
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier: i3zHCqbQTfC37H+lrQebXJ/a8wzVzJWyyYvpNY2TyU0=
Subject key identifier: 34:11:D7:2C:4E:7C:C8:BD:B8:54:49:4B:48:85:23:34:17:CA:93:75
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number: 62C2
Signing time: Tue 28 Jul 2026 14:15:24 +0000
Manifest this update: Tue 28 Jul 2026 14:15:23 +0000
Manifest next update: Tue 04 Aug 2026 14:15:23 +0000
Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: BmZYcBRj3opgCvK8Tfc6W8ahE+vNseeGdskqdpJKSmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Validity
Not Before: Jul 28 14:15:23 2026 GMT
Not After : Aug 4 14:15:23 2026 GMT
Subject: CN=6a68b97c-a33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:f8:cc:e1:92:b1:1c:81:b8:7a:d8:5a:74:
f6:c5:45:0d:84:90:97:9c:77:19:1e:be:2d:1e:b4:
05:a9:81:48:5a:66:39:cb:f2:0d:d5:af:b6:10:47:
60:da:92:fe:17:b8:bd:86:9d:c2:43:f6:34:7a:01:
10:cf:f6:95:f0:c5:98:09:a9:b4:52:16:3d:23:9a:
fc:db:1a:11:82:2f:23:6e:f4:8f:10:d8:15:d0:6f:
07:a1:94:b1:07:cf:43:c4:00:1c:1f:9d:cd:cb:b0:
d1:89:3d:82:ca:00:86:2d:34:c6:7c:f6:83:e8:35:
79:d3:fd:26:d0:3f:25:51:8f:51:67:eb:b2:e8:a1:
07:01:7b:fd:b5:e8:c1:90:c3:63:f4:3f:bd:57:6b:
a4:62:38:35:cf:35:ba:29:f9:e1:dd:88:c9:03:dc:
24:a7:d4:73:14:88:f3:c2:fb:a3:55:bd:9e:d5:be:
af:01:75:9e:f9:10:18:0c:46:6e:c2:b3:eb:31:19:
be:ff:eb:5f:64:5c:e0:b8:53:79:40:7d:5c:79:8d:
50:a3:2f:ff:f0:8c:10:83:a4:1a:8e:f5:7d:43:90:
42:b0:15:7d:d9:77:c4:b8:e7:7a:16:95:9c:49:1f:
33:8e:1d:5e:03:37:4f:9a:9a:4c:86:de:69:fc:e2:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:11:D7:2C:4E:7C:C8:BD:B8:54:49:4B:48:85:23:34:17:CA:93:75
X509v3 Authority Key Identifier:
keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:07:80:f5:cb:cd:28:61:ab:3e:c1:93:7a:e2:f4:83:1a:
72:40:8a:b7:3d:75:83:7a:fd:77:62:1a:e5:3f:b2:59:b6:11:
66:f9:d9:e8:78:9f:b0:4b:ba:23:25:14:7f:79:6f:ec:f9:b0:
7f:c4:aa:27:7e:a3:94:28:95:b5:6f:ed:fe:de:b7:e2:36:05:
f1:bb:04:70:f6:af:59:82:88:0f:12:e8:00:e4:67:f9:26:93:
fb:2b:76:6f:8f:8a:96:24:82:9a:37:ff:e9:39:06:5c:60:c9:
6b:91:43:58:6b:12:20:e5:fc:d5:12:65:30:e9:f8:0b:96:7f:
7e:dd:e2:17:a6:4b:37:be:87:b2:cd:2f:5a:d6:82:76:68:81:
5a:10:9e:11:1e:38:39:68:7a:aa:63:b4:88:9d:fd:63:34:7f:
03:da:d9:36:88:c8:8f:e1:ba:26:a8:e7:d5:d8:e7:94:9c:a7:
fe:d6:1b:8b:81:84:af:57:27:e6:d1:fb:93:c3:da:b8:4a:4e:
26:01:ee:bc:38:af:76:c2:a9:6e:31:49:3a:ef:cb:d9:a4:7a:
01:9e:c0:f3:45:ca:62:73:eb:78:22:39:09:f2:6d:68:37:42:
ad:db:d7:14:f3:6e:3e:e3:af:02:77:14:a1:b9:9b:78:7a:fa:
1b:6b:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:05 2026 by rpki-client