
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json)
Hash identifier: T9dL3Q5fXoUv/mTby4z9WvEIjSuJk0DVWNdiXAk4QR4=
Subject key identifier: D9:E3:1E:99:FC:4A:02:5A:EF:2A:1C:DE:07:73:85:09:97:91:ED:2D
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial: 0A4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
Manifest number: 0A45
Signing time: Tue 06 Oct 2026 19:48:14 +0000
Manifest this update: Tue 06 Oct 2026 19:48:14 +0000
Manifest next update: Tue 13 Oct 2026 19:48:14 +0000
Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: HMIsi9zYc6gGuNy7CD+wV2NsSZXFf7WfU/wQJ5CS2gc=)
2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Validity
Not Before: Oct 6 19:48:14 2026 GMT
Not After : Oct 13 19:48:14 2026 GMT
Subject: CN=6ac5507e-8863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:42:d8:0b:d3:3d:14:76:8e:f7:ed:17:af:
7a:9b:f7:a3:07:5a:4f:7b:b4:6d:04:52:02:83:9e:
26:a5:7c:03:6d:c8:a8:30:27:a5:b7:fc:76:a4:c7:
6b:ed:2f:56:b0:69:32:fd:12:72:9e:20:58:53:58:
b5:98:90:6c:aa:08:f6:cc:e0:db:d2:1e:4f:46:c0:
f7:b9:a4:77:8e:7a:7c:76:c7:4e:36:3f:17:e9:0d:
ff:03:86:9b:58:e8:de:06:88:c1:1a:22:e5:69:78:
70:05:a7:76:50:01:af:27:a5:2b:a5:88:a0:d0:03:
21:d7:91:0d:ad:55:2f:3e:36:c5:e5:d3:2d:05:34:
db:f3:1a:17:60:04:76:a1:88:46:31:cd:41:f0:72:
0f:ec:40:7e:b5:cd:bd:de:68:04:11:a9:04:3d:e2:
b9:d3:7e:e1:48:f9:36:6e:ee:cd:7f:ed:e2:75:1e:
1e:75:ab:7d:20:01:10:09:b8:27:a0:45:a5:a1:e4:
bd:95:bc:04:a4:86:0d:0c:ac:2a:2d:25:78:39:53:
65:5c:2e:06:71:b1:84:fb:db:6b:e1:fa:98:ec:d3:
91:a5:93:cc:a4:d9:d9:84:ea:7c:e3:2e:e5:8d:9d:
3e:6d:8d:cf:09:42:52:ef:a5:5a:53:b3:e0:cd:1c:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:1E:99:FC:4A:02:5A:EF:2A:1C:DE:07:73:85:09:97:91:ED:2D
X509v3 Authority Key Identifier:
keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c1:dc:71:0c:0e:dd:14:8a:56:60:59:40:f7:4a:ab:9c:20:
ed:8a:e1:30:22:3b:f0:8b:4c:f8:80:7c:ef:fb:e4:a8:ff:ef:
2a:b8:89:0e:58:1a:0e:ac:ab:46:cc:94:1b:93:fd:62:fc:ee:
57:7a:3b:42:4f:ea:8e:56:14:42:21:46:f3:58:85:81:f8:b1:
a5:4f:52:0e:b2:d2:86:70:eb:16:b7:3f:c7:f0:b5:06:95:84:
06:75:3a:db:f2:47:27:f4:df:83:c7:5b:7f:e1:c4:ea:7a:4d:
27:3e:a2:f0:d5:84:94:5b:1d:a7:fb:90:a8:4e:e5:84:16:a4:
a2:60:03:60:52:d9:f8:0b:a0:11:02:86:fa:4e:79:d0:c3:64:
53:59:ad:b0:1e:a0:f8:d1:b7:0d:6a:56:1c:fb:5c:40:bd:44:
6a:a3:9c:e3:c0:b2:a1:82:19:a4:e4:14:26:30:4c:b7:c6:fe:
09:48:5f:5f:8b:5b:5f:d2:7e:db:ba:45:2f:92:12:72:34:8f:
ea:19:49:e3:18:c8:13:dd:77:85:cb:96:ce:9c:51:53:81:a4:
78:71:ae:d3:fa:6f:81:a8:e1:05:76:58:60:32:28:7b:83:55:
1b:dd:1d:28:34:ae:4b:4d:49:94:35:72:f0:9b:1d:3b:fd:2a:
f4:04:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:54 2026 by rpki-client