
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: QhltYUk9ZNiTU6C4t3jFsowt+XDr87RILtX/b+RMs/o=
Subject key identifier: 5C:25:79:F0:B5:4E:D7:7E:BC:A6:3F:48:A6:9F:9C:45:B5:1A:A2:6F
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 09E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 09C5
Signing time: Sun 01 Mar 2026 23:45:00 +0000
Manifest this update: Sun 01 Mar 2026 23:44:59 +0000
Manifest next update: Sun 08 Mar 2026 23:44:59 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: YWIb6I0k1kxr1ucxhbaRjkbfzhRVq03jj+b1Mc7kBTg=)
2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=)
3: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: Xp6J4EN8UBByITq+gCFf5DSbouyROjD+ka1UZdn7rcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Mar 1 23:44:59 2026 GMT
Not After : Mar 8 23:44:59 2026 GMT
Subject: CN=69a4cf7c-39b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:88:54:6f:5f:4d:62:67:48:97:3a:18:11:
05:09:44:f6:2c:2a:8f:ab:f7:63:0c:01:e2:ad:91:
eb:c7:99:7e:6a:ca:f9:0c:83:19:6c:81:75:f3:11:
26:d2:25:28:83:f6:f5:de:28:72:c4:6a:09:c9:3f:
73:88:b9:e5:6f:bc:56:a6:29:9e:0d:c9:3d:f2:04:
50:a3:64:27:b8:ff:de:40:17:ad:4d:7b:10:fb:f8:
d5:c0:49:8c:bf:d6:af:8a:c1:08:d8:eb:77:02:00:
38:93:38:34:b7:e5:f5:a3:2e:aa:4a:23:07:a4:54:
d5:e3:f9:a0:10:5d:1d:9c:d5:fd:9e:69:84:d8:59:
87:24:7d:06:8d:44:08:13:4d:96:05:e1:b2:1b:4d:
c8:c8:71:24:fa:89:ed:88:4b:a7:9e:48:69:94:9f:
72:b8:50:e6:04:b1:cc:99:e4:d3:34:23:c5:e8:7e:
e8:98:af:22:e4:34:45:e8:15:2f:6f:19:77:cb:e7:
17:fc:3f:14:63:eb:7e:a3:c5:3c:5f:3f:87:90:8d:
0c:87:03:50:0a:34:e1:36:e4:ae:a8:1c:a9:f8:d9:
ea:be:0c:0d:7c:50:20:55:00:c6:5b:41:64:aa:7e:
ee:17:be:1c:3c:c2:3b:ed:26:b9:ca:db:a8:fe:74:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:79:F0:B5:4E:D7:7E:BC:A6:3F:48:A6:9F:9C:45:B5:1A:A2:6F
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:b9:c9:21:34:3f:a8:c0:97:17:b8:cc:e0:d7:8a:38:7c:
d8:6a:3e:4f:71:db:d4:d8:f7:24:c6:fa:4a:db:24:64:0a:3e:
95:c9:f0:ec:5c:4d:b1:52:03:32:be:50:cb:22:d9:ef:af:a9:
d5:bc:f7:0f:ef:38:2e:0e:21:4c:c0:0d:d5:f2:95:6b:4a:3e:
f9:05:03:e7:14:f1:86:66:20:d8:f7:17:5e:83:fe:1a:bc:ba:
af:5f:a8:fc:44:49:61:b4:2e:25:4b:7d:3c:35:83:21:43:60:
58:e1:ba:6f:83:80:73:24:40:42:f2:1c:b4:6a:f5:7d:92:4f:
18:51:1a:88:b4:a1:a4:3c:b9:d9:21:c2:c3:37:0b:b6:2f:58:
99:0b:62:9b:00:08:e1:12:1a:8a:05:4c:d1:f6:34:12:01:c4:
d1:28:bb:a2:a3:81:32:9f:84:ba:07:9d:94:3d:ee:3d:73:b2:
18:6d:ea:51:8e:0c:fd:d3:af:53:f5:47:88:5a:ce:ac:5f:2a:
36:9d:04:a1:89:a2:5f:0c:69:9e:ac:6e:3c:74:17:3a:75:1d:
80:ca:59:37:5c:6c:66:14:94:b2:2d:65:d2:25:58:19:c2:66:
51:65:d4:4d:e0:53:c4:ff:d4:46:96:ab:4f:20:98:6a:db:8a:
ea:6b:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:55 2026 by rpki-client