
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier: IfhgaXQm1w7F5L+iaR/tfuwvdIhvZHD0jDRMorbfV0w=
Subject key identifier: D9:FD:AA:C9:E3:B1:62:85:04:8B:A8:D3:5A:65:5D:BA:50:A3:DA:86
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 08DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number: 0892
Signing time: Thu 18 Jun 2026 20:40:01 +0000
Manifest this update: Thu 18 Jun 2026 20:40:01 +0000
Manifest next update: Thu 25 Jun 2026 20:40:01 +0000
Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: n4FC6MzR0TGJ7JYDeJ9VjFlUgwM2U5Krz7/Ui3HhFPc=)
2: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=)
3: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=)
4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 20:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Jun 18 20:40:01 2026 GMT
Not After : Jun 25 20:40:01 2026 GMT
Subject: CN=6a3457a1-58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:97:99:5e:9a:ef:51:a8:d7:7d:6b:fd:e0:
dc:fa:e3:d8:41:1b:19:11:65:95:c9:20:41:b5:80:
68:6d:58:30:97:36:9a:c2:00:ba:63:2f:56:54:c3:
9f:2d:6f:80:0b:81:51:fd:c6:b2:e8:1f:28:e8:23:
dc:ce:8a:86:f2:d7:a6:0d:16:68:e2:9a:b6:a7:91:
2c:8f:86:00:91:d7:18:3b:ef:86:d9:d3:ce:de:db:
7f:00:ad:66:ac:da:0a:6d:9f:26:1e:71:c9:b9:78:
48:52:1d:8f:7d:37:5d:11:17:8f:4f:1c:86:8c:c3:
b9:cb:8b:f5:8b:5e:34:ab:6f:1c:20:75:31:51:74:
95:88:aa:2b:3e:9f:6d:73:45:3b:07:43:99:52:6b:
df:c6:fe:94:84:94:e6:00:3b:72:44:8c:d6:17:b2:
ba:04:84:11:7b:9f:3f:f3:bc:a0:95:2a:6a:ba:52:
14:05:06:c7:cc:c7:f1:30:1d:f8:9c:a5:6b:b4:ef:
8e:b5:92:fd:60:b3:b4:c5:fd:37:38:07:4c:7e:42:
19:3c:07:78:20:3d:0d:41:5b:39:99:0e:d4:eb:47:
c0:45:01:5f:87:fe:fa:65:25:96:24:f7:f1:0b:e5:
9b:e7:cc:e8:17:e5:11:9a:c3:d3:a6:cb:09:1f:18:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:AA:C9:E3:B1:62:85:04:8B:A8:D3:5A:65:5D:BA:50:A3:DA:86
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:5d:bc:0a:08:1e:5c:94:19:2c:4e:32:17:76:60:9b:e0:
4b:e2:a4:5e:21:f7:ed:ad:3f:ab:b1:d2:f0:73:88:59:a1:0e:
35:b8:43:1e:c2:0f:48:dd:04:27:60:50:7b:ac:39:6b:8a:d2:
a6:51:c0:87:76:a3:7d:a0:04:e3:44:8b:0f:3c:04:c9:16:95:
44:4f:c1:8b:e0:e9:84:46:17:c9:4a:40:89:d7:72:58:2e:7c:
c3:ed:df:2d:db:6e:50:d8:43:ad:28:d8:dc:96:25:eb:63:a1:
4d:7b:32:62:15:55:63:7b:ed:c8:26:2a:a9:75:f7:f8:52:cd:
54:d4:a2:f7:cb:75:3f:53:81:24:6b:b5:b9:c7:11:c1:e5:8d:
9b:1b:90:7c:e4:61:c8:16:49:30:cc:b4:22:dc:f2:5c:34:b4:
ae:ed:e6:a2:43:f8:b8:db:f6:71:3e:f6:2c:6b:9c:b3:ad:1a:
72:0a:d9:2e:8e:6c:b7:32:f5:42:e3:fa:ab:0f:30:e9:e7:71:
a9:71:6d:51:ba:50:68:6a:e8:d8:b3:33:79:40:93:95:05:30:
e4:35:31:6a:39:97:d1:a6:8c:c8:df:6b:37:db:28:cd:c6:56:
42:15:f2:80:02:15:62:86:c0:57:c9:9e:10:18:7a:87:28:7f:
78:d0:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:25:56 2026 by rpki-client