
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json)
Hash identifier: OQDGp2AyhQq0TnndWJfs/5YGiGsACziqMpA78UrD2MA=
Subject key identifier: 5F:BE:DB:22:1D:E8:AE:D2:B5:DC:84:D2:5E:7E:82:6C:70:A8:50:4E
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 08E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
Manifest number: 08AC
Signing time: Wed 20 May 2026 20:35:37 +0000
Manifest this update: Wed 20 May 2026 20:35:36 +0000
Manifest next update: Wed 27 May 2026 20:35:36 +0000
Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: FPwzH1atBuOZ4javZAoAepWIkmGicINmv6Oatta7S2s=)
2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: enRJxihzGDKlwH32sa2QER4m7NIQqKEvGoMLqlIsbII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Validity
Not Before: May 20 20:35:36 2026 GMT
Not After : May 27 20:35:36 2026 GMT
Subject: CN=6a0e1b19-847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:c8:0a:34:78:b5:e0:37:07:67:62:61:37:
e8:d9:d9:b2:37:9c:bc:bf:11:e5:a3:6a:47:54:9e:
b2:f1:b5:62:0e:5c:89:bd:7f:bb:4e:7a:cc:dd:27:
78:ea:70:89:c8:5c:0a:27:32:80:87:c2:9d:dd:1b:
89:5e:2f:36:22:ce:3a:52:d1:8d:de:5b:21:92:00:
c5:0e:31:19:9f:29:0f:1a:d3:21:54:7f:61:b7:66:
c0:05:83:cf:9c:ea:44:21:42:de:69:02:7a:23:e9:
3b:b4:d9:ad:38:60:8f:6c:a3:e6:8a:72:d4:9e:9a:
3b:e0:99:aa:91:75:3d:dc:2c:6c:43:25:d2:55:01:
1c:33:3a:51:17:69:d2:a7:2e:7d:27:47:6c:24:07:
83:0f:93:a8:b8:f4:80:23:d3:cf:c5:20:86:59:20:
7e:41:7b:7e:d2:d8:9c:09:14:9c:01:9f:22:86:5d:
cc:57:43:2c:ec:3b:d8:53:d1:7d:87:23:3a:e7:5e:
de:91:7c:0b:73:7e:e1:23:8f:57:6f:84:0e:5e:08:
47:41:ab:b7:ba:5d:37:82:aa:b4:6f:a1:13:de:1f:
0d:b4:0e:4c:a1:c7:10:c4:f2:68:27:e5:0b:dc:64:
28:9e:bc:29:a5:a8:4f:f5:a2:6e:40:41:a0:98:f4:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:DB:22:1D:E8:AE:D2:B5:DC:84:D2:5E:7E:82:6C:70:A8:50:4E
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:5d:ab:28:b1:f8:4e:a2:0b:82:7c:20:a0:dc:7d:57:e1:
4a:19:ea:ed:0f:5f:41:0f:89:52:9e:2d:15:28:43:a3:6f:b1:
8d:9e:43:62:81:b6:ad:83:b9:82:fc:b4:74:c4:ee:eb:63:9f:
56:a5:60:8c:84:7e:c3:2c:de:d8:f7:37:dc:ff:2b:c6:26:66:
d0:5c:5d:dc:77:2e:60:c0:44:72:13:c1:96:e0:60:18:8d:95:
5d:d3:40:db:a8:aa:db:6a:43:7e:8a:78:2a:7e:5d:c8:79:73:
29:46:94:a7:32:79:d6:ea:51:fb:08:16:0c:39:06:73:b3:83:
9c:7d:2a:a2:92:a9:f9:ce:b5:d8:4f:be:ab:08:35:a8:86:12:
a0:77:33:cd:ef:9b:84:20:da:5c:4f:5f:64:38:bf:00:13:57:
e9:b3:be:63:8a:51:d3:84:4f:e0:89:6b:b0:80:92:c6:5d:3e:
93:36:56:ec:1c:50:a8:82:b2:93:ac:d8:3f:3a:c7:ce:c0:da:
55:4a:ab:fc:74:ad:6f:9a:0d:81:e9:2c:ba:9a:af:52:65:e7:
60:1d:6b:b9:c4:44:6d:28:3d:c5:3a:6d:6d:a7:36:cb:2c:a4:
4f:f9:30:92:d6:c6:5d:b7:71:2d:95:f4:b8:5e:f9:b4:32:8e:
0f:49:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:50 2026 by rpki-client