
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: qImUqPJf01asor+pIuE+C7ZSvXp6Fmy/QMrCXQDFZ60=
Subject key identifier: 64:B5:8E:0A:44:7B:4D:F9:82:82:56:2C:0F:D1:47:92:4C:84:54:86
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 018C
Signing time: Sat 10 Oct 2026 23:07:38 +0000
Manifest this update: Sat 10 Oct 2026 23:07:37 +0000
Manifest next update: Sat 17 Oct 2026 23:07:37 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: sHr1TV71Vjshh/2R7CyE6FxZyevgB5PrpeKnc935sT8=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: aeq83y3UDmIZ+hHdv0UR/7vvLe8gLWVcHYM4gtGf+AA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: Oct 10 23:07:37 2026 GMT
Not After : Oct 17 23:07:37 2026 GMT
Subject: CN=6acac539-c6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:bf:a3:95:41:65:41:ad:21:97:c7:94:46:
f5:72:50:6f:3c:af:b6:16:92:34:2a:4c:ab:b3:33:
6c:4f:21:56:7c:3b:a5:54:f9:ef:a6:7e:20:a8:b2:
9b:e6:a4:42:9e:19:2b:12:44:22:04:25:d4:ca:e8:
6d:c3:af:db:3a:2e:67:f4:13:38:4e:21:ee:92:c4:
77:da:f0:77:b6:2d:cb:96:56:d4:eb:f6:9b:21:5f:
2d:10:09:d9:59:c9:8f:15:a8:38:8a:8e:44:a3:05:
d6:38:8a:ae:57:d1:bf:4d:cb:45:4a:fe:13:00:79:
94:3d:29:40:ed:32:37:0d:69:ae:67:ca:de:e2:3a:
e1:13:bc:45:72:6c:e8:e7:fa:76:1e:82:47:f2:24:
e6:c8:72:cf:80:f2:5b:09:83:5a:f8:65:33:e7:a8:
fb:1b:87:c3:53:c7:3a:89:c3:c1:c6:4a:8f:d6:57:
3e:7d:74:ec:d9:62:6f:a1:d4:23:a3:ce:39:41:63:
bc:52:f5:7c:b7:f5:54:2b:c0:93:72:63:4c:75:2c:
38:39:d6:8b:cc:e1:99:dc:69:1e:2f:f2:f5:dd:6e:
e0:58:ba:33:b1:e1:c7:58:51:b8:28:eb:0f:a2:67:
5c:fe:3b:6e:83:b2:f8:d5:2a:98:47:28:a0:5e:56:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:8E:0A:44:7B:4D:F9:82:82:56:2C:0F:D1:47:92:4C:84:54:86
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:d9:2c:ce:cc:38:15:b0:b1:6e:c0:03:f3:83:82:b3:ba:
4c:85:13:73:23:74:63:c4:5f:cd:10:5b:a9:09:51:a8:be:2d:
42:15:59:58:1d:e6:54:d5:49:5b:a4:e3:55:73:e2:09:c5:54:
9e:f6:86:63:be:2b:a2:f8:41:e6:2e:3d:cc:fe:70:28:11:d5:
78:bc:ba:c3:92:b3:cb:e5:a1:cb:bf:1c:79:90:ce:43:85:58:
92:d5:17:d2:7f:ed:4c:ec:9e:b5:5b:ae:ab:5b:0f:6b:4e:3b:
cc:62:38:e0:d5:0b:49:cf:a4:ad:99:41:1c:7d:28:c3:dc:01:
56:9f:dc:37:68:d5:cc:3d:bb:6a:b9:7d:d7:fb:43:3a:58:54:
62:af:ab:3a:58:09:b8:72:15:e8:45:8e:d8:6e:ce:58:dd:aa:
38:4f:58:17:ae:78:8a:48:e9:91:2c:c4:3c:ee:5c:17:5f:7e:
8f:e2:e4:21:55:8e:8e:3d:80:90:01:b3:9a:d3:89:c3:8a:5b:
dd:a0:37:d4:30:66:67:85:62:18:e9:72:c6:cb:11:1c:d4:7c:
61:87:c0:a9:6d:d0:bc:b0:a5:29:1e:3e:de:40:89:ca:f6:42:
42:bd:a8:24:05:ad:ec:b2:4c:e8:b7:fc:81:9d:eb:7d:3c:8e:
7d:41:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:32:46 2026 by rpki-client