
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier: Fo8I/O1SygmwvdN89IWEnE8uiHasLVilJnsX1sk3ZvA=
Subject key identifier: AA:8B:96:1A:7D:5C:F4:FD:4D:D1:AF:E9:2E:A0:5F:2F:7B:3D:38:3C
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number: 3586
Signing time: Fri 12 Jun 2026 14:22:37 +0000
Manifest this update: Fri 12 Jun 2026 14:22:36 +0000
Manifest next update: Fri 19 Jun 2026 14:22:36 +0000
Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: w9bcs2PLtqAqUeDV5njKbbb6H1H0ywwMHPWMM+pxqag=)
2: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: VXO5/U8cHHCFaikukuqO1qnp6nbKhmKzeuFoVz0LqaU=)
3: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: CWD+yCy6yNtHR/CgsSdRActZ6Gz+ygW0qqlW1BWQfN0=)
4: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: Im+A1kygYXCcmKM1N88CQpYfMfI1pkZXcprVNJAgc7Y=)
5: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: izVvMKnosN85WDCwiZeSTea3usmMiFXGuieIuV+2wlI=)
6: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=)
7: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: c5BWjsV+5qy4Czn1fNB7N39xouqCRvW12ZZgXgS4ZDQ=)
8: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: qiT/GVvRCXwwQO5czxfwtuP70nIiPr4STQfaVH+7UL0=)
9: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: BJoCud12RqYU139X5Hg1YEdiSoJoBorro9yFYj7EiQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13778 (0x35d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jun 12 14:22:36 2026 GMT
Not After : Jun 19 14:22:36 2026 GMT
Subject: CN=6a2c162d-4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:65:50:a2:f6:8e:7f:70:99:12:23:aa:b9:
98:76:d9:a4:a2:f0:48:74:d9:f7:b4:bc:4c:c0:fe:
7e:78:d2:17:fa:d7:1b:2a:7a:e0:ec:d9:e1:1d:23:
bb:46:20:20:1b:71:aa:cb:0b:d3:da:8f:da:38:10:
ee:65:ee:e7:6c:81:20:2d:81:cd:73:bc:98:af:29:
a1:ea:a6:95:87:4d:51:eb:5c:3d:e4:53:80:c5:6b:
af:26:3c:50:83:71:60:6e:ac:dc:dd:b6:a4:c2:3d:
b4:e9:00:8b:70:28:42:70:8b:f9:0f:37:b5:cf:9f:
5c:14:6b:b5:04:86:f9:d1:80:55:ba:c9:c5:07:5a:
d0:3f:90:80:bd:70:7b:4a:84:d9:19:d4:a9:98:25:
6d:02:36:a4:e2:4e:5b:94:63:f1:4b:69:e9:2d:4d:
2d:13:1a:57:a1:01:dd:15:e0:92:22:23:81:f4:40:
5e:e0:45:f2:b4:d0:43:60:5d:ba:96:b2:6a:88:93:
02:d8:a4:3f:87:af:69:d8:53:78:cf:9b:a1:e2:55:
e7:e7:a1:3a:77:55:5e:2b:fc:1d:f2:76:43:a2:ba:
a6:a0:37:2c:46:25:ae:67:28:78:e9:47:b1:e1:15:
64:84:e5:e8:7f:b9:87:24:8c:d8:c7:20:15:09:53:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:96:1A:7D:5C:F4:FD:4D:D1:AF:E9:2E:A0:5F:2F:7B:3D:38:3C
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:75:93:ee:ed:ca:c5:be:32:65:9c:3a:65:6a:a1:98:99:
10:4c:f4:e0:ea:de:a0:cf:e7:71:ed:d2:90:3e:58:30:ae:ce:
57:ee:cb:ea:32:9e:ce:66:b4:41:2e:94:3f:eb:8d:aa:b6:4a:
ae:fb:a2:a8:f2:91:df:ee:11:72:bb:9b:4a:28:44:58:5d:48:
09:1f:ed:ba:1c:9f:e3:c5:bd:a7:bd:db:36:6c:fb:bb:3a:b8:
c0:58:ec:17:b7:8d:47:d5:45:2b:92:1e:9c:5d:d5:67:f3:7f:
c8:cb:d7:d4:ed:a9:8e:17:12:0f:1b:ab:e7:0e:fa:3c:c4:84:
fe:8c:36:b8:03:e0:37:9f:8a:a2:a5:f0:16:f4:9d:21:e4:72:
08:7b:63:ec:3f:9c:31:e4:f1:f6:93:c1:45:4d:7d:e1:41:06:
02:4c:b9:c4:60:50:cb:04:7d:8e:68:90:74:bb:c9:80:59:bd:
84:bb:69:c5:78:10:3f:dd:d9:38:10:55:da:e8:03:e2:fa:b8:
83:c4:91:af:ff:22:98:72:a7:30:9e:72:1d:61:df:13:15:2f:
c2:8f:be:bd:a7:3e:30:a1:bd:54:92:ab:8f:6d:d6:9a:20:54:
99:19:8b:c1:0f:03:40:34:5f:db:14:01:a9:20:26:aa:08:6f:
47:27:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:21 2026 by rpki-client