
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier: lZ9fhzOEs/daACr8gUCUz2nI/HNlIWynPnFOTtmlr6w=
Subject key identifier: D0:D9:BE:7D:53:39:43:32:2B:EC:14:A4:D1:D4:E9:D8:1E:87:89:5F
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0CC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number: 0CB3
Signing time: Fri 12 Jun 2026 18:32:14 +0000
Manifest this update: Fri 12 Jun 2026 18:32:14 +0000
Manifest next update: Fri 19 Jun 2026 18:32:14 +0000
Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: CVs7mNZ11cPqR8tDT1RIe7X+jsOcizUeA5ZekkwxV8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: Jun 12 18:32:14 2026 GMT
Not After : Jun 19 18:32:14 2026 GMT
Subject: CN=6a2c50ae-f17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:55:1c:e7:8c:ac:76:85:69:0c:da:fe:42:
9c:46:ef:00:0a:53:41:cc:81:39:a5:61:7a:39:08:
df:9f:59:08:2a:09:4f:9a:b1:43:d2:b5:2f:5c:9f:
eb:fd:ae:b2:84:5c:4f:81:54:f0:b8:a7:91:0c:38:
e1:6a:fb:e6:88:68:5f:63:b0:cd:a7:81:84:7e:55:
80:dc:2f:63:6a:c3:6e:3f:7e:a1:ad:ca:7f:7e:81:
be:17:99:8f:25:aa:02:98:8e:c7:0d:fe:93:c0:5d:
52:86:f1:e3:68:97:fb:56:34:f7:08:90:01:ae:28:
6f:57:b1:e6:7d:13:1b:9a:99:d2:39:a6:fd:ee:a9:
46:cb:05:e7:cc:01:0a:ae:28:d4:fd:3b:f2:b5:17:
ac:17:b3:9f:cd:db:65:c8:da:65:38:39:81:d1:b9:
71:70:31:b4:6a:c9:46:de:6c:fc:a7:c9:72:df:71:
a3:6b:b7:38:61:ad:f8:b5:67:c8:e4:6c:a4:6e:4e:
23:9f:35:d3:bb:34:52:54:b5:c9:2a:4f:ac:7c:c6:
91:58:19:86:c0:1e:74:c6:bb:f7:c2:0f:0a:50:4d:
20:e6:02:5f:1c:eb:78:e8:b7:e4:7d:4d:49:d0:d7:
ad:b5:02:03:ca:84:8c:24:d4:e8:af:33:c5:a0:93:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:BE:7D:53:39:43:32:2B:EC:14:A4:D1:D4:E9:D8:1E:87:89:5F
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:7c:96:61:d2:fe:be:d4:17:ff:2d:aa:f3:01:f5:02:20:
d3:a0:2b:7a:ac:ff:c2:c4:a5:c8:75:45:16:96:42:65:62:89:
8f:f1:d4:e1:86:f5:1b:18:b7:26:d6:a5:1c:8c:9f:03:63:58:
8b:b9:9e:ff:ec:ec:66:b8:31:48:3c:90:2e:eb:fa:62:e6:01:
e7:bd:05:45:ec:6a:75:6f:73:7e:15:51:9e:69:3b:a2:b0:1a:
4b:0c:73:aa:9e:94:54:bc:ca:58:7a:c4:64:b6:a2:b4:03:94:
71:e5:ea:8c:f6:d9:2b:4a:29:a5:11:9c:4f:2f:0d:a1:4d:19:
29:80:c8:13:9a:65:ff:f1:a4:ab:42:0c:33:a5:11:25:f8:16:
54:c7:88:72:1c:4f:bf:ee:dd:c0:6f:ec:1a:5b:c0:00:ec:83:
f1:62:8c:76:58:f0:bb:f2:25:e9:d6:14:52:8e:a7:43:66:b5:
b4:f2:39:17:8a:30:63:ec:7b:7e:3b:e7:f4:7d:78:94:e3:8e:
e4:94:27:62:74:1a:c2:39:16:ed:37:26:d9:f9:0a:8d:7d:e1:
17:11:61:07:55:55:aa:29:83:96:4e:0a:43:b9:6f:70:43:98:
b9:64:5c:6b:02:18:78:f2:57:3f:58:8c:cb:c7:5d:49:af:fd:
a7:6f:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:15 2026 by rpki-client