
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier: 6LF/W/5H0Mkz/l8fEOOgtIeb2BQIXeKn4hJ7Dtf5FGw=
Subject key identifier: 10:EF:D0:0F:37:20:6B:12:C5:16:7F:61:3B:68:24:0C:51:3F:95:94
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number: 0CC2
Signing time: Sat 04 Apr 2026 18:16:56 +0000
Manifest this update: Sat 04 Apr 2026 18:16:56 +0000
Manifest next update: Sat 11 Apr 2026 18:16:56 +0000
Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: bI4kci2Kbw4JV3rBXx3SDlvEZD02qiQnxIxooNAGkDo=)
2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: uaZx4UT5TdPMfrcPW0R83sm6zgQCWLRIUviUfv851Ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Validity
Not Before: Apr 4 18:16:56 2026 GMT
Not After : Apr 11 18:16:56 2026 GMT
Subject: CN=69d15598-eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:35:8a:13:b3:91:ac:2d:93:e1:3d:f1:22:
7c:7a:cc:a0:5c:1b:06:ff:e9:20:24:2d:2e:c2:bd:
49:c3:08:24:68:7e:19:dd:4c:c1:1e:c2:cc:7c:b6:
c4:2c:23:63:95:ea:14:7e:c3:c1:a9:71:5b:db:bd:
a8:1b:db:c5:48:e3:2c:68:d5:ff:89:33:c0:06:72:
b4:5a:15:f9:a1:db:a1:24:b6:55:a0:d5:e8:f1:5b:
bc:2d:46:f5:bc:a3:4f:5e:34:17:5c:ef:9d:d9:55:
64:68:38:8c:b2:8a:49:1f:fc:b2:69:5a:4a:32:86:
a0:b7:bb:8b:f4:75:11:ad:f0:4e:b3:32:df:d8:8e:
72:60:b6:4c:95:54:bf:e2:07:7f:b8:53:2e:e8:72:
be:1d:12:d3:82:73:d1:5e:b0:de:f7:29:41:b4:76:
56:0a:e4:13:c2:f3:56:b8:a1:b6:21:d2:75:15:8c:
20:20:32:2e:21:0f:25:5a:08:69:92:0d:d1:99:05:
ea:49:2c:11:04:e3:19:61:79:19:5d:55:1e:ee:e5:
06:14:72:54:ac:7d:b3:9a:bb:ed:99:84:58:2d:91:
4a:13:c1:e0:f5:2f:20:b0:74:c1:dc:3e:61:18:b0:
40:ba:76:68:33:9c:d1:c4:cc:da:d3:93:41:8c:ba:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:D0:0F:37:20:6B:12:C5:16:7F:61:3B:68:24:0C:51:3F:95:94
X509v3 Authority Key Identifier:
keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:da:65:2b:ab:b8:0f:a7:75:a0:75:de:1d:df:c7:76:7c:
74:40:b5:e7:86:0b:95:2d:48:13:6e:68:e5:fd:ab:90:6e:15:
ca:8b:8b:5a:05:40:72:3e:32:27:c6:e3:fc:83:f6:6b:20:1d:
de:dc:fe:94:7b:9c:e7:3f:b8:50:ae:7a:a5:ed:fd:a0:f4:48:
59:9b:78:87:0c:9a:f5:90:54:19:99:86:fb:fd:eb:ea:2c:57:
5e:5b:02:82:a5:93:7a:31:bb:5f:f3:85:af:b6:76:11:23:8d:
b4:43:5a:ce:fb:b9:76:54:36:71:e3:b5:94:f8:af:08:58:79:
16:12:2f:d9:c5:2c:c6:d8:1b:a5:1c:f0:c3:0d:71:d6:6f:b9:
f1:5f:4b:8f:1d:ed:a6:aa:36:16:a8:c4:0b:73:22:62:34:84:
7e:2c:56:a1:90:63:68:37:72:3d:b7:e1:a2:68:47:a2:3c:cb:
78:68:26:31:21:aa:03:b4:06:ef:87:98:6b:6d:eb:58:41:93:
0a:56:20:40:1a:0d:47:87:a7:c0:b7:cb:b3:1a:eb:2d:01:03:
1b:6b:cf:35:8c:5f:e0:25:30:d7:f2:1c:c1:0c:a8:40:35:88:
8d:c2:5a:d1:81:fd:b5:95:83:c1:b3:80:c7:1b:f1:ff:01:46:
b4:81:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:40 2026 by rpki-client