
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: YKLeD+dR8aYLVVICpkwRwUADnQTBqPzGLTiqnR5LVn8=
Subject key identifier: 6C:A7:E6:B6:51:39:06:79:E4:F4:2D:7B:14:F5:D7:4B:B8:DD:E4:37
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 01A4
Signing time: Fri 07 Aug 2026 03:59:02 +0000
Manifest this update: Fri 07 Aug 2026 03:59:01 +0000
Manifest next update: Fri 14 Aug 2026 03:59:01 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: Jxv+VYuWUsqMtKSghfIYh74ue+1CjtotVyX19yKgjIM=)
2: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
4: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 03:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Aug 7 03:59:01 2026 GMT
Not After : Aug 14 03:59:01 2026 GMT
Subject: CN=6a755806-663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:02:94:85:12:15:8c:bd:32:da:4a:b1:4f:
d6:bc:c1:45:c8:01:57:39:51:84:94:4d:b7:09:dd:
af:d8:c8:e6:c8:81:a1:4c:ed:4f:9c:0a:4d:24:e8:
02:5b:4b:75:b7:ee:6e:ad:1a:b8:93:83:a0:d2:3f:
fd:a6:97:6c:1b:29:70:b6:80:e0:df:1f:6e:ce:56:
b8:0d:4a:51:04:5b:ad:c9:c2:b3:01:87:9a:82:93:
a3:6e:21:a4:bf:2c:7b:8d:2d:20:d1:33:75:5f:ae:
11:91:f6:b4:e9:c1:ba:66:eb:e5:6e:aa:9b:fe:99:
6b:3f:42:54:1d:6f:cd:98:7d:5d:d5:0d:f5:87:de:
75:ad:cf:d9:5b:0d:39:ad:8a:87:f7:69:91:8a:b5:
9e:dc:c0:03:ec:7f:a3:06:7e:af:13:53:2f:eb:34:
3e:2a:fe:f3:84:99:2c:c8:0b:a6:ef:e2:d2:c6:91:
e4:96:30:23:6e:b6:d7:33:4d:e3:b7:41:91:9a:48:
41:3f:0a:76:9c:ab:57:4b:6b:7d:ef:d1:29:f3:5e:
94:25:c0:bb:5a:ff:10:ca:2e:e7:71:f8:27:a3:be:
72:49:ab:17:5f:37:ea:1f:2d:68:94:7e:7c:11:9b:
54:f8:56:1b:a9:63:17:94:de:69:5f:0f:a4:6e:57:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:E6:B6:51:39:06:79:E4:F4:2D:7B:14:F5:D7:4B:B8:DD:E4:37
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:0d:7e:7a:74:c1:4f:1b:76:5a:b6:f1:f4:d6:df:85:80:
c5:2c:77:3e:68:a4:e4:a7:18:2e:a4:80:73:e9:4a:12:0d:22:
da:e0:86:73:85:c2:3e:e8:fd:be:a6:5d:dd:54:38:73:ec:1b:
2d:10:ce:a0:e4:27:ad:bb:78:c0:20:51:97:c2:35:2c:d5:30:
49:b8:f4:e9:8f:1b:34:da:f0:eb:4d:8b:62:64:2f:9d:f6:b4:
b8:50:d3:3e:e3:cc:34:84:b5:c7:7c:6e:b2:f1:5f:3d:5e:9e:
90:16:5c:bd:94:b1:b4:29:11:4b:2d:15:03:3d:91:7b:7b:8f:
0c:b6:8d:5a:af:3a:00:9d:bf:d4:5f:67:83:06:c4:b0:a4:a4:
d3:0b:35:80:f2:68:f9:98:98:90:1a:d7:ab:5a:b0:ff:20:75:
5c:73:12:2e:7c:48:1d:51:8e:9b:f4:8c:72:83:2f:e3:7a:22:
9b:c7:71:dd:ed:9b:c7:66:52:5c:2d:b2:96:fd:38:c3:89:6f:
e9:4f:61:0f:78:28:ce:a5:54:47:ab:d4:2d:58:54:5d:db:00:
c2:b7:cb:96:84:f4:08:02:97:79:9b:3a:23:a2:d0:e1:c5:ac:
b2:3b:44:27:06:3b:7b:10:84:09:99:26:6d:71:0c:2f:99:64:
c6:9d:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:17:10 2026 by rpki-client