
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: CQ6CnXDf4nIS3jVlEi6ae+Sp+b5OICRnnQNXZMhOYiM=
Subject key identifier: 3C:AD:D6:C6:8B:A9:E3:AF:08:70:E0:FC:5C:A1:92:F8:CA:5D:6C:BD
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 0164
Signing time: Tue 28 Jul 2026 23:49:15 +0000
Manifest this update: Tue 28 Jul 2026 23:49:15 +0000
Manifest next update: Tue 04 Aug 2026 23:49:15 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: FMv3v7x9XRhFmoMb+JnA9/KzQOxpKhjDwjZW1klJRYM=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: Q2bBWQkMnv2ryibhtyKcKnbpBqQPJlfX2lDfvclSTKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: Jul 28 23:49:15 2026 GMT
Not After : Aug 4 23:49:15 2026 GMT
Subject: CN=6a693ffb-a759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:61:21:5c:f6:9d:75:be:0e:ea:3c:fa:a8:
f6:62:11:8b:85:2d:fb:77:d8:41:a7:4b:b8:a4:a1:
08:fd:48:c4:c3:77:8b:37:82:d9:4e:cf:f1:aa:ec:
2c:f0:a4:13:8e:7f:9b:f3:0c:41:1b:b9:12:74:69:
37:68:a1:9f:4a:7d:be:23:c4:8c:3b:b0:65:5a:ac:
dd:7b:21:24:b1:5b:99:e9:b1:b9:37:67:37:b9:8f:
63:e6:6b:af:b0:41:dd:a0:d8:d2:fa:28:01:3d:89:
4c:0e:ea:fa:91:32:8b:b8:dd:dd:e2:b4:46:c2:1e:
25:1a:a9:27:e8:5f:03:df:b7:d2:e9:c1:f3:b8:9a:
c6:50:1c:87:8a:ba:37:6d:e2:4c:82:5a:97:da:f8:
02:e1:01:df:3d:e1:3c:5e:b4:2a:27:2e:c7:99:b6:
78:ed:ee:88:8c:93:2f:eb:24:64:ba:f4:01:37:a4:
34:8f:ad:f2:83:16:ec:5c:48:a0:4a:f0:d4:34:de:
30:20:51:1b:18:0d:38:a4:95:72:ec:b0:b8:04:ba:
f8:e0:f0:55:6d:4d:1e:49:a7:a2:f6:ee:f5:be:b5:
05:2b:d8:0b:6f:8f:30:c2:42:d2:ea:0f:81:e7:66:
ee:34:32:fb:eb:ed:f1:0d:ab:04:c7:12:b0:c6:31:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:D6:C6:8B:A9:E3:AF:08:70:E0:FC:5C:A1:92:F8:CA:5D:6C:BD
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:84:24:d7:29:7f:d4:b0:73:a7:62:4b:ba:8b:a8:37:ef:
d2:1f:98:5f:35:bf:f4:40:0c:3c:12:1b:97:eb:c9:e3:e4:c8:
dc:7e:48:1a:70:b5:05:36:7a:1c:7e:f5:9c:a0:ff:b3:30:b8:
0f:94:64:46:dc:fb:14:bb:f2:3a:7b:b7:10:e2:2d:39:cd:8b:
e9:08:bb:6e:14:b0:4c:d9:1b:2b:3c:63:4e:0a:fe:8f:b4:bb:
24:e3:49:39:bd:ab:80:dd:d7:cc:48:e0:87:e2:bd:6c:3c:69:
71:18:4f:f1:7e:53:9a:be:ce:7a:90:09:3e:33:c1:98:70:b7:
09:dd:ca:16:a2:ce:af:d5:70:18:46:eb:e8:d6:67:27:c5:17:
bb:35:b8:5a:33:90:dd:4d:0a:bf:80:fe:6a:ad:ef:0a:86:1f:
aa:45:db:46:57:67:ff:2e:9f:db:e7:5b:fd:2e:1c:49:72:f4:
9d:b2:ff:8c:e1:9d:55:6a:b1:96:ff:c2:ef:24:c7:7e:6b:af:
b5:e1:b5:45:da:13:dd:bc:96:b7:a9:cb:1a:42:66:f8:8b:f0:
be:c5:b6:7f:f8:34:e7:ec:8f:82:d8:00:2d:cb:3c:01:e1:4b:
f7:3c:ed:06:9e:03:ef:91:33:a9:34:61:43:89:fe:14:03:5a:
06:2a:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:57 2026 by rpki-client