
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: i531nj9B1JKDEq3TALobrxcwspFpuiVyPKiic0oRuh0=
Subject key identifier: 44:85:13:8D:20:DE:B7:DE:64:89:98:2F:95:28:3A:EA:EB:81:B9:41
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 058D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 0582
Signing time: Sun 31 May 2026 23:56:04 +0000
Manifest this update: Sun 31 May 2026 23:56:03 +0000
Manifest next update: Sun 07 Jun 2026 23:56:03 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: pYjQuLSD7VFYIbQsF/TUVrNKgvGGdFFfXlsfcjtCSTA=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: May 31 23:56:03 2026 GMT
Not After : Jun 7 23:56:03 2026 GMT
Subject: CN=6a1cca94-022d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:2a:6d:71:60:12:65:b8:53:59:12:b5:3d:
a8:48:48:44:99:46:dc:69:f5:b8:9f:f7:f6:9d:5e:
6a:6f:88:a9:22:a7:e0:84:f5:55:7c:34:da:b7:fa:
83:81:77:91:6d:55:77:98:57:87:fb:58:80:d6:ff:
8c:d6:f5:b0:35:90:92:2e:b7:1c:76:69:08:c5:ec:
e5:92:8f:69:c9:23:e3:c6:3d:48:10:ad:59:71:8f:
91:8f:54:f3:74:eb:ef:92:b3:d7:98:21:57:a2:65:
ba:3c:0d:92:9e:d0:9e:65:c6:78:c6:51:12:38:9a:
bf:f3:71:87:24:6b:cb:c9:77:d5:e4:53:e2:c3:3b:
4c:43:c3:c9:15:ca:1d:ca:c6:8e:33:c9:b6:30:14:
ea:27:81:20:8a:c9:99:a9:f7:6e:49:e9:bc:b3:81:
ce:23:de:9d:04:30:bf:e0:cb:96:4e:c7:ac:5e:73:
2d:70:d2:d1:e8:69:5c:82:e0:18:5e:d1:eb:ad:a4:
80:4a:a4:00:be:12:b6:e1:5e:33:e0:4a:9a:12:91:
db:d3:33:80:db:83:d1:3f:ab:46:d8:da:aa:b9:d5:
88:dc:5a:ed:52:e0:f3:58:cc:56:51:89:5b:56:3e:
2c:09:11:24:f6:2f:86:06:45:d6:8c:5a:34:69:dc:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:13:8D:20:DE:B7:DE:64:89:98:2F:95:28:3A:EA:EB:81:B9:41
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:80:ca:68:e7:7c:08:6c:8b:80:88:94:fd:a1:e7:37:e5:e7:
3f:a7:88:db:2c:46:e8:21:b9:a3:f4:8c:93:e9:2c:67:05:95:
3e:ad:e6:82:8c:02:23:4f:d9:f1:d0:62:72:35:2c:a3:ba:6e:
f3:5d:6e:d4:08:a5:10:2b:82:ed:6f:a8:8f:9c:ea:ff:34:60:
68:68:ac:e6:e4:e3:4a:cf:32:60:0d:b3:60:1a:c3:30:71:45:
50:4a:2c:ad:ba:ed:1c:25:37:62:24:9b:f2:83:6f:25:53:f7:
1e:1a:98:1d:88:16:01:28:12:a6:1b:26:0a:ea:bd:1e:35:3e:
60:c6:47:0c:5c:51:e1:fe:d8:8b:78:0a:60:99:51:45:f9:3e:
3a:2c:d4:e0:46:1e:2d:67:75:29:d1:1b:92:b0:1a:89:06:f6:
9a:c6:5d:98:5b:92:da:8d:36:ad:71:9a:6d:c1:a7:a5:a6:fd:
bc:ba:df:88:b6:45:61:39:ea:0b:ef:2a:e5:40:55:87:4b:e1:
be:59:5f:f7:10:1d:62:1c:43:f5:31:38:b0:2f:ff:e3:de:70:
56:27:29:58:ca:c7:4d:c5:65:21:7b:fa:79:71:7c:24:2b:ee:
f9:50:39:ed:59:e1:36:b5:bc:f3:e2:4a:62:96:5d:00:49:1a:
d7:a2:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:20 2026 by rpki-client