
$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json)
Hash identifier: lTYauBQOPqzo/32mhbXUcscRk+IVmbzu9XhKrgHolVc=
Subject key identifier: 63:9C:A4:8B:BA:DC:60:5A:6C:EE:89:7E:58:E3:C6:8C:DC:8A:90:C1
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial: 0AC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
Manifest number: 0AB0
Signing time: Fri 12 Jun 2026 19:32:15 +0000
Manifest this update: Fri 12 Jun 2026 19:32:14 +0000
Manifest next update: Fri 19 Jun 2026 19:32:14 +0000
Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: wQpehW7+Ad+VaVh2y2pCBnqMdsueYDDYABdqhWAKlBo=)
2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: To2SD2tNBDc4eW/OhRZGvUrX6miaNNQeREHTTJIGg6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Validity
Not Before: Jun 12 19:32:14 2026 GMT
Not After : Jun 19 19:32:14 2026 GMT
Subject: CN=6a2c5ebf-8309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:f2:d9:47:bc:93:8c:a1:11:2f:25:9d:80:
64:5a:4d:b9:ec:8c:bf:a4:9e:5a:2b:c5:fc:0d:0d:
c1:30:8b:e8:73:49:e8:b0:fa:e3:52:bf:16:c8:94:
81:6c:87:bd:95:86:b3:66:f0:68:e4:c1:09:34:99:
98:0b:20:df:43:6c:af:d0:a5:91:eb:de:55:92:1b:
85:60:97:65:1f:9b:8f:af:46:82:ce:2e:1e:7a:d4:
f4:f0:b8:0e:c9:a2:28:29:13:84:fc:c9:18:37:cb:
94:24:88:14:f3:c1:67:4d:2f:ba:b4:34:eb:52:44:
34:6c:c3:f2:bc:9b:97:47:74:a3:20:57:77:53:23:
d6:5f:54:49:33:f4:9c:31:32:6d:c1:c4:3d:c3:8f:
b8:63:9c:eb:9a:ab:f7:77:9e:ba:ef:db:72:34:08:
90:39:ef:dc:4c:b4:d2:56:eb:aa:87:ea:2d:53:be:
e8:f0:80:d4:58:5b:8b:13:57:0b:ad:03:24:61:97:
b6:a1:01:25:87:30:92:98:c4:81:89:59:39:c7:ee:
41:bf:95:3d:8c:25:dd:71:90:b2:c2:94:93:fa:22:
5b:dc:09:d2:f7:f9:41:56:64:b6:e9:a0:fd:df:6a:
f5:04:be:1d:8b:85:4d:ce:5f:71:c5:0c:9e:09:41:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:A4:8B:BA:DC:60:5A:6C:EE:89:7E:58:E3:C6:8C:DC:8A:90:C1
X509v3 Authority Key Identifier:
keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:2d:ab:e8:3c:e1:d6:54:59:e5:ce:74:eb:9f:c0:9c:84:
ae:d0:6b:c8:d8:b3:db:09:5e:2f:71:b9:70:d9:e4:72:44:c0:
d0:26:43:ee:67:d6:95:83:22:e2:23:34:16:fe:09:2a:cd:56:
17:ac:a0:17:c1:91:22:69:25:df:c4:c3:a2:98:5e:b3:f0:df:
06:b6:63:04:85:92:82:18:e3:6d:56:81:93:af:56:e9:1c:7c:
f7:dc:95:7f:33:ea:d8:c8:94:f9:5a:87:e8:56:7f:cf:33:d3:
bb:14:7d:74:3f:d1:e4:2d:4b:6a:32:c2:e3:ef:48:46:62:cc:
55:96:29:c5:01:2c:81:0b:96:8f:2e:be:d9:b7:db:40:5c:6c:
31:48:8f:c2:1b:17:6a:98:06:79:b8:cb:21:3a:ed:69:66:ef:
87:40:78:1d:a1:a8:b2:56:05:a5:50:62:2b:61:15:98:24:be:
14:a0:3a:79:48:76:68:4c:47:4b:c2:14:e5:73:c6:2c:c0:e3:
41:76:95:9a:15:5d:c4:65:e4:84:08:be:ef:33:69:38:6e:c4:
89:44:b6:b3:e3:8c:7a:ac:50:55:df:bc:37:87:e3:b7:4f:8a:
31:d5:9a:59:26:2b:7d:82:8c:a3:7d:08:c6:e0:44:17:6b:9b:
cc:93:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:44 2026 by rpki-client