
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: QwDeI7fC/GS1xkc/pEKFufvtTbDtfn8w5TLug829pT4=
Subject key identifier: D9:D9:8F:C7:C0:F4:F8:0B:8C:39:1D:3F:38:9A:5C:6D:79:DE:9E:4B
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 09DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 09C3
Signing time: Sat 28 Feb 2026 20:13:26 +0000
Manifest this update: Sat 28 Feb 2026 20:13:26 +0000
Manifest next update: Sat 07 Mar 2026 20:13:26 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: b76BgbJSk1JcGrhhTNBvEIJF2z8BlqAZXZGILpo6LI0=)
2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=)
3: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: pRika4Tu0KmadmyWesTU8YrrTwZ2/MD++nUBvNTu4zA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Feb 28 20:13:26 2026 GMT
Not After : Mar 7 20:13:26 2026 GMT
Subject: CN=69a34c66-96d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:8f:1f:7b:05:9e:d0:0d:09:8f:ca:51:db:
d7:a3:5f:60:55:2a:21:0b:6a:ad:dd:9e:52:11:0c:
80:69:81:ba:01:ee:73:d1:50:94:34:74:76:c2:33:
c1:1c:06:18:f3:ad:55:07:f6:0d:ed:09:a0:72:e9:
13:df:8a:64:0b:cc:09:44:a6:17:7d:02:f5:0c:e5:
34:5c:06:50:07:25:ca:53:f2:d0:5d:e0:10:b1:d1:
81:fa:59:03:2f:ed:35:cd:2e:15:87:38:58:29:5a:
f3:4a:2d:4c:28:90:ed:bf:e9:04:b6:38:3c:ae:34:
24:e5:4d:01:52:20:d8:2a:fe:fe:08:9d:0e:f1:6e:
6c:ee:33:31:45:b6:eb:0b:44:60:4e:a1:b9:4b:18:
a9:04:d3:59:ef:e7:fa:e1:34:64:5d:ee:69:2d:57:
8f:73:6e:dc:3a:5f:da:38:b8:15:ad:ff:93:d4:f5:
95:f2:5d:91:70:82:2c:e2:b6:1a:d9:01:ab:e2:d0:
12:d6:a4:95:7a:27:7e:e1:3a:49:57:df:f4:05:fe:
65:7e:f9:b8:a6:bd:6b:34:a3:b4:0e:e0:c6:89:44:
a7:c2:d4:7c:70:7f:fe:6b:de:b2:ec:4b:22:12:58:
8d:62:5d:86:ff:a8:ec:e4:82:04:b3:f7:69:c0:26:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:8F:C7:C0:F4:F8:0B:8C:39:1D:3F:38:9A:5C:6D:79:DE:9E:4B
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:52:bd:5d:50:39:e0:f0:59:35:a6:a4:95:d3:51:af:96:9b:
56:c2:37:0e:e6:9e:a1:12:ad:94:c3:3c:ae:5e:e0:aa:19:ff:
5e:03:c5:53:bc:12:b7:94:d4:be:58:ca:b2:44:4f:76:5e:b7:
eb:04:fa:f4:80:10:de:a8:99:4d:20:02:d2:72:f7:46:d7:fa:
93:6c:06:da:f9:c6:97:3b:4a:fc:dd:5b:50:3f:49:f1:a0:a4:
5e:e9:d8:03:be:84:41:67:3c:f3:02:c7:fa:66:5a:e8:36:b8:
bd:25:38:42:29:b5:a3:ad:63:c1:a7:a1:42:c9:a5:93:a4:89:
e8:28:5e:61:30:ba:6b:50:9b:1e:2c:54:bc:fa:0b:13:ce:8a:
ca:ce:ed:28:8e:d3:30:d4:35:6d:a1:e8:13:c7:d7:58:e4:a9:
53:9c:64:fe:2c:05:c2:e3:dc:84:f2:39:9f:b8:5b:05:9e:c2:
54:76:92:81:84:76:73:54:8b:f0:50:a9:10:15:3f:6f:7f:e9:
6d:b3:ca:dc:6d:9b:33:27:e6:54:20:a1:b2:3d:41:b2:03:3c:
0f:a5:a3:b3:2a:10:60:be:77:d5:42:b3:42:28:29:9d:72:67:
57:96:f7:21:56:77:45:b5:e4:4c:0c:e7:a6:41:3f:6b:44:99:
92:ca:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:06 2026 by rpki-client