
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json)
Hash identifier: eUjU5SLBDBCVJEdE3j1X6xwuUpS/aviRVB6yp0eG/bU=
Subject key identifier: EB:6A:08:C7:0B:0D:BC:87:8B:59:B3:27:BB:25:09:67:21:F1:5C:40
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
Manifest number: 9E
Signing time: Sun 01 Mar 2026 08:36:12 +0000
Manifest this update: Sun 01 Mar 2026 08:36:11 +0000
Manifest next update: Sun 08 Mar 2026 08:36:11 +0000
Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: iB+/gT616+b0UGi8pmgvFqU7b8RYJ6KwTc7s6xDQTIY=)
2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Validity
Not Before: Mar 1 08:36:11 2026 GMT
Not After : Mar 8 08:36:11 2026 GMT
Subject: CN=69a3fa7b-05ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:1c:c2:51:c3:6a:19:47:5e:f3:57:cc:25:
4f:51:be:81:cf:53:85:3f:91:d0:37:45:fc:99:d0:
0d:49:d7:e5:23:ea:d4:29:c4:01:d4:af:de:e4:d1:
b1:e8:d7:72:8f:a7:8f:e0:3f:a8:e3:d6:7b:9a:ba:
3d:18:4d:68:3d:a6:71:87:28:b9:8a:81:4c:e5:a9:
2a:87:3a:84:d5:e2:cd:26:2f:a5:e5:8b:4c:a1:7e:
e8:96:6a:76:c7:42:4f:ef:01:d9:cf:4b:a1:25:82:
9c:33:9b:d7:ef:fc:48:ff:e2:3f:55:cf:59:6a:34:
4c:71:ec:bb:1a:cf:04:29:52:91:02:e9:cb:82:bd:
ad:7a:3a:f2:30:a0:d5:62:b0:c4:5d:18:c2:6b:33:
d9:0e:7d:20:3b:8f:16:d5:bd:65:a2:1e:7a:77:41:
0a:97:8c:97:c0:81:da:21:70:1f:09:c3:ab:ce:bd:
c3:8b:e5:07:3a:a6:5f:9d:35:4b:c5:ce:d3:69:1c:
f1:1e:d2:86:dd:5e:33:2b:b2:b7:57:57:c1:51:d5:
e1:c7:ad:47:6d:f0:0c:85:7a:24:ba:ce:de:83:4d:
1f:10:f3:aa:30:8d:26:34:dd:84:71:3f:9e:01:37:
21:24:c3:26:93:d2:70:1f:17:af:cd:d5:32:d4:33:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:08:C7:0B:0D:BC:87:8B:59:B3:27:BB:25:09:67:21:F1:5C:40
X509v3 Authority Key Identifier:
keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:df:63:8a:3b:0a:c7:8a:d9:b5:bc:bc:dd:20:5d:e8:2c:
1d:43:a2:19:93:1d:d6:0d:ac:e4:d2:88:c1:49:1a:26:83:7d:
85:c7:04:21:7c:d6:ef:a6:50:12:15:7a:b8:13:d5:61:39:3a:
09:7e:9b:fd:bf:03:65:3b:53:be:64:9e:6f:74:7e:9c:02:65:
53:c5:71:73:70:e6:9c:71:70:7e:d0:5a:56:c8:64:fb:87:35:
8e:47:70:ec:db:5e:cb:f1:08:60:1b:38:71:38:a5:33:bf:8f:
9e:bf:d3:29:4a:5e:7e:66:e0:15:22:e1:a8:b6:d7:53:7c:66:
c7:bb:7e:15:62:a5:11:ac:bb:74:3d:c7:cd:96:43:9c:78:17:
22:ae:c7:94:b7:64:9d:ec:f6:0d:b5:f9:b1:d6:43:33:36:62:
53:60:66:79:c9:f9:c5:40:8e:d5:b4:51:92:d8:3f:78:9d:9c:
be:64:ad:4a:08:14:50:27:b2:ea:3a:5a:43:6c:23:cb:42:1e:
4e:66:34:08:0e:9c:a2:af:bc:0e:70:c8:60:00:c9:c6:a2:20:
c9:3b:7b:5e:2e:3d:14:1f:44:92:8c:2f:f5:e9:20:7f:0c:91:
5e:77:0b:b4:51:e2:f1:41:a1:66:3d:79:85:b7:3d:0f:b8:9d:
ae:8f:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:30 2026 by rpki-client