
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File: anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier: jv/isVaQabUHQa8oTL9ZqvhZ/74uwGWi0LR8nXDOq3I=
Subject key identifier: C5:1B:39:91:CB:CD:2D:7E:F7:2B:91:4F:24:E3:B3:A9:25:64:93:20
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number: 0246
Signing time: Fri 17 Apr 2026 02:18:12 +0000
Manifest this update: Fri 17 Apr 2026 02:18:12 +0000
Manifest next update: Fri 24 Apr 2026 02:18:12 +0000
Files and hashes: 1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: 3+6jK9Jf5bwKCKUt8SyT6kQ/es71bg2gyx+PfEfxl2I=)
2: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: 4rmMZ5t23VO8ejFWSTFjV36ZadTIJQMCkdvXDJQtEk8=)
3: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: TAeUlSS/3SuXhVXoQ+jDKJP2E5hO1fIx1p84HRUh3ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Apr 17 02:18:12 2026 GMT
Not After : Apr 24 02:18:12 2026 GMT
Subject: CN=69e19864-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:4c:46:b2:34:d4:b6:f7:f4:f5:9a:22:f3:
62:2d:3e:9c:74:6e:86:58:96:08:5f:9b:0f:7f:f4:
9e:66:69:a0:cd:c5:c3:a2:c2:6e:c0:51:9c:59:2b:
e2:1d:6f:55:fe:36:d6:1a:ce:fd:f0:38:5e:5a:47:
f7:27:f2:cb:f1:55:e3:0a:62:80:2e:a2:b0:e2:2b:
9a:7f:f6:30:26:b6:df:6c:1f:42:c2:6e:ef:84:43:
ef:2f:25:39:fb:1f:0f:d8:fb:0c:8e:04:25:f8:95:
80:65:c8:a6:bb:93:43:72:03:9b:c5:3b:60:cb:51:
30:fb:62:62:44:b8:00:da:98:f9:f0:0c:95:17:0a:
01:74:cd:89:f2:10:80:ef:35:82:f3:63:a0:e0:9f:
35:4a:f5:5e:7f:17:29:9b:2f:1d:7b:5c:9c:5a:b0:
61:33:66:ed:4b:7e:ea:07:86:da:9a:c4:c2:b8:f0:
ed:84:60:3e:12:4e:b9:15:58:39:a2:2b:b7:c0:21:
cc:33:9c:64:8e:93:9e:51:4b:14:95:f6:18:b8:b2:
11:40:90:97:16:3e:e0:4c:41:10:02:43:45:e6:bd:
7b:84:be:ab:ed:51:c6:6e:8a:f4:89:4a:ff:c9:27:
af:05:9e:e9:f3:f3:6a:92:54:ba:67:a0:97:78:8f:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:39:91:CB:CD:2D:7E:F7:2B:91:4F:24:E3:B3:A9:25:64:93:20
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:48:69:92:6c:10:27:9e:4f:11:e8:5c:5e:32:ca:e8:be:
09:eb:19:84:bb:8d:8d:ef:e0:52:9f:21:67:a8:f9:f5:e2:52:
5d:a1:01:f6:a1:a9:f7:e6:65:dd:ae:26:2f:6d:2f:26:a3:15:
d5:d5:55:e2:ef:e4:92:9e:30:3a:7e:24:bc:32:56:2d:82:6b:
73:dc:f4:68:17:26:24:80:5e:e1:22:4e:28:e8:62:e1:ea:74:
62:73:d0:a2:a9:ce:aa:17:b5:10:39:43:69:9a:df:01:bc:28:
ba:c0:f5:f3:ad:58:5b:f9:48:76:ec:b5:93:7f:ea:6d:56:77:
e6:36:62:43:41:9d:5e:ea:e3:a0:6b:2a:ae:de:d4:be:d7:81:
8b:3b:e1:ae:af:2e:5f:62:de:8a:76:77:29:e4:d8:b6:09:ef:
cb:e8:57:34:12:3d:a6:ab:26:b7:6a:89:02:41:28:cf:7a:33:
0f:f1:42:89:0d:b8:1b:a0:a9:b4:64:0e:9f:5d:88:5e:d7:a0:
a8:7a:2a:7f:75:78:b6:25:8f:7b:ae:03:61:4d:33:09:7d:5a:
62:83:1f:c7:13:b4:04:19:c6:8f:91:d2:18:d2:fc:c3:f3:7e:
b5:f2:05:17:2e:20:b0:77:f5:00:2b:72:8c:f9:1d:c1:f6:ff:
de:9a:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:23 2026 by rpki-client