
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier: 3YZ8QrkWCYQoom4sw93AWVpoUqxMtmbubJ/NH89KIXI=
Subject key identifier: 3C:C4:A1:D8:FF:66:F7:F7:4C:1C:66:64:43:FB:EE:43:6E:8B:CF:8D
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial: 0903
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number: 2826
Signing time: Wed 20 May 2026 16:16:56 +0000
Manifest this update: Wed 20 May 2026 16:16:55 +0000
Manifest next update: Wed 27 May 2026 16:16:55 +0000
Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: tdEDulg78XzQhqQvG6imHtxzwrCBpHMc6/jatcNrSEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Validity
Not Before: May 20 16:16:55 2026 GMT
Not After : May 27 16:16:55 2026 GMT
Subject: CN=6a0dde78-a5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:31:2e:47:a7:e2:9b:9e:4e:0a:14:97:2a:
8c:98:ce:3b:98:58:b4:0d:23:d0:0b:8e:a7:e9:ed:
59:ed:7b:3b:6f:b8:b0:52:50:d0:eb:3f:34:1b:9a:
71:bf:28:8c:dc:fd:bb:54:40:c6:73:df:4e:78:2b:
4f:5b:71:2c:19:db:56:7a:ef:d0:9b:50:22:f5:43:
a3:21:cf:1f:98:1b:60:c9:0c:c1:2a:4e:33:9f:56:
13:98:e7:ea:f9:2b:10:9a:24:ac:ac:35:96:03:29:
af:2f:1f:25:e8:60:62:6d:65:51:95:79:12:8c:99:
43:87:66:00:3e:96:ad:a0:bb:9c:34:89:04:5b:2a:
df:f0:1d:54:65:87:da:3f:9c:7e:4a:65:1c:e7:53:
d2:9d:eb:62:ea:cb:85:5b:fa:48:03:c6:e6:75:08:
7d:63:d1:a0:3b:dc:bf:12:d9:3c:b4:49:e1:a9:1f:
6e:eb:d1:ba:26:c1:ad:e8:f6:d7:f6:16:4c:68:54:
0a:fe:2c:07:43:fa:4c:30:77:f4:41:34:6e:75:f7:
92:3a:b7:fc:6e:38:cf:f9:aa:59:ce:95:9f:82:ea:
1f:3e:82:ad:40:b4:ac:48:c1:e6:45:1b:cf:f2:3d:
5f:85:5f:83:05:4f:65:a6:03:39:64:45:1a:bb:fd:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:A1:D8:FF:66:F7:F7:4C:1C:66:64:43:FB:EE:43:6E:8B:CF:8D
X509v3 Authority Key Identifier:
keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:5b:ce:49:98:c2:a7:e1:32:03:2a:b4:4f:d3:16:1a:a4:
25:81:e9:16:e1:dc:19:88:00:36:cd:11:c9:52:9a:30:4f:83:
03:7c:63:7d:45:2b:92:d6:9a:30:57:ef:f7:73:2a:15:3c:98:
5e:09:d4:3c:de:a9:b8:a4:59:16:b8:54:27:1f:00:02:41:78:
d9:9e:ba:1d:4c:cd:84:40:e8:20:02:4e:c0:a8:f4:95:ae:ad:
e5:64:f0:19:16:53:3d:db:b9:a7:e2:19:d5:2f:87:a8:3d:46:
63:df:97:d2:cb:07:35:69:cd:53:e4:6b:33:95:06:50:3f:1b:
7d:3d:61:b9:a2:96:fb:24:23:a4:cd:5a:af:1f:a7:b8:bb:2e:
c2:68:4d:21:d9:98:d8:bd:6f:11:c4:55:b4:e1:e1:44:49:22:
b6:c6:37:d0:e3:27:62:0c:9e:6b:3f:79:42:4e:b4:17:20:6b:
fb:09:c3:04:a5:39:e9:e4:ed:8f:3c:8a:d0:b2:49:a9:46:d0:
cb:90:96:18:16:4e:0b:aa:86:46:10:93:a3:1c:19:6d:ce:18:
17:27:1e:98:59:36:85:d2:40:d1:c6:1b:b8:40:be:f9:a1:4a:
c9:63:ce:2f:f5:9a:7b:b2:a8:d2:b6:8f:b3:ac:8b:90:15:17:
b2:0e:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:16 2026 by rpki-client