
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier: PO9EaWuAyxf/pKKEkg0G6ZD3MQfn9gUoHKOEf+H0rMk=
Subject key identifier: EF:49:40:50:20:44:9B:49:33:25:4A:7D:AE:63:55:EA:EE:1A:D8:4F
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number: 353B
Signing time: Wed 20 May 2026 15:10:55 +0000
Manifest this update: Wed 20 May 2026 15:10:54 +0000
Manifest next update: Wed 27 May 2026 15:10:54 +0000
Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: oSEKC4/YIJftsPgMNbzPsrunkKfx4hrCHH0izQzacbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Validity
Not Before: May 20 15:10:54 2026 GMT
Not After : May 27 15:10:54 2026 GMT
Subject: CN=6a0dceff-0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:02:e1:7c:3a:0e:5b:80:34:f6:ca:1f:62:
37:4e:01:8c:ec:cf:11:ea:f8:28:05:39:87:cf:6b:
5a:51:ff:af:70:75:d1:72:46:ae:d8:21:41:61:5e:
df:b0:34:76:f1:af:0e:6f:85:df:bd:74:78:00:67:
a5:ff:a0:16:0a:25:ec:fb:76:cf:a9:2d:9b:31:44:
8f:0a:53:73:3d:bb:40:88:cd:4a:7e:ca:09:01:29:
18:0d:2d:30:4b:a1:46:2e:d3:59:ff:02:a8:22:47:
04:43:50:24:9a:a8:f7:88:53:0c:e0:6c:53:72:b0:
42:e4:a4:f2:f8:37:e5:0f:bb:0d:7e:80:0f:e1:5f:
3c:37:a6:12:8e:85:7e:b2:77:3d:f0:aa:7b:60:fa:
5a:e2:30:51:6b:af:8d:62:92:d8:94:93:8a:81:5a:
43:89:d8:4e:ef:ac:65:ea:ee:c5:77:e3:7e:c6:dd:
de:61:30:68:c3:ff:9b:15:be:62:96:a4:19:69:91:
a9:e7:c0:22:89:b7:be:7d:6c:87:64:88:26:d8:85:
45:bf:18:7a:6c:86:f4:1b:31:a8:bf:43:f9:3e:81:
d6:99:86:d5:ce:d5:75:c2:c9:88:40:f4:d2:ff:ae:
06:2c:21:3e:ea:c9:91:2c:3b:62:11:04:32:4d:49:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:40:50:20:44:9B:49:33:25:4A:7D:AE:63:55:EA:EE:1A:D8:4F
X509v3 Authority Key Identifier:
keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:de:aa:8f:96:29:0c:f8:85:95:52:b7:bc:28:10:25:43:
a2:55:99:7b:b0:a7:bf:9d:2c:f5:3e:e7:4a:b8:16:20:1d:2c:
34:bd:30:c6:2d:d0:17:9d:5c:2e:c5:bd:3f:15:5e:08:37:40:
11:01:d7:b1:0c:94:44:8e:61:f8:1c:0e:1b:ba:a6:bb:5d:84:
75:64:b5:88:33:cc:8a:b4:57:97:3f:04:88:1d:fe:dd:d0:53:
a5:2e:97:33:d2:df:98:4e:1f:8d:4d:17:4e:d4:be:59:b7:6f:
81:6d:c4:58:43:ea:59:22:69:30:fb:80:18:21:1c:df:cd:cc:
45:cd:78:71:2f:5f:13:39:6e:0b:c1:fb:06:36:a8:c5:7b:6a:
16:4c:c1:57:f3:94:6b:75:bc:b2:9f:b2:ff:92:f7:9c:3a:cf:
82:c1:84:79:83:d9:77:51:62:ae:36:08:ba:61:8e:6c:20:52:
a3:86:80:fe:8a:20:8d:5b:6d:6c:cb:f1:c8:b5:a0:92:5a:00:
d4:32:49:dc:c5:e8:95:61:e5:ba:e9:73:ce:86:5f:b9:f3:61:
f7:2a:f7:24:79:b5:04:1b:b9:6d:e8:ba:18:49:7e:c4:89:5a:
7e:c0:0e:fe:e6:39:d4:14:97:64:45:01:1f:12:35:ce:b1:6b:
18:ba:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:39 2026 by rpki-client