
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: We6eo1xSKF4dCRZMpBbP4DCwlDZ3o5DQKNlGajfFfV8=
Subject key identifier: 96:65:35:47:39:41:93:22:59:6E:F2:74:C7:E9:E3:0B:9E:99:11:70
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 016C
Signing time: Fri 17 Apr 2026 04:36:37 +0000
Manifest this update: Fri 17 Apr 2026 04:36:37 +0000
Manifest next update: Fri 24 Apr 2026 04:36:37 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: TVW+bsfEpf4tsBdu3IJs8yMzn/FtDBKd2Hs+l0VcL7M=)
2: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
3: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
4: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Apr 17 04:36:37 2026 GMT
Not After : Apr 24 04:36:37 2026 GMT
Subject: CN=69e1b8d5-36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:f7:76:71:72:7f:d2:84:76:e8:c6:d9:69:
2a:60:1d:4d:e1:45:0f:e2:4a:28:df:0f:4d:b7:12:
27:8a:c4:2f:29:a2:be:e4:5a:6b:eb:bf:85:92:d3:
32:e9:43:3d:17:d6:3d:fa:b5:77:a6:f2:80:8f:64:
93:92:2a:16:9a:e4:9d:2d:2e:9f:a9:ca:04:b2:2f:
17:5c:23:82:66:23:07:c8:72:c8:e7:71:d2:bf:af:
a1:ed:7a:3b:2a:ca:38:c5:03:22:b4:eb:99:00:1c:
4e:8b:f8:61:45:09:0e:67:3b:ce:7f:ac:3d:c3:e1:
54:a2:2a:6a:a6:b9:91:91:cc:22:1f:0f:9e:5c:28:
a5:e6:7a:80:2f:31:90:20:f1:b1:0d:12:03:d9:b0:
21:7f:92:2f:eb:42:55:80:03:92:66:43:1a:a6:d9:
90:51:57:a6:ff:9d:d3:29:bc:a8:05:f3:f8:24:09:
73:86:47:cd:4a:f5:46:5f:c6:33:25:96:6d:ba:64:
eb:a2:e9:2e:4a:aa:ad:b6:aa:1d:c1:8f:2e:52:37:
aa:29:0d:55:f9:8b:74:ab:66:1f:19:45:78:0e:a1:
3f:10:af:75:29:99:c2:ea:66:91:28:cb:e5:fa:77:
ed:ea:47:7c:14:ce:ad:07:6f:9f:5b:1b:7a:8a:c7:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:35:47:39:41:93:22:59:6E:F2:74:C7:E9:E3:0B:9E:99:11:70
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:cf:bd:63:e6:17:9d:25:e9:4f:bd:70:cf:0a:37:4c:7c:23:
77:69:37:10:bd:74:6b:8d:9a:63:76:10:d8:4c:bd:2f:1a:37:
62:35:15:7b:26:b1:df:c1:57:1b:f2:54:dc:7e:c2:31:86:0a:
90:db:1f:b1:db:51:4b:29:db:53:af:d9:e4:9a:f1:d4:2c:b0:
c6:73:58:e9:c6:40:c4:d0:2a:02:7e:1d:81:f2:8d:f3:8c:fe:
93:32:33:89:50:0e:68:ef:6b:8f:16:bd:93:db:38:88:57:3a:
18:b5:6b:05:be:87:ae:23:98:25:99:81:c8:57:d8:3a:a7:94:
08:be:65:e2:56:c3:f5:55:c7:02:c1:ad:b6:29:2d:5e:b6:ae:
b5:26:d1:13:62:cf:45:bd:b0:08:07:1c:b1:a8:78:fe:9a:dd:
7d:95:76:4b:53:09:70:83:3c:54:ab:1c:52:36:b6:a8:22:5f:
5b:6a:fc:13:32:da:8e:d5:92:1b:0e:fb:5f:da:b7:fa:6d:50:
62:2b:62:ca:8d:63:ab:98:cc:dd:67:b5:4f:85:4a:ed:c3:c3:
31:25:b4:5f:48:d7:06:c9:42:d7:a7:50:fb:78:c8:28:a6:de:
29:9e:d0:20:00:47:56:46:aa:4b:9b:fb:7d:57:0b:47:59:a6:
43:91:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:23 2026 by rpki-client