
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: GuU9EtI9g8D1/AU8ctiW2U2M2xmo140wEK7rILS0Hdc=
Subject key identifier: F6:5B:4A:BF:1E:3F:DD:0C:95:13:3D:34:25:90:B2:20:B9:42:8B:04
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 0A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 0A13
Signing time: Tue 28 Jul 2026 20:07:45 +0000
Manifest this update: Tue 28 Jul 2026 20:07:45 +0000
Manifest next update: Tue 04 Aug 2026 20:07:45 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: XUPWv51IKstYoNDJkUQCirsNA4YHPFlrsll5YMUEf4Y=)
2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=)
3: D3EAA0323F5A11F1AA7533B3A4833773.roa (hash: EWIgC3Wx3EH+woWoBUJtb6p5aUIWmHrjOLQsDMOov48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607 (0xa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Jul 28 20:07:45 2026 GMT
Not After : Aug 4 20:07:45 2026 GMT
Subject: CN=6a690c11-bd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:45:c5:85:e8:7d:02:ca:fa:74:fd:c3:4f:
8e:fc:fc:81:46:92:36:87:d0:dc:de:44:36:5e:84:
9d:52:33:1a:fc:05:f0:82:db:64:d4:e4:10:e9:1c:
64:4d:09:3d:9c:79:1d:a1:2d:bb:d7:c6:a7:37:d7:
06:55:3c:26:9f:94:42:c7:ca:7c:14:39:9d:a5:26:
c8:ee:c2:52:9a:d8:ed:b3:cf:9d:3d:08:85:cb:88:
0c:c4:56:fb:09:0e:dc:26:37:97:4e:ce:49:33:c7:
34:e6:c0:5a:1e:de:4c:dd:1e:38:1b:17:ad:a0:9a:
18:4c:80:31:6f:9e:d9:6e:ed:f2:d2:a9:69:76:ca:
ba:d3:c5:86:6a:27:d5:2f:2f:e0:17:40:97:1e:2a:
35:9c:45:4b:d1:2e:c8:54:7f:1f:10:44:50:ea:f5:
36:34:07:6f:d8:ab:1e:b8:ed:1a:e7:58:e8:89:50:
36:4a:68:ce:c6:75:3d:d4:82:ca:32:d3:90:ce:60:
27:80:b1:b2:12:36:dc:bc:3d:3d:e1:53:8a:38:74:
0a:bd:0c:1b:50:4d:bf:55:77:17:89:d5:f6:28:fb:
35:71:8a:22:0d:ae:66:03:76:c1:77:ae:57:d9:0a:
89:53:1d:22:45:9a:a8:66:b2:4d:36:bd:f8:9e:77:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:4A:BF:1E:3F:DD:0C:95:13:3D:34:25:90:B2:20:B9:42:8B:04
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:22:0c:65:ed:c2:f0:9e:a7:fb:85:12:ac:1e:59:65:a2:
31:ef:9b:f7:02:bb:4e:b0:76:1e:78:7a:51:d8:f2:8d:c8:d4:
9b:c4:46:c4:09:4e:7c:d6:30:fb:f8:41:e4:d2:4d:5e:6d:bb:
68:9b:d7:55:23:31:4a:c9:e7:b5:3f:01:be:ee:e2:f8:4e:8e:
99:6a:25:9f:b1:c5:47:85:79:b1:de:16:69:82:2e:2b:b8:ed:
93:b4:b5:d8:f7:e8:df:27:96:32:d6:96:62:a2:af:7d:ed:3f:
97:48:30:06:31:2a:97:74:51:1d:70:44:4b:6f:ec:d5:71:bc:
cd:06:1f:ca:6d:73:f2:d3:16:93:8e:34:07:20:ec:35:c6:28:
7f:5a:a2:61:94:f4:fa:b0:12:6a:df:1f:39:8c:ed:0d:9d:16:
cd:a9:30:98:c3:f4:86:a3:ed:9b:1e:bd:9f:22:1f:6a:5a:21:
e2:de:69:ca:bf:09:0f:6a:b0:b9:53:d2:82:4e:86:49:7f:64:
bf:fb:d0:5e:15:08:26:b4:c7:a2:cd:4d:c6:89:71:b1:e8:1c:
93:0d:b5:b7:77:44:52:22:9d:60:b1:cc:a0:f3:3e:3a:ee:40:
6a:ca:04:a8:1f:b1:9e:52:40:ab:b4:6d:ca:60:5c:5a:5c:74:
03:5d:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:01 2026 by rpki-client