
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: 8E7SBHXzMSKQFrz7fvhUVtU+yCPniVovF/cE/fTbHUE=
Subject key identifier: 76:BF:4E:32:56:FE:43:AA:F0:A8:72:AE:04:5F:47:0B:8A:6A:7D:48
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 01C4
Signing time: Fri 09 Oct 2026 04:29:58 +0000
Manifest this update: Fri 09 Oct 2026 04:29:57 +0000
Manifest next update: Fri 16 Oct 2026 04:29:57 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: /cXIFELBYU+b+/FsDLN4OopBK14Xsv3jgdkFPpBhPH8=)
2: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
4: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Oct 9 04:29:57 2026 GMT
Not After : Oct 16 04:29:57 2026 GMT
Subject: CN=6ac86dc6-0bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:42:9e:08:24:24:cf:15:46:c8:30:4f:1a:
d5:f0:a3:01:2f:5f:c7:31:33:f2:74:1e:02:b0:58:
6a:f0:5f:37:64:81:82:1c:88:10:7b:06:19:9c:17:
52:77:05:cc:f1:6b:e2:5e:4c:12:a5:c8:0b:68:64:
7b:83:2a:63:b9:99:45:eb:62:6e:5d:86:ce:73:04:
3a:79:2b:7c:3b:8e:60:7c:3a:d4:eb:49:a6:05:9a:
e3:22:48:34:4e:36:95:36:77:68:56:86:e2:5c:77:
97:99:cb:6c:7b:f1:7b:1a:72:c8:ea:9f:64:d6:4f:
54:6d:24:6c:b2:50:62:05:6a:57:d5:98:e6:49:63:
f9:d0:cd:e0:cf:1d:cd:d7:d7:7c:c6:d3:6d:af:6f:
c1:40:ed:e3:47:60:63:ce:12:17:7d:33:38:43:48:
84:bf:fd:ab:73:5f:f4:99:26:ba:71:fd:b8:2e:a0:
5a:8a:d2:34:6f:83:20:9a:5a:a4:9b:da:d1:f1:94:
bf:64:77:2c:2e:8a:f1:a5:c1:82:53:40:b5:5b:e5:
55:02:d7:7a:00:db:1d:38:42:ad:b2:a8:a3:32:83:
e9:d8:f4:c2:b3:68:b4:bf:92:67:f6:75:06:9a:89:
e4:3a:53:1e:4b:d6:87:5c:07:aa:62:14:cb:94:c1:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:4E:32:56:FE:43:AA:F0:A8:72:AE:04:5F:47:0B:8A:6A:7D:48
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ee:47:ed:aa:d7:ee:ff:3f:6a:aa:2f:c2:f7:0b:07:d4:81:
c2:47:b9:dd:dc:2c:6e:31:99:ba:81:aa:56:30:4d:19:ec:70:
7a:04:07:c5:5c:79:ae:24:d0:8b:92:8e:74:be:45:ae:da:42:
8f:c5:27:0e:57:75:7f:17:d1:8e:47:8f:e4:45:04:e8:b4:34:
38:52:d7:24:e6:b6:91:9b:4b:e1:6d:73:31:d2:4f:73:8f:05:
2c:5f:e4:46:0b:0e:f5:36:4b:98:10:fd:82:73:48:6b:4f:9a:
b2:db:f2:72:40:df:d6:e1:75:f5:a3:57:bc:00:a8:cf:96:58:
38:dd:9a:ee:43:80:d5:23:a7:10:dd:74:1c:07:f9:d8:89:0a:
0e:f9:69:cb:fd:6f:41:7c:08:ba:b9:2c:04:b1:7e:b7:a8:fb:
7d:9e:00:be:96:a4:57:04:69:88:64:61:d1:3e:3a:39:43:e6:
9c:2d:4b:c9:84:2b:5b:cb:9d:28:3d:76:6d:b0:a9:13:00:a6:
66:71:59:ce:42:5f:44:a8:61:b9:63:ed:a5:a8:d6:6d:ac:55:
eb:04:b8:ce:13:bc:97:c8:2b:82:f4:69:c5:7b:e8:c2:cf:23:
ec:a2:af:9f:8e:a1:de:1f:23:e7:4b:d1:56:e0:92:a4:f3:52:
a2:3f:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:27:57 2026 by rpki-client