
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier: WRTYTgT1CoVz7PuW/EfmDUzrQ1zqKwdyR/H0a2gOvRI=
Subject key identifier: B3:3B:E3:5D:03:20:75:83:BE:2E:D1:84:63:90:10:BA:6D:59:D4:AC
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial: 086A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number: 086A
Signing time: Sun 31 May 2026 21:21:54 +0000
Manifest this update: Sun 31 May 2026 21:21:54 +0000
Manifest next update: Sun 07 Jun 2026 21:21:54 +0000
Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: APF1sG0ozce/95xkO0dzrM7xSk3+gjidu6eNDkV0DW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Validity
Not Before: May 31 21:21:54 2026 GMT
Not After : Jun 7 21:21:54 2026 GMT
Subject: CN=6a1ca672-d732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:fd:61:a8:e2:a9:47:5e:42:fa:9d:06:a8:
8d:60:82:7e:e3:e2:cf:00:2f:2d:05:c7:fa:ee:d6:
dc:ce:88:30:16:83:74:60:6a:17:5e:41:ef:a2:d1:
84:a4:28:7d:27:d1:ef:49:db:f5:8f:1c:b4:64:9b:
71:b3:1f:f8:bb:7b:fc:44:34:45:71:52:ad:75:1d:
f3:0d:a8:46:1a:b0:1c:b4:20:10:40:a0:ba:12:45:
43:9c:6b:19:27:3a:63:0c:e8:e3:7b:78:b1:90:8a:
46:64:a6:60:3e:5e:0a:d2:48:32:cf:e7:a3:7e:96:
78:a4:09:a9:ca:d0:70:a2:4f:21:66:7b:56:fc:b5:
d5:fb:55:5b:fa:b3:ca:1d:03:71:a9:b1:04:fc:cd:
6c:2d:90:15:90:0e:4d:2b:d3:33:df:1e:d1:25:66:
e0:38:35:45:0a:33:66:15:9f:34:4b:f0:f3:4d:02:
44:25:b0:d6:a8:88:bb:ea:d7:e2:7d:5d:6b:f3:9c:
e0:f7:bc:57:bf:fd:4d:7e:ab:72:8b:8d:8d:dd:90:
73:15:1a:8b:cd:b9:fe:5c:84:d0:2f:5a:bf:e5:62:
1c:cb:d4:1d:45:55:ee:ae:0a:17:f8:f6:db:df:c7:
0c:67:d6:bb:98:c3:8c:11:de:02:bc:a2:2f:b3:fe:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3B:E3:5D:03:20:75:83:BE:2E:D1:84:63:90:10:BA:6D:59:D4:AC
X509v3 Authority Key Identifier:
keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:0c:2b:55:26:03:48:94:3a:d5:a4:b2:6e:42:41:73:a4:39:
be:94:fb:c1:2f:09:cb:7b:33:81:9e:89:aa:60:5a:ea:f1:bf:
09:bb:b0:0b:57:dc:4d:15:0f:a0:75:2a:24:c9:c0:27:07:7c:
dd:2d:c2:e3:a7:a2:6d:af:b1:9b:96:e3:87:f5:30:99:e9:1e:
28:87:57:c5:ce:9b:37:e2:fd:d9:2b:98:b8:da:d1:bd:fa:13:
2e:9e:1d:80:9f:0d:14:7d:4f:a8:ed:64:38:f4:2a:ba:cb:15:
2a:7f:f9:b1:5d:ed:9b:d2:70:68:88:31:d0:12:aa:cb:f5:bd:
d8:91:4c:f9:35:e3:3c:62:83:72:6a:6b:53:ba:68:92:26:2b:
44:0b:d6:af:5d:75:ab:03:69:29:1b:26:b4:ec:ce:6f:19:bb:
f8:72:fd:fb:2c:8e:30:d2:7e:a9:63:f8:ad:d7:a1:46:a0:99:
dd:e5:81:e2:af:ea:e6:c5:82:bf:6c:d7:fd:16:f7:08:a0:d9:
f4:d0:b0:7c:78:39:2e:71:6f:13:d4:18:4e:d2:bb:ca:a5:22:
98:70:91:e2:3c:36:2f:f3:1e:5d:3a:d5:17:95:75:5a:d4:10:
58:e8:16:7b:d8:41:4d:9f:5f:62:a7:f0:36:46:42:05:1d:36:
08:2e:81:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz
NTMwNzJDNzQwHhcNMjYwNTMxMjEyMTU0WhcNMjYwNjA3MjEyMTU0WjAYMRYwFAYD
VQQDEw02YTFjYTY3Mi1kNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupr9YajiqUdeQvqdBqiNYIJ+4+LPAC8tBcf67tbczogwFoN0YGoXXkHvotGE
pCh9J9HvSdv1jxy0ZJtxsx/4u3v8RDRFcVKtdR3zDahGGrActCAQQKC6EkVDnGsZ
JzpjDOjje3ixkIpGZKZgPl4K0kgyz+ejfpZ4pAmpytBwok8hZntW/LXV+1Vb+rPK
HQNxqbEE/M1sLZAVkA5NK9Mz3x7RJWbgODVFCjNmFZ80S/DzTQJEJbDWqIi76tfi
fV1r85zg97xXv/1Nfqtyi42N3ZBzFRqLzbn+XITQL1q/5WIcy9QdRVXurgoX+Pbb
38cMZ9a7mMOMEd4CvKIvs/6SmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLM7410D
IHWDvi7RhGOQELptWdSsMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz
QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn
cVRYSjFWWGx0dDAxTUhMSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMAwrVSYDSJQ61aSybkJBc6Q5vpT7wS8Jy3szgZ6JqmBa6vG/CbuwC1fcTRUP
oHUqJMnAJwd83S3C46eiba+xm5bjh/UwmekeKIdXxc6bN+L92SuYuNrRvfoTLp4d
gJ8NFH1PqO1kOPQqussVKn/5sV3tm9JwaIgx0BKqy/W92JFM+TXjPGKDcmprU7po
kiYrRAvWr111qwNpKRsmtOzObxm7+HL9+yyOMNJ+qWP4rdehRqCZ3eWB4q/q5sWC
v2zX/Rb3CKDZ9NCwfHg5LnFvE9QYTtK7yqUimHCR4jw2L/MeXTrVF5V1WtQQWOgW
e9hBTZ9fYqfwNkZCBR02CC6BhA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client