
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier: amf9VESB3OWrxGjH8DG+PR1L45htuMteTdQD8lVEpZg=
Subject key identifier: 8C:24:0A:6C:3F:77:EC:68:A3:31:24:4F:88:0E:EA:2D:3D:31:15:71
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial: 0CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number: 0CD7
Signing time: Mon 22 Jun 2026 18:24:32 +0000
Manifest this update: Mon 22 Jun 2026 18:24:31 +0000
Manifest next update: Mon 29 Jun 2026 18:24:31 +0000
Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: pXhv3PjFWHUsUuzbMFUoC0aWJi4SDnSZCcedePBGNwg=)
2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Validity
Not Before: Jun 22 18:24:31 2026 GMT
Not After : Jun 29 18:24:31 2026 GMT
Subject: CN=6a397de0-87ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:ce:cd:c7:8f:0c:14:dc:5f:5d:73:f2:42:
e4:1b:17:f8:00:b6:c9:ce:0b:1d:b0:5e:4c:17:07:
3e:1d:29:c5:a3:22:5c:f0:48:c2:3b:aa:66:ce:e9:
43:76:14:ac:da:18:be:8f:ac:c2:6e:d2:b3:95:9a:
b2:a7:88:b0:6e:43:ba:f5:f2:69:b6:15:e7:59:93:
dc:ac:c2:1b:ca:76:68:2c:51:2b:86:3c:03:85:0a:
23:4a:50:b5:54:06:ab:a0:39:66:d6:95:20:63:d9:
a9:36:f7:69:91:65:23:17:d6:b1:d6:d4:bb:19:a8:
4c:20:b0:06:6b:aa:cd:f2:5d:8e:5d:40:1a:3d:a2:
7d:5b:ea:0f:9f:2d:d5:ea:a3:2f:47:83:33:6b:bf:
86:ae:50:96:f2:d0:e3:40:ed:60:de:39:4d:ae:47:
79:2a:c1:d9:78:26:ab:00:c9:4d:7f:73:43:8f:38:
fd:b8:b5:52:d7:47:ca:6c:62:3a:7f:85:71:48:b0:
89:c0:31:ae:59:7d:23:db:82:6a:15:df:e2:d1:3d:
08:f9:83:de:89:45:e3:88:6a:ea:1e:45:ee:b5:45:
78:4a:44:8f:2a:bb:c7:fc:88:d7:63:0c:a1:6f:6a:
51:af:77:eb:34:14:19:9b:2c:fa:6f:dc:6c:47:26:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:0A:6C:3F:77:EC:68:A3:31:24:4F:88:0E:EA:2D:3D:31:15:71
X509v3 Authority Key Identifier:
keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:b1:65:10:14:dc:16:1f:bd:54:d3:75:03:30:db:fa:3f:
08:f9:2b:1b:5f:fc:1d:85:5d:39:1c:a0:51:d4:fa:9c:08:53:
55:d3:d6:99:37:10:af:ed:39:6e:d6:79:b4:34:f5:ae:f8:c6:
39:d6:c2:21:0c:43:ba:25:c7:ae:46:01:18:3a:15:fb:47:e8:
dd:77:b5:6d:35:63:a9:2a:d0:0d:4d:8f:e2:cf:c7:3b:42:52:
90:07:65:96:30:94:9b:79:25:2a:6f:02:7f:cc:9d:c7:74:5f:
59:ed:e0:7f:59:54:d6:09:2c:19:d4:dc:93:f2:dc:c3:86:d4:
99:80:f9:2f:12:71:f6:24:9e:16:a1:20:23:8e:70:18:12:ca:
79:15:90:c5:42:66:3e:8a:d5:e5:d3:cf:4e:c8:ff:e9:c3:8a:
db:8d:3a:ad:08:8f:83:1d:78:03:96:93:97:11:e6:99:41:3d:
d3:5f:fc:bd:eb:de:5d:10:2a:53:9c:cd:d5:c1:74:0c:68:04:
6b:7a:98:09:34:3e:5d:58:d8:e1:2c:c1:2d:88:4a:78:52:67:
d7:3c:fa:6b:2e:61:4a:28:bf:a8:c6:f0:ee:03:2b:d0:3e:88:
95:18:56:83:35:c4:6c:0e:a1:94:e2:a6:4f:85:81:39:d6:ab:
a0:bf:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:02 2026 by rpki-client