
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier: iwtszz1MFFGM/irFq6/WDvjOCDTd4N0wWbNld5KzAow=
Subject key identifier: B1:0E:49:21:81:32:01:05:19:E9:87:2A:9F:C6:07:B2:9F:40:FE:2E
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial: 357B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number: 357A
Signing time: Sun 20 Sep 2026 15:08:22 +0000
Manifest this update: Sun 20 Sep 2026 15:08:21 +0000
Manifest next update: Sun 27 Sep 2026 15:08:21 +0000
Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: J4vL6p0+zQYaPb+2k+V4fECs4nD4BEFR/heOqcykmVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13691 (0x357b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Validity
Not Before: Sep 20 15:08:21 2026 GMT
Not After : Sep 27 15:08:21 2026 GMT
Subject: CN=6aaff6e6-22d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:d1:fe:c6:5f:f0:54:27:78:16:70:b6:40:
c4:e2:ae:cb:4d:02:6c:33:ac:d0:a6:f6:2d:b9:d3:
d0:31:09:98:68:41:c6:5a:c8:5d:32:ce:5d:c0:d4:
2e:c3:9c:77:15:f9:38:d0:dd:9a:41:56:d3:91:79:
5b:6d:cd:4f:2f:84:75:7d:e0:c6:38:57:05:52:7b:
9f:1a:f7:7e:84:6c:bb:bf:58:bd:07:89:08:50:21:
19:02:bd:1d:66:ac:a1:ef:46:ed:e2:84:d1:6f:49:
50:18:63:9e:1d:57:71:e2:fa:bd:ac:c7:96:5f:82:
bf:2a:0a:d2:52:0c:a3:3f:9e:86:46:95:3a:3f:dc:
39:4a:86:be:ec:82:db:e3:30:39:ab:fc:de:6c:0e:
0c:27:6b:bc:e0:a0:91:06:00:33:75:49:0e:c2:f5:
c0:5d:81:95:1f:d0:e4:10:96:e7:00:9d:ac:f4:e3:
7c:e0:b4:49:4e:d2:d3:3c:9d:09:2b:bc:06:37:67:
e1:49:61:f1:dc:3c:a6:48:40:65:26:71:6a:1b:11:
75:6f:b0:9b:cf:67:4c:be:f3:2b:db:08:95:62:9a:
e9:88:d1:52:32:f4:20:0a:6f:e9:f4:14:ac:a3:87:
85:6d:4f:91:35:0d:a9:37:b5:37:58:42:c8:15:73:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0E:49:21:81:32:01:05:19:E9:87:2A:9F:C6:07:B2:9F:40:FE:2E
X509v3 Authority Key Identifier:
keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c1:18:14:78:43:c1:22:17:ec:4f:fa:7c:35:8f:97:6f:6e:
6c:be:c9:c4:57:7d:f2:e8:2e:2e:98:bf:c9:f7:3d:1d:7c:57:
82:c0:eb:ac:52:7c:1c:3a:19:f1:0e:f5:ab:47:cf:59:39:3e:
dc:72:46:48:f5:9e:68:7a:ea:65:f1:9e:ab:cf:4b:3c:9c:2c:
2a:7c:3b:11:91:bb:d2:fb:a9:8f:30:e7:a2:f0:83:81:00:a2:
ca:5e:32:b9:f2:21:2d:4a:6f:95:3f:cb:6d:b1:c8:43:71:34:
69:d9:74:8b:bb:5b:2f:c6:a8:a8:9f:1b:0c:a3:fb:3c:2d:70:
78:65:37:c5:ef:2a:b4:ff:96:f9:e9:c7:2c:e6:71:15:ba:ae:
18:d0:7f:a5:8e:d1:74:44:b7:a4:92:70:a5:62:29:3b:d1:e8:
e8:ce:f5:f3:13:86:d9:be:2e:a8:c7:86:e3:8c:16:1d:c5:85:
04:6b:9e:a9:aa:69:b5:59:7e:d2:ae:61:d4:e2:cf:96:eb:4a:
ed:31:ef:1c:5d:8d:66:66:62:94:62:38:b8:9a:41:29:ef:bc:
3b:3a:1c:9a:f4:65:51:e7:b1:fc:8e:6f:76:63:81:cd:57:a5:
f4:d9:b1:36:8c:fb:39:12:7c:56:9e:d2:9f:b1:c0:32:30:52:
cd:4e:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:43 2026 by rpki-client