
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: BdBktA8me/D+gS9CIXnA0Ny2G7Jogg6x5VBzNT1kSuI=
Subject key identifier: 65:C6:1F:1D:9C:9A:C3:EC:22:A0:11:08:2F:C7:F6:5E:AF:C3:9A:9B
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 0147
Signing time: Sun 31 May 2026 23:56:01 +0000
Manifest this update: Sun 31 May 2026 23:56:00 +0000
Manifest next update: Sun 07 Jun 2026 23:56:00 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: WGLn4vNbnpOAQfO3uRIYsRlX4hHIsdM/02xMgrZRa48=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: Q2bBWQkMnv2ryibhtyKcKnbpBqQPJlfX2lDfvclSTKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: May 31 23:56:00 2026 GMT
Not After : Jun 7 23:56:00 2026 GMT
Subject: CN=6a1cca91-0906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:4c:e0:b2:ce:2d:2b:fe:ff:e7:c4:9d:96:
36:71:45:73:39:06:c7:5a:91:3a:e4:9b:6e:fd:80:
c6:e1:16:f6:d0:b5:bc:f0:be:fb:96:f4:05:67:6e:
18:ff:7b:7c:cb:ee:e9:fa:b8:c9:69:e2:10:7d:dd:
00:f9:9b:c1:29:2b:18:36:56:1b:aa:cd:06:f2:a2:
45:26:68:4b:85:0f:fe:9e:59:f1:49:ed:aa:a2:23:
32:5a:12:83:69:6a:dc:38:81:c9:15:75:65:f5:d4:
bb:56:0c:ff:16:a8:49:1d:4e:de:a4:11:6f:5e:07:
14:0b:8f:ba:d2:84:2e:27:4d:9e:72:84:0f:c1:36:
92:fb:46:fe:e2:a1:e1:b1:70:14:09:c8:02:fd:56:
47:72:cd:0a:05:43:30:00:c1:c7:00:7b:27:04:06:
06:14:45:65:d9:cd:21:1b:d5:13:11:59:07:1a:49:
f2:89:73:8e:16:3a:e2:59:90:2a:0d:c8:08:78:e8:
50:38:6f:44:ca:7a:e6:c5:7d:40:54:5c:bc:3d:0b:
ef:19:f1:b5:86:a0:93:20:1e:b2:d0:e5:86:e6:be:
83:23:78:1e:7e:44:0f:29:88:32:18:2f:f4:59:7c:
8d:ee:cf:70:99:c6:7b:56:cf:0c:2b:00:92:b5:9f:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:1F:1D:9C:9A:C3:EC:22:A0:11:08:2F:C7:F6:5E:AF:C3:9A:9B
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8e:87:27:83:1f:0d:82:1a:77:72:f2:20:de:90:9e:06:24:
f5:17:cc:21:2b:c3:cc:bd:9a:92:31:e8:3e:04:2d:79:d4:5e:
43:d1:32:93:b5:62:16:4c:f2:45:ca:75:3b:f1:bc:fd:83:1b:
7e:ae:7f:43:d3:25:31:90:4d:d4:60:92:39:8f:ca:0c:e5:ba:
34:a5:1e:f0:01:fb:34:bb:21:a2:e0:47:68:30:42:2c:4e:ac:
03:4d:4e:f7:c7:b9:87:db:8e:5e:ff:39:c4:37:a5:86:dd:c5:
6d:60:28:90:a8:c9:b6:f5:8e:ad:d3:86:97:19:99:25:98:79:
74:55:14:bd:c4:74:d4:bc:a7:3c:fa:f0:89:5b:8f:66:aa:e2:
f7:9b:34:d6:ed:db:08:34:c3:e4:67:5a:f1:94:a8:cc:e0:1d:
e6:15:7b:e1:3d:49:3d:6d:e9:db:f8:1c:bb:3f:2d:a1:4d:13:
11:63:93:26:af:9f:da:6c:17:9f:8c:de:57:e9:e5:e9:06:94:
34:ee:ef:be:9a:c5:a5:60:63:14:44:0f:94:9b:96:59:0c:c0:
af:9f:62:de:52:40:03:35:6f:89:57:ae:7e:7b:a7:d0:17:c7:
be:1c:75:d1:12:38:38:ac:19:07:11:10:a8:fe:75:04:ad:47:
e1:92:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:37 2026 by rpki-client