
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier: 5ifr5eLa+ZI/mCsnwjQeKxp7sL8qvBzhhvmuJvSr/WI=
Subject key identifier: CA:82:CC:41:F2:6A:72:A0:94:AF:49:0A:9A:D8:B9:C0:C2:2A:0C:43
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number: 0DF4
Signing time: Thu 02 Jul 2026 18:02:12 +0000
Manifest this update: Thu 02 Jul 2026 18:02:12 +0000
Manifest next update: Thu 09 Jul 2026 18:02:12 +0000
Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: aTJs+t4BTybMpS9nmOvxftfFMjU7D4+f6mA46toq+6s=)
2: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: ystXqmcXsJu+zcIezcCOloYKjrlcgYih0bHHJpAVghU=)
3: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: H2PKNA7ln5Tm1QO2PuY9P2UE8JnCTTe09zyZ/hYdcgw=)
4: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 1banGzm3MHHPGNLwGEl4a4TqEDqIBnphlYgtOeIrAtM=)
5: 938E408897E011EB8870DB29C4F9AE02.roa (hash: QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=)
6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: RuLZBRWd/+t6mmzM5XIVRxFhH72vtVTpt1H02OxGyCU=)
7: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: xIQORAl53eQLWRRXQOIoiissQk7N3FpNzgw3AMp5Aho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3650 (0xe42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jul 2 18:02:12 2026 GMT
Not After : Jul 9 18:02:12 2026 GMT
Subject: CN=6a46a7a4-9548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:97:b1:48:18:73:f1:d1:25:fb:60:61:4b:
71:e7:ec:7e:00:84:b1:d8:06:48:a1:43:13:45:08:
de:ad:75:1f:68:80:1c:e2:5e:97:3a:13:1e:3c:97:
48:13:4c:54:1d:8e:38:75:71:20:29:25:36:d1:62:
8a:66:2e:cd:b7:f1:ee:22:4b:5b:a0:d3:25:b1:f4:
d9:58:f2:c9:f9:44:c7:63:94:58:9b:92:a3:81:fe:
37:af:f8:99:99:63:c9:64:30:b2:d5:6d:78:83:a7:
1e:1b:ad:00:69:f4:f6:a4:37:a5:1d:6b:b4:72:6e:
6b:bb:0f:2d:eb:2f:6d:e7:fd:3d:b8:cf:0f:f6:be:
91:70:86:61:e3:0d:34:da:6a:cf:f6:07:c9:15:e1:
01:03:56:37:84:2d:8e:e0:72:be:2a:4a:e4:cc:18:
8e:54:a0:50:a1:52:27:2a:30:5f:29:e3:7d:93:c5:
f3:f8:ff:84:1a:63:65:7b:62:4d:f4:8b:50:e9:67:
44:34:8a:39:ad:47:1d:fd:9f:24:2c:52:31:fb:d7:
9e:44:69:44:f4:dc:e4:cc:6b:c3:18:f0:2b:8e:7c:
bc:44:fa:14:bc:92:01:8d:9f:b4:c3:64:21:0a:17:
1a:7b:0c:b2:85:2c:bf:7b:3f:88:75:ed:f0:67:21:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:82:CC:41:F2:6A:72:A0:94:AF:49:0A:9A:D8:B9:C0:C2:2A:0C:43
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:40:65:e7:c2:89:be:e5:29:eb:36:c2:c2:e4:ab:20:2a:fc:
e7:f8:58:c2:4f:3d:8b:04:66:aa:5f:b3:52:8d:ef:74:fb:6e:
81:7d:2a:26:47:cb:cb:40:26:b3:ce:95:a4:1e:28:02:d2:05:
62:65:cd:12:10:41:d6:cc:02:0d:cd:66:ba:01:a0:ad:83:ec:
20:2b:18:0a:e5:27:e2:8e:be:b0:a5:c6:9c:14:92:af:1a:85:
98:36:c2:2b:4e:7a:53:8f:48:f5:37:bd:d3:1f:7a:05:1b:0f:
58:72:c2:3c:20:f0:b2:a6:20:63:db:0b:8f:3a:77:ee:89:af:
02:16:95:b6:b3:a1:cd:4e:42:47:23:a4:4b:b9:eb:35:7f:05:
da:52:e6:a7:95:ef:fa:f7:84:da:c4:a3:3b:14:7d:75:b1:38:
63:f7:a4:64:f9:55:2e:b8:4e:2c:6f:4e:00:16:3c:6d:3e:52:
3d:7e:b2:82:65:a1:2e:b0:fa:14:9e:ea:f0:3f:10:a5:90:14:
0e:8c:97:45:6d:da:18:5c:aa:ae:c1:d9:5c:69:63:a4:38:82:
e1:5a:36:65:9d:5a:59:96:c8:ec:db:de:48:9d:e1:7a:87:e9:
a5:96:66:20:18:0d:d9:3a:c9:1e:88:d0:65:a7:ec:9d:2d:e2:
cc:b4:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 08:21:58 2026 by rpki-client