
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier: xO5UXn7n+civWWYXgnwHNPkdXoPKW+CQE4nD/J3Ibmo=
Subject key identifier: C4:AD:95:D1:1D:B4:5C:69:3C:0D:95:B7:D5:BA:56:91:93:9F:E3:9D
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 05F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number: 05F0
Signing time: Sat 26 Sep 2026 23:01:04 +0000
Manifest this update: Sat 26 Sep 2026 23:01:04 +0000
Manifest next update: Sat 03 Oct 2026 23:01:04 +0000
Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: f9Jf85mhKxBbdnIIKi57oq+AWSPlycVa9hkLeMhJSOw=)
2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rpeucbwRthNChjV1mTa6b5UV/jF0VBkI5SXoALE4F0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Validity
Not Before: Sep 26 23:01:04 2026 GMT
Not After : Oct 3 23:01:04 2026 GMT
Subject: CN=6ab84eb0-3c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:09:ab:4b:f1:ea:05:c9:0e:06:03:87:eb:
33:7c:99:00:a5:6c:30:67:20:41:9f:c5:4b:32:d6:
8e:3f:79:28:b1:a7:bc:fa:59:4a:d5:e8:aa:eb:bc:
cc:80:47:a0:24:dd:80:64:b4:ef:4e:cd:67:c7:7c:
49:ec:b6:fc:41:f1:15:5a:b0:c5:13:9b:e9:63:74:
09:61:9c:1a:12:d6:e4:51:57:ea:d8:32:78:14:9b:
8d:ae:b9:1c:7a:85:0f:08:64:46:7d:f5:1f:25:16:
36:eb:0d:e7:7e:63:d3:ef:07:ae:6a:37:e2:86:b8:
91:d3:3f:66:1c:fc:39:a4:b0:04:1f:92:6c:7d:55:
f7:9c:c2:89:10:34:b4:bc:f3:12:72:f6:99:36:d9:
85:03:a4:20:44:1a:c7:73:5b:8c:ed:fe:0d:b6:41:
5c:25:b6:3a:c6:df:f7:71:a7:00:6e:16:c3:67:ab:
76:2a:c6:27:80:f4:d4:2b:f8:b6:fd:5e:aa:2c:f8:
3f:c6:da:06:db:01:71:0e:8b:a5:78:c7:16:9f:2a:
3d:66:5c:7e:c2:6b:fc:11:a1:af:2e:3e:0d:c8:09:
83:f2:59:03:85:42:c3:d5:33:f6:1a:5e:3f:22:a7:
af:64:3b:b2:19:57:9c:a4:7b:84:11:45:36:ee:59:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:95:D1:1D:B4:5C:69:3C:0D:95:B7:D5:BA:56:91:93:9F:E3:9D
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:31:c3:52:33:c8:4e:d6:be:bc:1e:61:9d:db:8c:d7:64:
8a:33:d8:93:40:59:2a:59:50:b8:2f:6b:e2:09:89:fc:86:aa:
68:24:bf:69:98:0d:ba:ca:04:26:bd:cb:7c:36:69:ba:d4:62:
0e:36:21:bf:d4:84:ad:a1:62:5e:f3:bb:a0:ff:68:19:60:6a:
1b:eb:31:f7:fe:0d:df:76:5b:16:6d:3a:da:aa:79:3b:a7:e4:
13:ae:03:ca:a2:06:60:13:40:d4:68:e9:db:b8:d2:70:5a:e8:
a1:b6:51:e1:01:4c:8f:41:fd:74:98:9c:2d:70:2b:7a:a6:ef:
0f:75:27:72:e9:6a:89:e6:c3:7e:fe:b8:de:99:25:64:7f:02:
f5:4c:4b:95:d8:5e:bb:2c:ea:86:40:86:b0:c7:04:f7:75:d0:
22:3e:c8:6f:71:f0:ef:e6:f3:15:b6:ad:02:ee:b3:92:13:5f:
25:21:5f:c1:cf:f0:95:11:14:ac:1e:ad:f4:b2:30:0c:de:9f:
f5:9c:05:ee:fe:11:f6:0f:6b:e7:39:d0:bf:7d:bd:5d:18:d7:
9a:ed:13:14:91:fc:73:06:d4:a1:bd:6b:e9:d0:a0:b9:4f:33:
a6:40:af:97:08:9f:e6:40:d0:45:b7:62:ca:d2:c4:30:03:51:
bf:be:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:36:18 2026 by rpki-client