
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: Gl5TtQKJpRrciH3djW5zWd8vJrYgSAcKAhdE6l4W4S8=
Subject key identifier: C3:11:4D:D0:D4:CD:78:97:15:2F:11:ED:E6:F8:AD:3F:8A:BD:F4:63
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 0174
Signing time: Sun 03 May 2026 05:02:52 +0000
Manifest this update: Sun 03 May 2026 05:02:51 +0000
Manifest next update: Sun 10 May 2026 05:02:51 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: Kv1hpsb4bogYyovEgyan3YNvkKQtt8KhynePHYQ+wZM=)
2: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
3: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
4: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: May 3 05:02:51 2026 GMT
Not After : May 10 05:02:51 2026 GMT
Subject: CN=69f6d6fc-99d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:f7:00:ee:f1:18:0e:51:3a:a8:fc:4d:73:
eb:13:52:2d:55:b0:8a:cc:9c:c2:87:90:aa:e4:95:
68:3f:7d:02:a7:e4:ee:07:92:31:00:12:3e:2c:fd:
18:e5:9d:5f:07:d5:95:95:f3:dd:b5:25:f6:40:b3:
9f:8b:6c:96:c0:32:eb:fb:71:66:6a:86:b4:72:44:
b1:54:15:fc:e4:35:20:c7:51:75:ac:21:cb:a5:5b:
d6:d8:71:4a:c6:c6:36:93:8a:2c:ac:11:1f:b8:1c:
f9:04:52:89:2d:62:37:99:33:f6:b7:62:cb:27:86:
73:78:d1:7e:81:65:cb:67:86:54:86:30:7c:fe:ac:
3c:68:f0:6a:4c:ec:d4:d4:fe:28:a2:c0:45:75:28:
d1:9b:3f:de:5b:b8:7f:ac:62:39:22:7e:06:f2:43:
9e:a8:14:ce:ae:70:08:e8:a8:ea:3d:93:21:11:ad:
3b:5a:34:d7:ec:2b:2c:01:18:0e:42:8d:26:8b:a4:
58:da:bb:f6:69:e9:15:f0:91:32:f2:c9:1b:61:f9:
7b:7b:b7:74:6a:5a:c6:df:cb:6e:0d:ff:a0:68:cc:
31:64:8d:b6:34:1a:b7:a0:31:89:39:f7:a4:ea:ec:
86:0a:46:c2:19:8f:c2:1b:08:8e:18:eb:af:9c:a8:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:4D:D0:D4:CD:78:97:15:2F:11:ED:E6:F8:AD:3F:8A:BD:F4:63
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:a2:1f:ba:39:00:20:e8:2f:2e:b9:1b:03:11:a5:19:28:
c9:91:4a:81:bb:d4:9d:c4:84:ad:b0:78:00:b5:5c:55:4d:c2:
ab:a6:e2:69:3c:d0:73:14:4d:9f:00:8b:4b:71:5c:47:24:3e:
5f:ee:5a:45:38:16:29:0a:fa:e2:d3:b6:b4:32:be:1e:0d:84:
8e:a9:4d:97:75:95:e4:4f:d4:ba:fd:52:ac:7c:b5:9c:df:6e:
78:2a:90:bf:1b:2e:34:2e:b4:89:7b:e2:73:c8:4b:6c:03:41:
e1:39:4b:8c:26:04:4a:c0:ec:9f:a4:31:e1:4f:c5:b6:65:a0:
4b:f8:b2:79:a0:89:73:a7:7d:54:43:70:76:c2:b7:2a:65:76:
00:b0:40:97:c8:17:01:fd:59:14:b2:c1:93:23:75:90:b2:13:
0e:52:de:39:a2:1f:d0:a9:23:fd:ff:23:f5:da:59:f4:ef:fb:
4c:61:09:3f:05:8b:ad:66:9d:e0:ad:32:a6:52:39:16:0e:80:
95:31:f3:9e:8e:cf:5a:5e:17:a2:e8:a8:ee:2b:51:a3:5e:3a:
f6:8b:99:19:ea:53:9d:94:f0:dd:97:a6:32:68:96:ee:0a:d4:
b1:20:fb:85:6b:9e:6a:dc:70:a1:f7:56:a7:1b:b0:75:9c:cd:
ac:e8:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:35:02 2026 by rpki-client