
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: fUjnYqyUOIHhsqqoIdHTdhsH6ALCLU4avBn9NVsxXkg=
Subject key identifier: 03:D0:33:B9:87:67:E8:E8:60:6F:65:E2:5F:26:9C:6B:AA:74:2A:8D
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 09EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 09D4
Signing time: Mon 30 Mar 2026 19:53:26 +0000
Manifest this update: Mon 30 Mar 2026 19:53:26 +0000
Manifest next update: Mon 06 Apr 2026 19:53:26 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: 6WwAO3nwYQ2/91zXZR5/TX/1AGITwHYv0cGWEuPuQVU=)
2: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: Xp6J4EN8UBByITq+gCFf5DSbouyROjD+ka1UZdn7rcI=)
3: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Mar 30 19:53:26 2026 GMT
Not After : Apr 6 19:53:26 2026 GMT
Subject: CN=69cad4b6-779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:c2:53:33:93:52:27:47:30:b5:43:10:78:
8d:97:e9:61:f1:98:e8:47:66:e6:16:5e:b1:bb:e5:
80:92:89:2f:5d:1b:63:d4:2f:21:55:1b:87:9c:13:
31:8e:dd:ad:83:f0:fe:7a:d7:6a:a1:91:da:3a:88:
37:77:a2:7b:b5:b6:80:e0:35:3e:19:87:20:11:77:
7f:ea:b1:63:03:0f:81:37:e0:f3:37:0c:03:b6:43:
6f:62:07:15:e6:f6:36:e7:fc:91:2f:da:ed:2c:45:
b6:67:a9:0a:63:3f:f0:c1:e4:1a:d4:b2:1a:b7:a4:
72:6b:51:75:fb:20:0d:73:5a:24:dd:2e:91:73:da:
5f:70:af:4c:26:29:4c:f6:1f:39:1d:a8:08:f2:d7:
18:06:64:50:cd:89:5e:7e:7a:bd:f4:87:cc:ad:66:
4f:79:f1:00:11:fd:d7:03:13:42:1e:cc:95:dc:60:
b5:82:9b:11:cf:48:56:56:1a:5f:fd:16:96:0c:d5:
8a:5c:ef:88:cc:bd:12:57:ce:4d:21:df:75:05:a5:
9e:eb:98:92:c2:e8:86:81:8f:86:e2:95:9c:65:12:
dd:72:b8:42:41:34:32:fc:ef:1a:44:f5:5a:12:f9:
b1:a2:57:fb:40:78:13:3e:1b:10:e1:83:4c:d0:cb:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:33:B9:87:67:E8:E8:60:6F:65:E2:5F:26:9C:6B:AA:74:2A:8D
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:15:5e:a6:34:4e:ae:40:7e:77:90:11:d2:bd:4e:c0:71:
ee:de:37:51:f9:9f:34:5e:2b:62:92:ba:1c:68:0f:51:b3:92:
af:99:dc:84:03:60:df:2a:b5:78:d2:56:28:6f:d6:15:d8:ac:
dc:37:b6:0e:3a:e6:7a:88:2c:07:a2:a8:c3:2f:6e:d5:1c:f5:
a5:05:2a:76:e8:8f:7e:80:ec:56:b5:48:40:86:d4:00:b8:52:
7c:5c:60:f5:62:a3:bf:79:e3:59:a6:08:39:ec:fe:f3:ca:1b:
38:7d:e7:0a:9e:8b:73:50:ea:f5:0c:2a:db:0b:91:76:66:69:
75:88:14:4c:28:67:a5:21:ad:45:4e:4d:07:e8:a3:5e:9a:b2:
f4:29:a6:67:d9:d5:ae:30:d5:91:14:9a:34:5d:de:91:1d:dc:
43:58:e6:39:b8:d3:46:3e:a7:a4:0a:1f:19:a0:f1:e6:1a:aa:
05:3b:14:98:4c:ec:5c:22:b5:3b:dc:f4:b2:f4:ae:dd:98:6d:
1f:10:f7:73:d7:7a:d3:9c:57:27:ae:d1:bd:74:c0:ec:84:de:
e0:01:16:18:03:60:ae:47:8b:f8:20:a9:10:48:a8:97:a2:19:
df:88:b8:a1:4b:63:ff:4f:25:90:93:d0:de:43:7b:ba:36:90:
98:31:82:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD
ODQ5QzUyODYwHhcNMjYwMzMwMTk1MzI2WhcNMjYwNDA2MTk1MzI2WjAYMRYwFAYD
VQQDEw02OWNhZDRiNi03NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VDCUzOTUidHMLVDEHiNl+lh8ZjoR2bmFl6xu+WAkokvXRtj1C8hVRuHnBMx
jt2tg/D+etdqoZHaOog3d6J7tbaA4DU+GYcgEXd/6rFjAw+BN+DzNwwDtkNvYgcV
5vY25/yRL9rtLEW2Z6kKYz/wweQa1LIat6Rya1F1+yANc1ok3S6Rc9pfcK9MJilM
9h85HagI8tcYBmRQzYlefnq99IfMrWZPefEAEf3XAxNCHsyV3GC1gpsRz0hWVhpf
/RaWDNWKXO+IzL0SV85NId91BaWe65iSwuiGgY+G4pWcZRLdcrhCQTQy/O8aRPVa
Evmxolf7QHgTPhsQ4YNM0MuneQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPQM7mH
Z+joYG9l4l8mnGuqdCqNMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw
OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J
T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN+AVXqY0Tq5AfneQEdK9TsBx7t43UfmfNF4rYpK6HGgPUbOSr5nchANg3yq1
eNJWKG/WFdis3De2DjrmeogsB6Kowy9u1Rz1pQUqduiPfoDsVrVIQIbUALhSfFxg
9WKjv3njWaYIOez+88obOH3nCp6Lc1Dq9Qwq2wuRdmZpdYgUTChnpSGtRU5NB+ij
Xpqy9CmmZ9nVrjDVkRSaNF3ekR3cQ1jmObjTRj6npAofGaDx5hqqBTsUmEzsXCK1
O9z0svSu3ZhtHxD3c9d605xXJ67RvXTA7ITe4AEWGANgrkeL+CCpEEiol6IZ34i4
oUtj/08lkJPQ3kN7ujaQmDGCQw==
-----END CERTIFICATE-----
Generated at Tue Mar 31 00:45:25 2026 by rpki-client