
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json)
Hash identifier: 841U2IQAkXq4dGFYkt0C+5mANSuuHWcEihb0+E6gYOA=
Subject key identifier: 1C:BC:35:A0:74:39:48:D9:64:DA:A5:56:B3:FF:44:BF:D7:D0:DE:1E
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
Manifest number: E5
Signing time: Fri 17 Jul 2026 07:40:57 +0000
Manifest this update: Fri 17 Jul 2026 07:40:57 +0000
Manifest next update: Fri 24 Jul 2026 07:40:57 +0000
Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: OQ/Cq6WPiErLbYJD4+CShwYQaRrrpzZuZSlV4lLK0fA=)
2: F1940290212911F087425013C4F9AE02.roa (hash: NSP5l5+eNpdcnjjUfE6okCursO8SeCUkkL+HJPhpBAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Validity
Not Before: Jul 17 07:40:57 2026 GMT
Not After : Jul 24 07:40:57 2026 GMT
Subject: CN=6a59dc89-be90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:cc:73:f3:5f:bf:75:ca:a7:1a:72:b3:89:
a2:15:68:89:42:e7:c5:a0:42:7c:47:da:a3:89:39:
b6:34:2d:dc:57:b9:d3:37:73:3a:8a:d0:10:b9:80:
76:d1:37:1a:55:64:ce:06:82:5e:fe:ee:94:a2:89:
cb:ad:a3:f7:16:fd:fd:b1:6e:63:66:0c:20:31:92:
2c:1a:07:ce:82:fd:e2:1c:11:4f:b1:9f:d7:41:cf:
73:8e:97:95:a5:be:bd:6a:f0:aa:3a:7b:33:28:a1:
58:a6:c3:87:a4:ee:d2:d8:b9:0e:95:b5:b3:89:0e:
f6:64:f7:e9:2e:96:db:ff:d3:41:a2:a3:3c:f5:48:
b8:70:f7:fe:ee:48:fc:47:76:a7:dd:a0:cb:73:e5:
0a:99:ae:27:03:dc:44:51:ca:2e:56:4d:55:79:6e:
ca:17:24:3e:c9:a7:5a:c7:f5:a5:57:e6:83:9a:6c:
50:4b:5d:2f:97:00:7f:cd:32:ab:c1:91:cf:f1:43:
c9:58:15:46:e8:6d:c1:32:ec:c7:f3:16:68:5e:66:
76:03:ed:13:8e:76:e4:91:3f:34:06:5d:ac:28:c7:
d8:bf:ab:60:e8:cd:91:15:07:93:cc:d7:2b:3d:c1:
6b:c5:33:46:99:5c:cb:83:a4:dc:bd:0a:f8:91:61:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:35:A0:74:39:48:D9:64:DA:A5:56:B3:FF:44:BF:D7:D0:DE:1E
X509v3 Authority Key Identifier:
keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:b6:ea:fb:5b:e2:43:f6:c9:6e:58:53:b7:eb:70:bf:15:
b1:e2:52:d1:d3:ed:35:fd:88:bb:ab:a7:9f:cc:f3:73:da:fd:
c6:da:b8:95:a5:21:03:58:eb:8f:04:3d:84:67:7e:0a:e5:1d:
9e:1c:5e:9a:a7:7a:55:21:df:c1:95:8e:77:20:31:67:75:d4:
de:ed:d8:ce:8a:ca:c5:cc:07:dc:a7:02:c5:30:7f:36:27:1e:
1d:4b:b5:e1:18:87:9b:76:bd:ce:1e:66:53:5d:f4:b3:61:5e:
40:bb:c8:f0:88:0c:20:94:c5:a0:fa:6c:94:81:b1:fb:1b:10:
2b:3d:cd:c9:7b:fa:42:a1:34:47:4e:8d:10:58:fc:d4:2c:04:
77:35:3d:17:1c:d7:7f:85:37:84:26:3b:54:6e:f5:1e:5a:9a:
96:0a:8e:05:eb:d2:24:2a:4b:b9:75:e2:8d:27:2c:35:35:95:
b2:d0:6f:c4:c0:0d:28:72:19:32:bc:6e:6c:c4:ab:99:68:b5:
21:fb:14:15:c8:f4:79:a6:3b:74:3f:a1:3a:d2:c4:36:f3:e0:
8c:3b:f2:18:72:6c:28:29:42:b5:08:c0:9b:f7:09:1a:38:00:
84:79:d6:ca:f6:fe:7f:be:b0:0e:1b:b7:5b:90:a7:c6:06:14:
d8:d7:87:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0
RURDQzUwNTMwHhcNMjYwNzE3MDc0MDU3WhcNMjYwNzI0MDc0MDU3WjAYMRYwFAYD
VQQDEw02YTU5ZGM4OS1iZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BvMc/Nfv3XKpxpys4miFWiJQufFoEJ8R9qjiTm2NC3cV7nTN3M6itAQuYB2
0TcaVWTOBoJe/u6UoonLraP3Fv39sW5jZgwgMZIsGgfOgv3iHBFPsZ/XQc9zjpeV
pb69avCqOnszKKFYpsOHpO7S2LkOlbWziQ72ZPfpLpbb/9NBoqM89Ui4cPf+7kj8
R3an3aDLc+UKma4nA9xEUcouVk1VeW7KFyQ+yadax/WlV+aDmmxQS10vlwB/zTKr
wZHP8UPJWBVG6G3BMuzH8xZoXmZ2A+0TjnbkkT80Bl2sKMfYv6tg6M2RFQeTzNcr
PcFrxTNGmVzLg6TcvQr4kWHHzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBy8NaB0
OUjZZNqlVrP/RL/X0N4eMB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx
MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUEwNS80REMxRDkyNjIxMjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngz
bTRzVjJVZWtiVTlPM01VRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARu+26vtb4kP2yW5YU7frcL8VseJS0dPtNf2Iu6unn8zzc9r9xtq4laUhA1jr
jwQ9hGd+CuUdnhxemqd6VSHfwZWOdyAxZ3XU3u3YzorKxcwH3KcCxTB/NiceHUu1
4RiHm3a9zh5mU130s2FeQLvI8IgMIJTFoPpslIGx+xsQKz3NyXv6QqE0R06NEFj8
1CwEdzU9FxzXf4U3hCY7VG71HlqalgqOBevSJCpLuXXijScsNTWVstBvxMANKHIZ
MrxubMSrmWi1IfsUFcj0eaY7dD+hOtLENvPgjDvyGHJsKClCtQjAm/cJGjgAhHnW
yvb+f76wDhu3W5CnxgYU2NeHrQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:13:40 2026 by rpki-client