
$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: G33rWjQksTTq5yx4ZB5DxBYHZ2jG2P6RgyJFvT2Oo/Q=
Subject key identifier: 03:8D:F9:DC:D7:59:F6:60:2F:AE:CB:62:3B:37:61:EA:F7:75:20:52
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 087C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 086C
Signing time: Wed 20 May 2026 20:45:43 +0000
Manifest this update: Wed 20 May 2026 20:45:43 +0000
Manifest next update: Wed 27 May 2026 20:45:43 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: FMsstVLrHK/LjlcavSl8lcHduxUcU7ParJyfibbm4es=)
2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=)
3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: May 20 20:45:43 2026 GMT
Not After : May 27 20:45:43 2026 GMT
Subject: CN=6a0e1d77-721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:7b:39:67:e6:3c:83:29:db:cf:3e:31:d8:
c5:fa:9b:19:a3:a0:c9:b6:16:fc:3b:c5:d3:0a:5f:
e5:d8:f3:da:10:20:72:51:44:bc:27:18:2e:2a:0a:
2e:fa:6f:fc:05:4d:0c:7e:67:91:3a:f2:da:49:d3:
0e:a2:5a:db:32:0e:75:f8:c3:cf:0a:3f:10:8f:fa:
cd:23:69:d2:ed:17:d3:6f:7d:54:76:22:45:8b:3a:
80:8e:13:54:4a:f7:0d:e7:5c:5d:0b:0a:89:e0:dd:
f0:f3:d7:36:7d:bb:24:ae:41:fc:36:ce:bc:66:13:
0f:b3:dc:a0:de:19:78:84:c6:cf:f1:6f:ec:7f:a2:
5b:30:5a:63:8e:c5:88:e6:b2:79:09:4b:1c:94:0d:
35:50:fe:37:2a:0f:8d:cb:00:0e:76:7d:83:4b:c8:
e7:a1:22:d7:b8:33:8d:0c:e8:0f:b8:30:da:fb:2a:
2f:03:be:1e:7a:6d:de:83:7d:20:a3:8a:fa:1a:61:
18:3a:83:e9:0a:1c:c0:9f:f5:7c:40:6e:d0:50:03:
59:77:c7:cd:a5:f1:46:c3:de:d4:8d:cd:4b:f3:42:
bf:1d:2a:d9:99:f4:89:60:42:6e:11:26:7b:de:58:
d9:36:42:56:98:f9:1d:61:62:73:39:13:aa:9d:1a:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:F9:DC:D7:59:F6:60:2F:AE:CB:62:3B:37:61:EA:F7:75:20:52
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:0d:ec:22:52:a7:c5:18:f4:00:94:f9:94:93:01:a1:1a:
4e:4a:11:1b:de:b7:0b:4a:28:94:1a:72:a1:15:6b:44:8c:21:
0b:77:c3:e7:a9:bd:ed:e9:6a:64:aa:15:b8:ae:83:a0:cd:74:
57:a6:88:83:ac:d9:52:c4:4f:7b:54:97:3e:51:e6:8c:7d:be:
e1:a6:ee:a8:bc:65:f0:d2:05:d4:be:66:32:88:a1:b8:e8:c5:
f9:c1:c8:cf:ba:57:60:27:3e:de:84:f0:42:33:ce:e7:a9:97:
52:1e:1b:c5:d8:81:e7:15:70:46:68:a6:56:03:27:a5:5b:e6:
f9:4f:31:bc:94:28:25:08:ad:77:59:af:3a:03:ae:61:d1:9b:
2d:ce:18:41:0c:f7:60:91:c7:5d:21:cd:6d:1e:02:3c:93:5b:
e6:f6:b4:a6:59:22:f9:f0:50:d8:92:4e:22:11:1e:ed:d6:14:
34:03:27:9d:60:74:fb:d3:ea:61:54:05:7d:55:98:ef:41:bf:
88:39:50:db:ae:49:46:50:60:d0:1c:e0:27:39:10:4b:06:b7:
81:e6:a6:19:f0:aa:36:33:20:64:96:d4:8a:41:bd:99:58:96:
21:89:55:55:94:af:82:26:fb:4f:31:04:8d:23:d7:c3:31:61:
3a:0b:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:19 2026 by rpki-client