
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier: HaA+Qv0U0S1Gu0hSDdC8vhAWq/dH6JoEqF3Kc8JsxeI=
Subject key identifier: 3D:BF:FA:FF:7B:5E:AD:40:0E:97:4D:D5:A7:5A:A6:FF:C3:9C:29:20
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number: 012A
Signing time: Sat 04 Apr 2026 23:08:29 +0000
Manifest this update: Sat 04 Apr 2026 23:08:29 +0000
Manifest next update: Sat 11 Apr 2026 23:08:29 +0000
Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: 67dNspNpp5D+XFXM0Z7qPTLN4kHtftvrKZ8Tjn5DUQQ=)
2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: Q2bBWQkMnv2ryibhtyKcKnbpBqQPJlfX2lDfvclSTKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Validity
Not Before: Apr 4 23:08:29 2026 GMT
Not After : Apr 11 23:08:29 2026 GMT
Subject: CN=69d199ed-1c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:62:1a:ca:86:39:f7:d9:a7:fa:09:59:c0:
da:15:6c:6a:60:11:b2:7c:e9:0c:73:b4:e0:0b:26:
4a:74:c7:44:be:30:77:3c:0a:3c:f1:d4:4a:34:c0:
9e:cd:a1:62:b6:97:97:f3:7c:f8:54:c5:e4:ff:83:
28:29:37:00:f6:b5:0d:59:0f:c4:19:ac:31:cc:78:
06:3f:9a:fe:af:e6:5b:f0:73:2a:77:8c:bf:e5:80:
2a:a1:41:0d:05:05:a0:b0:b9:2a:90:97:0f:5e:f3:
21:22:1c:94:87:02:b5:bc:fd:14:d7:92:7a:f2:cb:
88:ec:29:0c:86:01:cd:e8:12:2b:a9:4a:3a:d9:80:
a8:8f:df:a1:59:55:c5:09:46:56:7b:b6:4f:ab:84:
24:89:93:23:77:19:a4:5c:b3:8a:c2:c6:74:98:ed:
8d:59:32:ef:d9:ee:01:11:27:46:70:8e:9c:5f:97:
99:76:43:ff:96:8e:4b:47:d4:e0:2c:0a:2e:ec:af:
c9:21:98:88:0f:e5:dc:d0:65:bd:9f:2a:3a:07:4b:
b6:b7:ab:ce:fe:55:50:ca:a5:b0:f2:b0:f1:f9:dc:
cb:84:1f:bc:cd:ec:6a:7a:82:85:27:80:1c:21:f7:
48:bb:70:fc:f6:db:01:df:8b:82:58:97:94:c0:55:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BF:FA:FF:7B:5E:AD:40:0E:97:4D:D5:A7:5A:A6:FF:C3:9C:29:20
X509v3 Authority Key Identifier:
keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:26:00:fc:45:3b:98:a9:7c:e3:61:09:7f:c8:75:a7:e1:2e:
3d:13:17:ff:c9:f3:47:c6:c2:1c:55:30:73:a3:de:cb:2c:c2:
5b:16:54:77:a7:e4:c7:54:57:af:48:01:1d:5b:be:03:5f:31:
1b:5e:f3:a2:93:0c:7b:18:8a:94:6c:2e:93:54:d2:7a:14:ee:
f2:90:aa:b4:3e:d3:bc:2f:d3:eb:d6:82:62:76:d0:13:e0:d6:
a4:59:0a:fe:79:53:47:78:34:c5:39:5b:6a:e6:dc:c1:ce:26:
57:50:75:52:2a:3e:06:23:8d:4b:66:55:09:f0:99:0d:6e:c6:
46:d9:a5:f0:52:f0:6d:78:9a:b3:46:b4:5b:b8:f4:aa:2d:70:
d0:35:75:f1:15:1c:6b:a0:a1:11:9b:88:25:7a:55:ee:a2:e4:
db:bd:34:8b:86:c4:e5:76:fe:c8:23:d2:95:f4:d4:13:48:a8:
80:21:b8:1f:63:96:3d:98:8c:fa:bd:e8:50:07:29:90:e5:52:
75:bf:d7:25:26:22:1a:f8:e9:3d:05:11:c3:21:c9:62:1c:84:
b7:e0:7e:3a:a0:a1:c7:20:f5:78:8b:76:5e:d3:69:98:33:9c:
5a:d0:0e:0c:0c:8a:c2:26:bc:61:58:2a:b8:84:2b:bc:e2:e6:
92:72:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:51 2026 by rpki-client