
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: LtySRjhsCQnSwqRAELKMs6CiyQhJPllyESCW8wWaBlk=
Subject key identifier: FC:04:04:10:71:BF:6D:D7:AA:AA:7B:9D:16:66:B7:E1:63:0E:E9:FA
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 0188
Signing time: Sat 13 Jun 2026 04:34:32 +0000
Manifest this update: Sat 13 Jun 2026 04:34:32 +0000
Manifest next update: Sat 20 Jun 2026 04:34:32 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: GnXCkdfsuL99DT5XYcJ6V+9t9p0H0PVutWZ00nEfaUs=)
2: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
4: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Jun 13 04:34:32 2026 GMT
Not After : Jun 20 04:34:32 2026 GMT
Subject: CN=6a2cddd8-d48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:1b:71:a0:29:78:8b:b1:97:28:58:34:35:
d7:9a:26:87:cb:75:da:be:e0:7b:bc:e0:7a:54:43:
db:99:27:c8:fa:fb:d8:e3:fc:d5:80:29:9e:a0:49:
2a:19:18:3a:d3:76:18:06:58:6d:45:db:0e:3e:ac:
6d:09:81:73:51:ae:73:01:3f:27:80:a3:13:47:1e:
dd:c9:49:f8:7c:6b:10:c8:d4:8f:30:bf:8b:42:08:
27:17:70:d3:d2:ea:2f:1b:fe:0e:0d:f5:bf:32:67:
8c:05:6a:04:a0:1e:dd:9e:54:69:eb:7e:40:13:78:
d3:c1:1a:68:b6:fb:3d:13:08:05:29:fa:4b:d6:08:
6e:0d:1c:36:8d:5a:ca:43:5e:bf:4c:41:aa:87:c8:
95:bb:f6:b1:22:97:1b:ca:ce:5e:ef:98:de:13:5a:
91:7c:59:c5:f8:1d:0e:10:21:20:65:9a:55:d5:49:
c9:c6:81:e0:a8:65:90:eb:40:bb:4e:cb:82:ea:03:
e3:f9:5b:d3:9d:c1:e4:65:90:32:7d:da:12:7e:86:
da:70:27:12:c5:34:2d:8e:e4:49:31:1f:8e:6d:26:
3f:55:b0:95:c9:c5:91:55:19:8d:f1:fe:ba:c2:ba:
9b:be:73:52:96:3d:4b:53:26:50:78:77:39:36:94:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:04:10:71:BF:6D:D7:AA:AA:7B:9D:16:66:B7:E1:63:0E:E9:FA
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:07:64:4f:a0:33:82:9a:12:5a:47:5d:39:97:3f:d9:f2:ba:
cf:52:ec:95:2f:c2:c4:e8:e2:14:aa:6c:87:26:80:4f:4e:6a:
fe:d2:80:4b:78:29:9e:18:86:f2:e1:18:8f:06:da:4c:52:c1:
50:d0:d2:ac:f9:26:64:65:7f:b3:7e:2e:e9:d1:10:5d:0b:b5:
aa:e4:57:ae:2c:9d:63:99:02:49:9a:03:ee:9d:1a:f8:02:9b:
57:58:8f:f6:8a:3f:4d:36:7c:2a:d6:20:71:06:12:f7:7d:f7:
88:ad:89:fa:5b:21:fa:c8:05:ee:6a:d4:45:ca:4c:19:55:ee:
e3:ba:c1:2d:6e:88:d2:9d:0c:1d:6b:4d:a7:ab:ad:44:44:e5:
68:40:29:eb:75:f6:2e:8f:fc:a7:61:58:6e:48:e9:ff:1c:a7:
c4:65:29:20:36:26:88:cb:f7:f8:5e:d8:af:f9:41:65:2c:78:
f7:81:22:39:d3:87:97:cc:a6:74:ed:1b:1f:b2:d1:f3:3a:70:
17:ad:a2:82:7c:64:d6:de:32:76:31:8a:a4:8f:bf:c3:52:5c:
1e:da:75:e7:f2:31:3f:c8:08:a1:63:39:90:be:13:e4:11:75:
db:cf:bc:16:14:b8:ce:ed:55:1e:34:a0:1c:42:49:e0:19:51:
52:c3:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:29 2026 by rpki-client