
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File: anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier: BaDGEzLgw5GEHRIudu9MkSinSVgYLLmMOaArn0N9ncU=
Subject key identifier: 79:8E:01:34:0D:44:F0:C4:9D:87:55:CA:C3:D5:8B:42:27:79:84:E9
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number: 023E
Signing time: Sun 05 Apr 2026 02:09:57 +0000
Manifest this update: Sun 05 Apr 2026 02:09:57 +0000
Manifest next update: Sun 12 Apr 2026 02:09:57 +0000
Files and hashes: 1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: a8UyMcsS/wRuYcfL+l4csA9XWwSZBN0j7Rr41LuvhTA=)
2: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: GzwABBRZESMcRwdfhn3IWi9v3B62zckT729lql6XQTc=)
3: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: E5JwjHvKutLbFiPLa2Rz4sSsTfVvUxmZuTHwfledEQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Apr 5 02:09:57 2026 GMT
Not After : Apr 12 02:09:57 2026 GMT
Subject: CN=69d1c475-4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:60:38:97:a0:d8:33:d7:9c:ed:fb:28:07:
c5:31:32:66:e3:51:34:a1:63:54:21:f0:74:73:6f:
c1:cf:48:bd:31:2c:da:61:05:bd:f4:ae:8c:6c:84:
bd:25:6d:7b:93:7a:77:2b:38:bd:66:ff:f0:28:86:
13:63:d1:c6:7b:e4:06:53:f4:5b:9f:64:d8:80:3b:
ba:69:34:76:49:f9:4b:6d:d5:4c:ee:05:08:f3:d9:
24:c1:ef:6b:6d:d5:7b:d8:f4:12:be:6d:07:e1:17:
bb:17:2e:c4:c5:2f:4e:e8:4b:0d:6d:a7:13:33:0c:
54:8b:ea:81:71:63:77:cd:9c:57:51:8d:74:86:cb:
f2:b2:64:c6:65:23:62:3d:c2:f5:9a:92:e0:9b:16:
50:c6:50:a3:a5:9c:80:73:a2:62:de:9d:ad:0b:e6:
df:18:32:76:31:c1:92:88:9e:28:d8:96:5f:93:06:
c7:3e:b1:77:e8:6b:a7:39:94:08:6f:09:57:62:10:
e7:f6:2a:db:f2:28:02:b3:05:b7:53:3d:f3:36:f6:
13:51:c7:62:d3:6d:d4:eb:87:54:e8:3e:af:42:d2:
c9:60:36:8e:7a:68:9b:f0:3b:8a:94:94:05:ed:7d:
d6:f9:41:a0:3e:e6:75:8b:a0:51:9a:17:08:3b:5f:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:01:34:0D:44:F0:C4:9D:87:55:CA:C3:D5:8B:42:27:79:84:E9
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:e7:6a:eb:3d:2b:ce:6a:15:70:4c:a3:ad:0e:9d:df:a1:37:
70:42:cc:1b:57:8e:59:9d:c5:c7:11:5e:16:e5:97:e0:2a:7d:
77:9a:b1:4a:22:1e:2a:6a:fc:64:06:f1:77:55:a2:ab:65:1a:
84:33:70:69:58:13:64:17:6e:ac:61:f2:cf:90:6d:d7:6b:3b:
7a:fd:91:33:19:91:d5:41:6d:8c:c1:3f:8c:02:b3:28:22:84:
25:cc:f1:26:f0:3c:c4:d0:a8:1b:85:a3:3d:81:3a:27:62:c1:
ea:6f:dd:ad:74:05:d8:9a:18:e7:1b:3a:4c:64:3e:53:26:3c:
96:e3:67:5e:9b:e0:b7:4e:18:7a:52:10:25:16:ed:a6:bb:d9:
c3:97:9f:a7:d8:09:93:9d:b3:19:b8:cc:03:d3:b8:fe:1b:2d:
c7:29:8b:3e:12:52:f2:31:06:15:90:e2:62:28:53:ce:fb:ea:
06:57:59:5f:bc:e6:b8:31:49:d2:5d:19:78:1a:9a:f0:4b:2c:
d0:8f:18:27:45:af:7d:83:f8:85:0e:7b:20:70:cd:50:cb:e9:
c5:4e:fa:08:f2:47:af:3a:3e:61:8b:cc:9a:50:eb:cd:ce:c2:
f2:8f:e3:cd:6e:13:36:03:36:c1:e4:24:3e:13:d6:3a:61:47:
ba:8b:4b:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRjIxMTAvBgNVBAUTKDZBNzlCNzAzOUUzM0JFOUFFNjY5QzUxNjEwMzdFMDg0
MDExNzYyMEEwHhcNMjYwNDA1MDIwOTU3WhcNMjYwNDEyMDIwOTU3WjAYMRYwFAYD
VQQDEw02OWQxYzQ3NS00NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJxgOJeg2DPXnO37KAfFMTJm41E0oWNUIfB0c2/Bz0i9MSzaYQW99K6MbIS9
JW17k3p3Kzi9Zv/wKIYTY9HGe+QGU/Rbn2TYgDu6aTR2SflLbdVM7gUI89kkwe9r
bdV72PQSvm0H4Re7Fy7ExS9O6EsNbacTMwxUi+qBcWN3zZxXUY10hsvysmTGZSNi
PcL1mpLgmxZQxlCjpZyAc6Ji3p2tC+bfGDJ2McGSiJ4o2JZfkwbHPrF36GunOZQI
bwlXYhDn9irb8igCswW3Uz3zNvYTUcdi023U64dU6D6vQtLJYDaOemib8DuKlJQF
7X3W+UGgPuZ1i6BRmhcIO1/l7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmOATQN
RPDEnYdVysPVi0IneYTpMB8GA1UdIwQYMBaAFGp5twOeM76a5mnFFhA34IQBF2IK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFGMi85OUY3QTM0QUQy
Q0QxMUVEODA2MDc3MjJDNEY5QUUwMi9hbm0zQTU0enZwcm1hY1VXRURmZ2hBRVhZ
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FubTNBNTR6dnBybWFjVVdFRGZnaEFFWFlnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDFGMi85OUY3QTM0QUQyQ0QxMUVEODA2MDc3MjJDNEY5QUUwMi9hbm0zQTU0enZw
cm1hY1VXRURmZ2hBRVhZZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk+dq6z0rzmoVcEyjrQ6d36E3cELMG1eOWZ3FxxFeFuWX4Cp9d5qxSiIeKmr8
ZAbxd1Wiq2UahDNwaVgTZBdurGHyz5Bt12s7ev2RMxmR1UFtjME/jAKzKCKEJczx
JvA8xNCoG4WjPYE6J2LB6m/drXQF2JoY5xs6TGQ+UyY8luNnXpvgt04YelIQJRbt
prvZw5efp9gJk52zGbjMA9O4/hstxymLPhJS8jEGFZDiYihTzvvqBldZX7zmuDFJ
0l0ZeBqa8Ess0I8YJ0WvfYP4hQ57IHDNUMvpxU76CPJHrzo+YYvMmlDrzc7C8o/j
zW4TNgM2weQkPhPWOmFHuotLnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:59:33 2026 by rpki-client