
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: QQxqA++fr3+QgNjJFt3u8rrROhIdJviJxY/3ScZBLPQ=
Subject key identifier: F5:42:1E:11:C0:0F:F1:B3:A7:CA:58:2E:CA:F6:8D:04:A7:FA:29:6B
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 05CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 05BF
Signing time: Thu 24 Sep 2026 22:57:08 +0000
Manifest this update: Thu 24 Sep 2026 22:57:07 +0000
Manifest next update: Thu 01 Oct 2026 22:57:07 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: FgPFNpWTJv27nnyx0WmRP0UDbNTR2ajS8NPwPwigIWs=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: iC5os5vddQmmGDYKqQ64QyRuxbvGKmCbZ5ebEZb5rTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Sep 24 22:57:07 2026 GMT
Not After : Oct 1 22:57:07 2026 GMT
Subject: CN=6ab5aac4-b809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:43:b7:5a:df:d1:bd:f9:e6:f3:f9:9c:9f:
c8:1d:e6:4b:76:f4:5f:cd:80:11:c2:21:e6:04:60:
f4:21:fc:aa:38:ac:f6:e0:28:5f:e7:a7:7e:ea:b1:
81:30:40:73:46:23:dc:af:cc:43:c9:50:11:c7:4a:
2d:a4:60:45:59:61:a1:fe:89:eb:c0:6a:1f:98:8d:
fa:8b:9f:10:9d:20:07:54:bb:75:6f:2c:0a:bc:7c:
4f:4a:64:98:90:ef:1a:da:97:26:e4:34:c0:4d:e1:
bc:aa:a8:55:da:76:7c:95:05:45:2a:9b:9d:85:09:
09:15:39:e4:b7:b7:74:8e:ba:23:0b:45:8b:99:86:
b3:b1:ed:ad:6f:f3:6e:0d:8c:a3:c2:db:79:f6:7e:
39:44:25:0e:15:7c:b6:8f:f6:bd:00:90:ef:ff:6a:
90:2d:1f:05:97:f6:aa:26:7f:f0:8d:e5:09:74:3e:
b8:72:02:9a:40:b2:c9:34:ed:09:56:ea:9a:f6:30:
08:30:10:cb:87:a5:f7:15:da:5f:e4:f9:31:8c:f1:
bd:6d:af:82:aa:84:c9:ec:ac:f1:fa:1a:b9:6f:8e:
5d:ad:01:a1:fa:fe:3d:b3:13:4f:ed:08:36:f6:54:
64:f6:4f:99:cb:9e:09:12:8b:35:38:25:cb:1c:3b:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:1E:11:C0:0F:F1:B3:A7:CA:58:2E:CA:F6:8D:04:A7:FA:29:6B
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:a7:16:dc:5a:5b:6c:77:ae:d5:19:43:7d:04:ac:fc:bc:
97:76:27:e4:ef:c3:68:e9:d4:70:76:e7:fe:9a:e6:6b:7b:d7:
52:60:cb:a7:7e:f9:c6:7b:94:fc:29:73:87:d4:61:2f:86:56:
d0:06:4a:67:b1:28:22:ad:7e:8e:54:bc:e9:a6:2d:f2:10:13:
88:0c:8c:0d:be:78:0e:c6:f4:11:1b:59:55:98:49:1e:e3:46:
f3:0c:5e:13:56:40:47:88:3d:95:4f:27:82:4d:8f:85:80:0d:
33:34:ef:ba:c0:e9:06:ab:ef:89:3c:bb:db:a7:d2:c6:ce:c5:
69:b7:4e:0f:fa:ec:fa:be:4c:81:a1:cf:bf:3d:fd:49:6d:d0:
3b:1d:62:52:aa:75:bc:71:30:e7:b5:0a:e7:58:23:48:a4:5a:
6c:84:19:c1:9f:d3:88:a8:21:32:82:2c:a0:2d:b7:ef:8a:6d:
97:28:b6:22:0f:5e:fb:2f:04:72:66:30:53:1f:ee:0d:0b:00:
ca:ec:bb:00:69:d5:63:86:5c:3a:7a:c1:6f:10:74:7e:fa:ad:
58:ed:d5:24:e6:d6:fb:ca:50:48:a2:d6:8d:ea:06:f4:35:03:
65:12:69:3b:4c:cc:6c:1f:0a:20:37:59:7f:e5:38:e5:e7:c0:
ae:37:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:29:42 2026 by rpki-client