
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json)
Hash identifier: 1/LvWDxOOeg7l+qandu/a4D2VqeLRriJMdwANd7duN4=
Subject key identifier: A5:29:FE:15:F8:D2:3B:BE:AF:5E:C4:49:3B:3E:AA:64:CB:E5:4B:2F
Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
Manifest number: 01B5
Signing time: Sat 13 Jun 2026 04:00:10 +0000
Manifest this update: Sat 13 Jun 2026 04:00:10 +0000
Manifest next update: Sat 20 Jun 2026 04:00:10 +0000
Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: N3o2F0O3npVIxTgcYVwV1BXsknvkiykLv2v6qtQHT8A=)
2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 7DlAURl7K2EyYXCsMTrF23T5auNxyW4sqWbcdHgz/XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Validity
Not Before: Jun 13 04:00:10 2026 GMT
Not After : Jun 20 04:00:10 2026 GMT
Subject: CN=6a2cd5ca-8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:65:8d:c2:d3:8c:52:12:11:61:6a:0c:46:
38:33:34:71:7f:57:72:47:12:78:c0:97:66:ea:70:
11:3b:55:41:d5:52:1e:e9:93:7c:f9:56:fc:f1:48:
8b:ea:32:f9:c2:db:11:73:e6:e8:95:d5:d1:07:25:
0c:3c:78:68:48:52:ab:7b:18:db:d1:85:ff:f0:b5:
34:7a:1a:ba:77:7a:98:b9:7f:e4:20:de:53:ae:e2:
24:ef:b1:30:bd:1c:80:ed:cc:94:81:a8:b4:d3:9c:
a6:52:9f:23:45:e8:f5:a7:d3:93:c6:13:7e:cd:f1:
9b:1e:88:54:a4:d0:91:d0:34:83:e0:e2:0d:38:27:
3c:d3:2f:b2:bf:52:cc:f8:2b:c3:78:f0:09:74:9d:
ad:66:2b:39:56:38:cd:90:05:04:3c:bc:1c:a9:9a:
71:18:fe:d6:b5:0b:c2:7c:d3:4b:87:c8:7b:7a:85:
7d:5b:3e:c9:f9:a5:1d:58:b9:37:f2:70:df:83:28:
c3:b0:46:cc:23:f7:c5:6a:22:05:44:5d:4e:ba:bd:
b5:3e:75:e7:e5:6f:77:20:70:2a:8b:dd:6a:ab:f3:
72:5d:ce:50:ed:9f:d1:0c:e7:69:95:80:aa:8f:9b:
40:7a:c1:1b:70:87:0d:60:da:53:5a:c4:60:e9:7b:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:FE:15:F8:D2:3B:BE:AF:5E:C4:49:3B:3E:AA:64:CB:E5:4B:2F
X509v3 Authority Key Identifier:
keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:90:6d:40:cc:4c:4f:b7:5e:01:83:56:c7:1c:b8:98:69:1a:
29:59:70:cd:d5:ff:08:39:5f:b3:5c:3c:9f:fe:16:2b:9c:63:
5b:07:9e:de:94:a7:27:fc:91:6d:7e:08:55:0c:f5:4f:18:6e:
01:87:6a:dc:34:b4:c6:d8:3d:ac:8a:0a:8b:75:90:a2:27:ab:
cd:2c:4c:ab:34:97:3c:ad:b9:7a:69:80:ba:72:75:97:b2:99:
99:49:4d:34:99:7d:0d:c6:5d:b1:89:a3:a5:22:52:fa:b4:c2:
2c:d4:72:5e:1f:2d:54:f2:c8:fa:dd:ef:c2:f6:63:4f:74:cd:
dd:a8:69:46:13:e6:c0:25:60:2f:5d:65:49:0a:03:6d:f8:07:
64:5f:28:fd:94:a1:e0:f7:f8:19:31:5f:45:2c:13:e1:90:54:
9e:18:96:54:15:d6:64:4c:42:79:a3:1f:10:ff:9f:51:7f:e5:
ae:5e:c1:21:2b:97:65:7c:df:f7:51:cf:32:5e:eb:dc:e4:1c:
3e:16:04:10:4e:b1:5a:4d:24:9b:96:df:8f:43:1a:27:ff:31:
3b:f1:67:11:cb:23:b2:03:65:37:bf:e8:12:8b:c4:9f:8a:ea:
4d:2f:5c:73:7a:7f:36:b3:02:25:03:98:96:29:c6:8d:7d:85:
6b:97:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:58 2026 by rpki-client