
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: pU0y8EOWJ3ZDX6jiduXEALsYCjPrj2Zm5RQpqzcLVW4=
Subject key identifier: 2D:75:1C:6D:A8:45:B9:1A:3E:83:FD:36:64:0B:3D:62:95:8E:8D:3C
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 0A18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 09FC
Signing time: Fri 12 Jun 2026 19:52:05 +0000
Manifest this update: Fri 12 Jun 2026 19:52:04 +0000
Manifest next update: Fri 19 Jun 2026 19:52:04 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: HuNj45Oezno06mpquphY4KUK/vFKeJg3balYPnaeIlw=)
2: D3EAA0323F5A11F1AA7533B3A4833773.roa (hash: EWIgC3Wx3EH+woWoBUJtb6p5aUIWmHrjOLQsDMOov48=)
3: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Jun 12 19:52:04 2026 GMT
Not After : Jun 19 19:52:04 2026 GMT
Subject: CN=6a2c6365-bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:00:8c:06:7c:ed:77:8f:09:e8:3d:1f:5c:
50:56:68:a1:ed:79:27:c0:49:7e:78:c8:90:42:18:
f5:29:8f:06:bb:aa:95:71:d0:13:c8:f5:22:a0:b2:
19:fb:2e:63:67:d5:44:7e:e8:f8:dd:e0:c2:30:3b:
84:ba:67:ac:54:a9:40:b3:be:88:63:db:be:97:cb:
a7:99:3e:07:05:ec:da:97:00:5e:d1:31:35:e7:8a:
12:10:a6:8f:3a:4c:67:b0:26:bf:c7:ae:73:68:39:
8a:3c:a6:12:2e:25:27:71:a7:0f:40:89:e8:f0:6c:
86:62:3b:60:2f:76:5b:cd:e4:25:c5:1f:81:be:ef:
77:3e:fe:8f:cf:50:9c:0f:d8:62:69:3d:9d:1c:57:
20:6c:0f:80:54:8d:16:ca:db:a6:42:a3:b8:54:53:
4c:4f:0e:93:7c:a2:c4:6c:12:15:25:35:72:74:57:
2b:d1:0b:09:6a:ca:67:66:98:de:55:0f:80:56:ad:
e6:80:10:c6:63:bf:d6:6a:bd:16:58:69:6b:24:62:
15:d1:1a:13:48:b2:77:27:4a:57:e8:2b:5a:91:88:
51:48:ff:43:f0:8b:4e:7f:d9:3f:fd:a5:10:92:d2:
f8:a8:0d:12:93:4e:a6:03:4e:af:2d:61:c3:c3:57:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:1C:6D:A8:45:B9:1A:3E:83:FD:36:64:0B:3D:62:95:8E:8D:3C
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b6:ae:14:69:c2:23:7b:85:7b:a0:04:32:83:ec:7d:89:85:
c1:19:77:ae:02:2b:a2:5a:90:b2:12:8c:5d:af:7d:fd:34:34:
bb:7b:92:cc:8e:b1:0a:ea:a4:88:30:8c:b1:ec:90:95:a3:d0:
78:64:53:14:cd:06:a7:93:a4:98:4d:3d:5a:46:a8:a3:8d:c2:
36:67:1a:6b:d9:ee:6a:64:83:0b:42:73:78:a0:4e:fa:0c:02:
f7:77:55:9b:a1:31:d4:fb:07:3e:45:af:36:f1:15:86:b1:e3:
59:ab:42:68:35:1c:a4:d9:02:d2:e9:66:93:a7:4d:d1:b5:2c:
81:82:3e:c8:d1:a9:4d:e9:ec:ee:9f:23:a1:71:3f:e0:d7:ee:
69:b4:b7:8b:4b:75:09:88:92:0d:b7:ab:63:45:40:00:38:ce:
47:f7:25:c7:a5:2b:fa:5d:b1:60:d5:f5:20:22:01:f6:c8:65:
05:6a:32:b3:06:3e:bb:5b:bd:a6:fc:00:1b:89:52:dc:93:ff:
3a:cc:59:b0:28:ae:0a:bc:78:5c:9b:9a:cf:87:72:b6:df:06:
51:fe:89:0d:78:a2:84:37:bd:66:18:0c:f2:21:d9:8a:1f:0d:
d2:fd:f6:87:45:65:2c:7f:ea:31:2e:24:c9:94:83:53:4e:0b:
f9:85:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:18 2026 by rpki-client