
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier: ClYXoEjhITowyTV8qu9xHzbu5rnJDUHRGRHh/BOnTJY=
Subject key identifier: E6:09:6D:05:C5:C8:B7:C6:71:81:26:21:97:ED:76:E9:08:BC:71:4C
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 05D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number: 05D0
Signing time: Sun 26 Jul 2026 23:56:22 +0000
Manifest this update: Sun 26 Jul 2026 23:56:22 +0000
Manifest next update: Sun 02 Aug 2026 23:56:22 +0000
Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: 6gMT674vv7QdRWBzkk4MnKCTbNsArD6hNgodqb3hcjE=)
2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rpeucbwRthNChjV1mTa6b5UV/jF0VBkI5SXoALE4F0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Validity
Not Before: Jul 26 23:56:22 2026 GMT
Not After : Aug 2 23:56:22 2026 GMT
Subject: CN=6a669ea6-0a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:45:3b:36:3f:36:33:f3:ec:aa:a5:e9:c8:
82:0f:eb:de:85:8a:4e:49:6c:53:88:88:85:89:fe:
ad:56:39:91:9a:a2:32:ca:c2:0b:30:fc:c2:d7:c0:
d1:f9:02:ea:76:07:4a:ee:3d:32:4a:6d:0e:d8:ff:
d6:67:ae:fc:7f:58:37:20:56:dd:70:d3:3b:bd:8c:
0a:68:0c:ab:ae:79:bc:10:11:a3:50:e3:ff:1a:af:
4a:d7:03:84:d9:8b:a5:2d:3e:32:54:61:e0:ff:55:
0e:81:cc:29:1f:c8:38:6a:a6:83:86:e5:cf:7d:cb:
98:ff:b3:0a:95:42:54:60:8c:57:34:98:70:67:3c:
4c:8a:67:15:d8:15:20:80:05:69:53:c9:79:44:91:
c1:ef:fe:ad:ba:69:c9:96:84:2b:b1:64:6e:a4:b3:
bc:50:79:d1:af:c7:60:08:cd:46:6a:8d:2e:8a:e5:
e7:db:19:c1:40:79:e0:f5:8c:99:91:0f:34:09:0e:
08:77:fd:b0:23:2a:82:d1:e1:7f:ff:92:9e:13:89:
c1:d8:f8:00:bf:ad:57:d1:16:31:52:27:05:d1:a9:
f6:0d:6e:0e:b2:4a:b7:54:99:dc:b4:c4:0f:56:57:
be:1b:ae:40:7c:2f:33:5c:5d:41:7b:62:0f:3c:2a:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:6D:05:C5:C8:B7:C6:71:81:26:21:97:ED:76:E9:08:BC:71:4C
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:48:67:ab:85:58:d1:83:de:6d:84:da:f1:a7:bd:95:7e:70:
04:59:05:da:c1:35:0b:1a:32:62:0e:4a:e7:30:6b:c4:79:5a:
61:bd:b2:96:71:76:75:e6:bc:ec:2d:42:49:b8:ab:c6:a0:0f:
0b:38:48:d1:79:d3:91:de:71:65:ce:f3:8a:db:2d:57:c8:8e:
d3:da:ea:d5:c8:c9:93:14:ee:40:38:f1:97:fc:a7:b5:93:e6:
e6:06:2f:e9:c8:b5:54:9b:d6:74:e5:0c:31:e3:1d:7d:29:2b:
f1:31:1a:69:68:7b:df:f4:15:95:e3:8a:e8:1b:35:af:3f:d7:
bc:83:f2:ca:81:d7:c6:a0:f7:ce:59:b7:92:e6:91:d7:0f:ad:
2c:8c:b2:42:33:01:d2:a7:ac:17:8a:99:ff:5e:73:ff:9b:94:
5e:39:04:9c:9b:2f:67:73:50:e1:34:47:c2:f3:1d:0a:56:af:
04:12:61:9b:71:1c:54:61:a1:e2:4b:92:ef:6c:1e:8d:c7:e8:
dd:0b:c5:85:34:35:37:8e:85:7d:6b:18:84:ca:17:02:fd:f3:
81:6a:d5:ec:30:44:d0:fc:b3:72:8f:fe:e8:e3:bb:60:f4:6c:
79:e6:12:ac:3b:f1:d1:3c:16:0b:bb:f9:bb:34:b2:ee:e5:83:
d2:14:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:28 2026 by rpki-client