
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: NYtfVGOcXJwlG2FCNUi3/lHZNMBcmmL7F4wr84iFOQQ=
Subject key identifier: E1:56:46:73:A3:5F:06:42:63:8B:0F:60:E2:55:AE:7F:F7:86:DB:6A
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 015D
Signing time: Thu 19 Mar 2026 04:10:11 +0000
Manifest this update: Thu 19 Mar 2026 04:10:10 +0000
Manifest next update: Thu 26 Mar 2026 04:10:10 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: zNAaslTRpDq/qR6ru9Eifoh1zdRDNb7ZyoMYB9pHY5U=)
2: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
3: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
4: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 04:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Mar 19 04:10:10 2026 GMT
Not After : Mar 26 04:10:10 2026 GMT
Subject: CN=69bb7722-c95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:78:8c:c9:2d:02:46:8f:a0:98:16:46:12:
fa:4e:c2:fd:27:44:0d:a9:23:c2:1f:36:15:50:0f:
b6:61:cb:be:7c:1a:ca:14:4c:ad:5d:5a:5c:32:df:
b7:5c:e1:43:2c:78:98:88:27:05:03:bb:52:8d:fa:
30:ee:ac:17:e3:ae:b9:86:6d:95:8a:1d:c0:5c:28:
32:c9:62:83:49:dd:26:47:5e:0c:cb:d9:86:bc:53:
57:6c:0e:ab:e8:e8:1b:99:85:a6:75:fa:95:b5:31:
31:8c:b0:26:29:7d:ca:7f:ef:c2:40:1a:d5:21:2d:
c8:0a:74:68:49:f4:47:7d:e2:51:85:a2:c2:8b:cf:
4a:04:89:af:f5:2f:8a:27:3e:3e:68:0b:87:ab:56:
c4:c5:ad:12:23:ab:bb:34:fe:3b:fe:5e:78:03:5f:
60:12:e6:ae:98:b8:f5:8e:6c:3d:cf:54:f4:0e:71:
f8:ff:f9:23:42:81:89:a1:dd:08:5c:f4:29:74:59:
c9:9e:26:09:18:52:79:2c:47:e8:e7:41:47:59:b0:
2b:fb:70:45:a9:90:b7:77:ef:69:b6:ee:91:24:79:
66:ad:37:b8:a7:3a:a7:ea:00:29:b8:5c:0f:59:b7:
9a:c4:d3:2b:13:1e:3a:94:27:9b:56:f0:a4:be:db:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:46:73:A3:5F:06:42:63:8B:0F:60:E2:55:AE:7F:F7:86:DB:6A
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cb:9a:17:02:f6:84:1e:28:b6:5e:d6:9f:cc:9a:89:29:9a:
10:a4:d1:29:c0:37:00:cb:75:34:6e:dd:25:ad:d9:3c:40:a8:
a6:10:82:55:95:90:4d:1e:f5:e0:ae:02:01:a3:e2:48:c5:bf:
e5:95:58:44:4c:78:28:8c:9b:b1:25:0c:7f:88:58:9e:2c:c8:
13:5a:c3:3d:39:3a:fd:ad:ea:00:14:df:84:4c:fa:a8:bd:7f:
bb:6b:48:4f:89:9a:1b:bd:4e:5d:12:09:3c:7e:89:ec:21:6f:
bb:c4:06:bf:78:44:cf:41:65:61:98:f6:0d:b0:ad:ce:53:d6:
17:25:50:44:5c:ea:01:b8:6e:ff:4b:30:ca:35:04:5b:ed:b9:
7a:8f:f7:1b:7d:a0:fa:db:81:18:e7:88:99:55:87:a9:fd:f2:
33:5c:46:cc:17:b2:93:dc:fb:1d:f8:db:20:a2:e6:08:6b:60:
61:52:44:66:da:2b:a9:0d:65:b7:e4:68:ba:c3:37:5a:74:0f:
e5:df:da:45:02:f8:08:ae:2e:fc:5f:08:e6:f1:25:34:0c:ec:
dd:df:bb:eb:96:5c:1b:10:86:24:0b:fb:b1:48:68:93:bd:da:
1a:de:dd:81:24:a6:e6:4c:49:de:c6:d1:f8:ac:68:30:44:23:
dc:e3:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:30 2026 by rpki-client