
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: bIZVPcDLPi7n3WgK0kzQeRSeDYYTP3Sukjl9Zy7+YN4=
Subject key identifier: ED:00:EA:4D:0E:F4:4E:A0:B8:A6:B5:9F:C2:43:DD:98:FE:5F:E9:75
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 0182
Signing time: Sun 20 Sep 2026 22:56:56 +0000
Manifest this update: Sun 20 Sep 2026 22:56:56 +0000
Manifest next update: Sun 27 Sep 2026 22:56:56 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: J+pmjCB8fWG2Hq5vEWuFvmJ+PN/Ke61GBUtsWoOA+gM=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: aeq83y3UDmIZ+hHdv0UR/7vvLe8gLWVcHYM4gtGf+AA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: Sep 20 22:56:56 2026 GMT
Not After : Sep 27 22:56:56 2026 GMT
Subject: CN=6ab064b8-397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:03:f5:bc:fc:54:4f:ab:b5:91:35:8a:71:
2d:64:26:87:09:5a:38:fa:89:3a:90:06:9e:fb:24:
ae:0a:93:ba:24:84:7c:c7:2a:53:4e:b8:26:8a:03:
4d:71:bd:81:b0:1a:35:f8:0b:8b:c6:1a:58:6f:d9:
86:75:74:ee:34:5e:d5:c1:21:df:a5:10:27:4f:f9:
c2:69:8b:b3:4e:a0:e2:6f:64:30:ae:51:e5:8d:7d:
ed:33:68:c9:a7:05:7f:fc:9e:99:2f:eb:7b:0f:41:
32:3b:b1:3b:9f:32:13:79:67:99:5e:73:30:99:27:
62:76:82:25:88:bd:1c:ca:ce:fa:41:33:d7:e0:53:
4f:1d:40:94:58:1b:fc:43:08:10:16:00:96:d9:9a:
ae:e4:5f:0b:3a:3c:2b:1a:0b:17:a4:d2:f0:45:8f:
ef:c6:cb:79:95:5e:6a:84:14:d1:f0:dd:3e:1d:06:
8e:07:7e:04:5d:9f:66:a9:3b:1c:71:94:a2:41:89:
73:6b:7c:02:b9:69:ae:bc:52:6a:e1:91:9b:14:6e:
7d:d5:8c:72:c9:c8:72:74:57:b9:fa:7e:78:57:ca:
97:61:88:14:59:ab:52:b6:89:49:34:d5:b4:36:cc:
95:98:f8:4b:13:33:45:c2:35:9b:cc:3a:97:1a:3b:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:EA:4D:0E:F4:4E:A0:B8:A6:B5:9F:C2:43:DD:98:FE:5F:E9:75
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:0f:31:ad:03:36:07:cc:e4:58:7f:7a:be:ca:e3:e7:fa:
86:81:a3:66:93:da:08:d8:5d:a8:e5:c9:74:18:b5:e7:87:74:
f8:c3:52:45:20:2a:9a:04:ea:7a:19:c5:76:36:0b:4b:03:5a:
62:90:ae:38:da:74:c3:93:ce:78:28:79:06:41:60:f5:d4:37:
bd:81:25:4e:4e:3b:3a:22:e4:75:03:f7:92:16:49:98:3d:11:
c9:d4:fa:71:2f:a1:c3:bb:0c:54:3a:f4:9d:d1:49:4e:e6:57:
9d:28:e8:ac:20:29:7b:d6:32:4d:a6:d1:a6:41:a8:1b:58:db:
cd:20:79:6f:47:fc:8f:57:68:01:b2:e6:11:70:c5:20:40:1f:
75:8b:f1:bb:dd:19:cf:88:2f:f4:4b:6e:ea:71:c0:ae:29:44:
e4:06:4d:63:30:b6:e4:14:06:0a:43:00:b1:fc:bc:f4:3d:fd:
b6:3a:94:eb:90:98:8d:a2:a2:f2:ea:66:02:12:bf:20:eb:14:
78:c0:49:9c:10:ee:39:b6:fa:fd:65:cf:79:9c:1e:35:3f:b0:
ba:05:dc:d0:e0:34:fd:94:e4:1d:0f:fe:1a:4a:12:38:17:36:
33:83:e7:19:b5:46:6d:cf:3c:1b:cf:e2:ed:a0:b5:2d:ad:aa:
ff:7c:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:07 2026 by rpki-client