
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json)
Hash identifier: n3Jhw0Tr3VKwDnfg455A5trkVV5oU7ialM8lOJ/uLa4=
Subject key identifier: C4:E4:27:EA:80:B4:B6:26:D3:7D:CA:77:07:91:2C:51:46:E1:A3:E0
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial: 0A18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
Manifest number: 0A0F
Signing time: Mon 22 Jun 2026 19:49:02 +0000
Manifest this update: Mon 22 Jun 2026 19:49:02 +0000
Manifest next update: Mon 29 Jun 2026 19:49:02 +0000
Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: VgRs1UR9WDgVLY6F13P+ZcTV4Ric7dA4KgeFConIJC0=)
2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Validity
Not Before: Jun 22 19:49:02 2026 GMT
Not After : Jun 29 19:49:02 2026 GMT
Subject: CN=6a3991ae-91f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:9e:f3:7d:32:db:39:fc:cc:57:b0:4c:c0:
f3:db:c0:d5:2e:43:99:d7:5b:7d:03:29:0b:33:30:
fa:88:a9:4f:96:89:21:65:05:7a:f7:40:37:e9:eb:
50:e5:50:30:e9:90:52:5e:4e:39:27:6b:bc:46:d5:
d0:be:d6:6e:a1:4f:e2:a0:1e:96:b8:b7:b3:bb:fd:
35:ff:fb:54:c9:57:06:a8:39:a0:3e:f1:e3:73:30:
b3:c9:96:a3:52:ed:65:c0:12:38:a1:18:42:0c:4c:
b8:71:4f:83:91:c8:0f:e2:59:08:e0:8e:6c:20:9f:
4b:78:74:b7:f3:81:a7:c7:ad:3b:f1:7a:98:da:40:
20:93:e6:45:41:16:f5:c1:3d:a5:80:9e:e4:92:e9:
c7:d4:39:97:e6:ff:d7:da:d0:c1:e5:e1:2b:00:aa:
15:8f:47:89:c3:4b:fd:db:e0:2a:82:db:d1:bc:98:
b8:82:46:c7:9a:0f:4b:8d:8b:fe:37:83:ea:fe:08:
73:39:2f:f8:5c:c4:a0:e0:3a:2b:e0:bf:b3:f8:9e:
a8:81:ef:79:e6:02:15:9d:66:2b:ec:2b:08:db:fd:
fc:09:14:7c:d9:2c:83:12:1a:9c:8a:74:e7:b1:fc:
3f:88:ba:b8:a4:bf:dc:e8:45:66:69:c4:58:3a:ad:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E4:27:EA:80:B4:B6:26:D3:7D:CA:77:07:91:2C:51:46:E1:A3:E0
X509v3 Authority Key Identifier:
keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:6a:f7:88:e3:11:40:f9:b4:b2:0c:90:5e:ee:f6:21:dd:
d3:9a:25:a8:7d:56:18:9d:41:2f:a4:df:eb:b6:77:97:fb:f4:
3c:02:24:71:91:99:e8:30:48:27:54:1e:01:32:9f:72:cd:21:
84:6e:2c:3f:67:72:8b:55:12:bd:f4:c3:c4:a6:71:07:af:c3:
41:67:47:e1:d3:0c:88:ce:45:85:57:56:97:20:f5:9c:98:4a:
65:36:35:15:85:1e:13:2f:7e:1a:85:9d:07:d8:b7:03:2f:1d:
70:e8:ad:0c:d8:7d:2d:01:92:8e:1d:f3:8c:35:5e:8b:16:18:
9c:73:95:39:7f:f9:b1:3b:38:2a:a5:69:77:df:9c:ac:6a:c0:
05:1f:f1:19:5e:7d:d0:45:79:d9:48:32:c6:e0:7c:ca:76:7d:
c5:03:7f:e2:66:2a:74:e7:54:b3:3d:3a:b6:93:22:a6:e5:b9:
01:f4:22:76:e6:4b:3a:d7:6b:60:75:d1:56:c0:df:06:21:c6:
d1:ff:c4:fe:ac:0e:fd:1b:55:43:ba:0a:58:56:ca:93:b6:c9:
cc:d7:1e:53:6c:b5:8c:bb:b4:cf:ab:ab:10:39:92:35:26:c5:
fa:50:af:69:b7:98:91:05:09:d6:57:55:2c:f3:7d:7e:96:e1:
d9:e9:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client