
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json)
Hash identifier: xUlA9jREl2xHfbcTIJq/MGUhoSJUvDG74bUboPHotvY=
Subject key identifier: A1:67:62:85:A9:9E:EE:B9:84:3C:4F:29:08:A8:55:4F:D9:BB:DB:D0
Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66
Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
Certificate serial: 0CD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
Manifest number: 0CC8
Signing time: Tue 28 Jul 2026 18:39:50 +0000
Manifest this update: Tue 28 Jul 2026 18:39:49 +0000
Manifest next update: Tue 04 Aug 2026 18:39:49 +0000
Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: Mu9IXpwXrgcei/Yem8AOuzo6aMcn7mBhLzFW4PtG7a8=)
2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl
rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
Validity
Not Before: Jul 28 18:39:49 2026 GMT
Not After : Aug 4 18:39:49 2026 GMT
Subject: CN=6a68f775-9dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:d4:8c:da:d1:c0:13:72:3f:f6:cb:27:5f:
c8:e2:83:fe:98:ef:1d:d7:59:03:22:75:94:10:1a:
02:48:6d:1f:02:f9:49:c6:98:66:ab:5d:99:2d:9a:
49:79:76:8b:bd:e8:d8:a4:78:55:6e:ba:e4:9d:3d:
ec:03:7d:fe:e3:fd:d9:59:16:c7:9b:f1:e1:8b:9f:
e2:8b:80:f9:70:36:36:3c:55:1c:37:18:dd:c1:90:
7c:3f:b7:49:9f:ac:71:76:42:59:73:ce:36:79:51:
1c:2d:ae:4a:ef:6b:35:d4:60:2b:3e:44:c7:5d:0a:
69:09:f0:40:75:36:30:27:59:db:82:fb:8a:61:04:
4e:e5:42:a6:60:ef:87:05:24:69:10:ab:93:6c:a0:
a4:2c:32:3a:3b:4e:5f:ac:f5:8b:66:26:18:1b:a5:
57:cd:7e:e1:01:13:ea:27:1c:67:b5:36:b5:1c:55:
45:b0:b1:06:82:81:ef:05:3c:04:50:d8:fb:b8:99:
85:6b:60:41:d3:65:e6:03:c3:f1:05:44:ee:8c:33:
5c:2a:74:73:80:b2:77:e8:6c:23:fa:f8:13:52:3a:
6e:1c:32:2b:e7:a6:b6:8f:a7:13:60:dc:a3:91:fd:
09:fd:d2:fb:b7:65:01:40:11:2f:e6:79:76:00:6a:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:62:85:A9:9E:EE:B9:84:3C:4F:29:08:A8:55:4F:D9:BB:DB:D0
X509v3 Authority Key Identifier:
keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:a9:1e:e7:b2:46:e5:a4:ca:66:47:a6:4f:96:87:4d:3c:
5d:d8:bf:65:56:57:f0:b2:94:9b:d9:a4:77:01:00:ea:0d:7d:
bf:0e:ff:d6:d2:02:94:a2:86:d0:67:6e:be:01:9e:f0:fa:f4:
c7:6c:28:a0:c1:30:49:45:c2:66:2c:7f:5a:9f:dd:d5:72:28:
67:5a:09:5d:59:91:da:c9:f0:15:e1:33:b8:5e:f5:fd:c7:2c:
77:73:89:7d:a8:b5:2a:ab:70:d5:0b:20:c6:3e:38:1e:0d:56:
48:45:20:b1:c3:c6:da:df:4e:50:f0:fc:9a:44:0c:ee:85:d8:
d6:28:48:4c:71:45:0a:0a:08:93:de:fa:9e:2a:01:f5:5e:93:
54:9b:36:71:95:5b:1a:9b:e9:01:6d:59:51:8d:95:ac:84:83:
18:15:dc:72:cc:5b:0c:a1:f1:66:1b:89:d7:a5:89:4e:a5:15:
c2:c1:fc:aa:09:c2:15:d8:e7:e3:20:99:51:25:54:88:ab:ca:
48:d5:9b:7e:e2:a7:f0:0a:28:d6:f4:19:2a:d8:e4:5c:8f:37:
68:e5:e1:7d:10:8c:ad:50:55:0b:7e:12:21:40:5c:14:d6:05:
a9:41:fe:b1:bd:87:8a:36:59:2a:4f:49:bc:8c:9f:84:90:ed:
a3:e4:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:57:05 2026 by rpki-client