
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json)
Hash identifier: +JpHANG9vXAS7P+MsH1ssyyfW3tam7OYAUEwDmtSKbY=
Subject key identifier: E6:1C:91:1A:90:D3:4A:AB:03:DF:C2:31:6F:D4:CF:E0:39:B5:5D:8B
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial: 1F72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
Manifest number: 1F55
Signing time: Fri 12 Jun 2026 15:58:51 +0000
Manifest this update: Fri 12 Jun 2026 15:58:50 +0000
Manifest next update: Fri 19 Jun 2026 15:58:50 +0000
Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: w/7KsUF9XlI2y19rs1ZhA519vEKPhSuAXkfjGt0JnT8=)
2: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: ZQGkVblUeaBQpEuqoVPq5XzQKgpGACzTE5sIWyJcuEI=)
3: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: 7/gwqGUBAOb3hEJ8slgdeW3dddqMQy1lCsCPeg2AjSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8050 (0x1f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Validity
Not Before: Jun 12 15:58:50 2026 GMT
Not After : Jun 19 15:58:50 2026 GMT
Subject: CN=6a2c2cbb-58c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:3a:9e:3c:1a:48:42:8d:b0:29:07:a1:85:
7c:79:41:06:4e:ad:ba:93:2d:ad:db:93:88:6c:67:
c2:2e:0b:b1:10:16:4b:fd:df:24:4f:65:44:e2:8a:
82:be:97:c3:d0:1e:4a:73:fe:f3:d9:a3:88:66:e5:
05:82:5f:c5:fd:9f:4d:3c:0b:c2:0f:46:f3:d5:d6:
a7:74:f3:58:60:b9:6d:87:18:4f:a7:21:2e:cc:5f:
5f:d1:ef:ae:2b:97:3a:85:e6:22:c4:c1:25:63:d8:
07:f1:83:07:9c:17:31:45:0b:24:10:cd:02:0e:91:
38:d0:8c:7b:06:cd:10:15:10:c0:c4:06:91:eb:b4:
89:33:43:22:0e:4a:e0:03:bc:c1:c5:82:b1:5d:50:
98:82:a1:58:48:05:94:43:e0:a9:6d:b0:93:9d:37:
25:07:15:0a:40:c5:53:60:82:92:58:ee:1a:09:a8:
2b:f2:02:60:b5:9d:bd:1b:23:39:ed:fb:d5:ef:e0:
bf:89:1b:cc:a9:59:77:ca:57:92:4d:1b:8a:b8:8e:
ea:1f:3e:0c:4e:9b:9e:43:77:7e:fa:8b:55:7c:72:
f6:ea:54:ed:b9:3c:ad:d8:a7:49:31:57:0e:96:f4:
32:c4:aa:42:57:b2:2d:df:9f:e5:f7:55:bb:c1:fa:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1C:91:1A:90:D3:4A:AB:03:DF:C2:31:6F:D4:CF:E0:39:B5:5D:8B
X509v3 Authority Key Identifier:
keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:61:9e:83:da:20:e6:d4:52:81:c1:43:3e:b4:44:b7:8e:d9:
8e:e3:91:0e:77:2b:9d:22:b4:3d:46:3b:80:f8:26:c0:77:43:
fc:3d:c0:a2:21:8c:b1:66:f5:c0:8d:fd:6c:c3:cc:71:c8:89:
b4:ca:1b:60:a7:35:c0:21:3e:f8:74:56:f4:cb:a2:b1:02:40:
2f:83:05:8e:48:ad:c1:08:b4:cc:ed:48:a5:a0:8c:1d:9f:12:
d0:4c:3b:91:66:b8:01:a0:15:a9:50:9c:5a:a6:10:9f:e3:3b:
a0:9a:d6:77:f5:fd:19:04:00:ac:34:71:49:a9:3d:7b:38:c2:
73:11:0b:f2:75:8d:e1:e9:13:46:a5:25:63:93:fb:16:51:08:
f5:dd:3f:54:9d:54:be:4b:da:2d:23:f8:84:31:d9:08:b5:99:
54:87:37:38:e3:71:05:f3:59:13:b5:c1:5b:77:27:a0:8d:c4:
ad:07:14:9b:6b:8d:94:cd:05:27:c5:b8:05:cf:22:ee:8d:16:
49:b6:8b:22:42:06:68:b3:44:6c:3a:77:90:83:86:97:51:71:
d6:dd:d1:12:53:f5:bd:80:12:af:95:64:08:51:e8:c9:ce:0e:
10:70:ff:0e:c5:5f:75:7f:c1:fa:07:46:28:92:c9:54:93:4e:
99:d2:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:49 2026 by rpki-client