
$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json)
Hash identifier: fOkVn3n3Nz4uX81vtD3VyaZFzN3IDDiArnShLngQyMk=
Subject key identifier: 4B:46:A2:EE:4A:3F:29:77:8C:B6:F0:58:28:D4:49:41:79:7D:14:E2
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial: 0AD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
Manifest number: 0AC0
Signing time: Tue 14 Jul 2026 19:43:50 +0000
Manifest this update: Tue 14 Jul 2026 19:43:50 +0000
Manifest next update: Tue 21 Jul 2026 19:43:50 +0000
Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: 4yWOSzLUAEss5kiwC1A77CxkpA2Zg2ey6dVuHkl1LDM=)
2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: To2SD2tNBDc4eW/OhRZGvUrX6miaNNQeREHTTJIGg6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 19:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Validity
Not Before: Jul 14 19:43:50 2026 GMT
Not After : Jul 21 19:43:50 2026 GMT
Subject: CN=6a569176-74ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:95:57:41:5c:c6:74:db:5c:de:b5:bb:69:
08:c6:e3:ad:e1:99:6d:44:e3:34:99:0a:5a:11:99:
b3:92:6a:15:fe:56:6e:71:9a:34:38:04:90:ef:14:
84:c2:a5:ee:07:45:d9:14:88:48:49:1d:89:ef:c2:
2b:6b:c1:4e:bf:dc:01:9d:3f:23:ef:7c:26:ff:90:
fa:cd:02:27:20:ad:6a:05:fc:87:e9:10:52:ec:17:
36:b0:05:b7:e9:77:47:fa:62:e0:2c:13:ac:15:d4:
da:db:ad:4a:cf:a1:6e:82:a3:f8:77:91:f1:37:ed:
9a:08:c7:ff:59:99:50:d3:50:ed:64:85:b3:50:cb:
fe:e9:c6:23:39:82:9d:04:de:b6:b9:f4:dc:75:d5:
89:75:86:16:13:1a:13:fa:13:21:28:6d:cb:cc:e8:
bd:ed:8c:1c:e5:8f:4a:46:b4:a4:02:bc:89:02:73:
6a:f2:38:dc:c3:94:40:bb:3e:1d:32:35:ab:6a:65:
7e:c9:91:26:ad:bb:74:87:ed:1d:7a:fa:f3:83:c5:
c7:14:f3:d9:7d:36:d0:cd:46:04:81:ec:a1:1d:6b:
9c:bf:19:9c:a7:f1:91:83:d4:91:ba:d9:43:c2:27:
5f:b7:8f:4c:d1:32:8a:2c:6e:de:91:11:04:19:e5:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:A2:EE:4A:3F:29:77:8C:B6:F0:58:28:D4:49:41:79:7D:14:E2
X509v3 Authority Key Identifier:
keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:d9:1c:4c:93:9b:dd:ba:92:e9:8d:04:b0:4a:a9:5a:ee:
0f:33:44:f9:68:69:b2:f0:ca:07:cd:a6:b9:c6:52:33:e8:08:
33:38:59:12:07:04:27:b3:06:86:50:04:d3:82:35:96:31:de:
1b:47:39:49:9c:a2:66:f4:bb:64:ef:59:76:6a:4f:a4:d2:19:
00:66:41:a4:5d:26:e9:c7:0d:08:f6:c7:0f:20:07:5b:11:eb:
62:f2:2f:f3:78:c4:c7:e3:bb:5a:84:15:f1:46:5f:61:87:17:
a0:10:09:e8:7f:5f:7a:7a:07:96:7d:ec:d0:fe:8c:42:49:e1:
c5:88:63:0f:e4:2b:57:67:c1:f2:5b:09:6a:de:61:e4:c7:2f:
64:2d:8b:3a:0f:36:f2:68:bf:85:54:89:ca:c7:0f:ad:0f:c7:
38:61:84:9a:ad:4c:56:d5:22:50:35:2a:f7:0d:ce:9f:30:3f:
52:19:98:a9:0b:98:a8:ff:d3:87:04:92:71:fb:c9:4d:39:58:
f2:81:b7:c9:06:18:63:cc:4c:12:c7:07:1c:72:3b:9b:aa:cc:
17:f2:14:73:eb:90:3f:44:70:75:72:92:f5:3b:16:24:56:0b:
f9:9f:ec:d1:2f:f0:1d:18:3e:fe:83:2f:d2:1b:b1:10:5c:9b:
f9:bd:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 19:08:02 2026 by rpki-client