053BC4F9AE02.roa (hash: sEb1EJmWVcSgKGVkUz52jLxfQvAvzd6VdzWj6R//XeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13728 (0x35a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Mar 24 14:47:10 2026 GMT
Not After : Mar 31 14:47:10 2026 GMT
Subject: CN=69c2a3ee-7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:5b:4d:dc:91:99:43:37:c2:0f:24:0d:9a:
98:61:c3:c6:6d:df:73:72:60:c1:f6:8e:c8:56:d6:
bc:fd:a7:bc:13:fc:2f:04:43:e6:6a:ec:d2:f8:4e:
23:b4:81:6d:f9:ed:0d:4c:fe:2d:e6:cf:8b:7a:7c:
3c:fd:4f:d8:23:1a:ff:f5:8e:84:a6:07:2e:f3:1a:
48:1f:f0:2d:18:34:3e:1c:db:db:87:65:f9:b5:f4:
35:21:83:c0:83:2c:24:d1:21:e6:b1:ca:8e:e7:37:
bb:44:6e:55:48:87:d0:9b:8d:0a:a6:84:d1:58:f3:
0f:1c:bd:fe:3c:b9:35:75:4a:4f:90:d7:22:9e:94:
33:7b:91:bd:2c:1f:fd:fe:d8:a2:a7:78:a4:c6:5c:
82:66:4d:a4:50:13:a1:99:90:a3:32:d4:99:4e:44:
0e:ad:6f:8b:d9:33:90:fc:1d:fc:8d:bf:c4:c4:f7:
12:d8:55:50:0e:57:53:9b:89:6a:d3:f1:72:33:ac:
5d:ab:48:3c:a9:00:3f:a2:ba:58:38:60:76:9f:00:
8c:c9:f3:97:7d:15:86:6f:fa:d1:70:d5:6d:74:8c:
82:01:07:f2:91:67:c3:63:3e:5c:e2:31:a2:67:bd:
96:9d:ce:67:a1:07:af:d5:95:9a:d0:96:97:2b:ab:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:AC:0E:34:9F:7D:48:AB:CC:42:03:3D:94:55:6C:3A:5B:5C:81
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:ac:97:63:32:1a:0f:17:cb:51:0b:bf:44:9e:b6:e7:2c:97:
ec:2a:3a:77:5a:78:a5:bc:21:33:aa:1a:39:36:ac:6a:35:07:
36:8a:a4:0d:fb:9b:06:16:5a:a3:92:58:6d:8e:fb:b4:a6:1c:
47:64:1e:7c:9c:62:d9:ac:e3:9b:2e:c3:ab:3c:74:55:d2:c0:
5b:11:60:9f:7d:a6:ae:42:71:6c:36:21:0c:ed:fa:11:d4:fe:
5b:03:e8:75:28:61:94:4c:28:b5:d4:72:a5:72:33:3f:c0:f2:
a4:a9:4c:6a:b3:b5:76:e0:51:fb:29:59:da:4b:12:9b:29:10:
b0:02:23:1f:3a:e2:85:35:b4:fd:7b:80:0f:85:af:12:df:ff:
3a:49:ef:96:3e:3f:c7:77:72:01:08:ea:25:f9:32:d1:f1:4b:
0e:ab:67:32:cd:ee:f0:1b:41:8f:a3:e0:8a:b9:17:50:21:ab:
a7:4f:97:cf:12:d2:85:90:9e:0f:2b:58:e9:3c:e8:0b:1c:09:
50:30:7c:3a:87:34:cd:0c:8d:4c:9a:fc:cd:0c:42:63:e3:75:
2d:27:cc:b9:73:61:74:18:7f:26:c2:fc:19:35:d8:6e:6a:39:
c8:53:87:af:a3:6e:ab:4b:b7:34:04:4d:95:26:7c:c2:94:03:
53:1b:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:11 2026 by rpki-client