
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier: CLDAE1LX72oJm7nSQC17mLYA3Xfe84uitloUQMoQ4B0=
Subject key identifier: 55:B6:5B:45:D3:3F:D4:F7:0F:8C:BD:94:3F:E6:0B:A6:E3:A9:C7:3A
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number: 011B
Signing time: Sun 05 Apr 2026 05:15:45 +0000
Manifest this update: Sun 05 Apr 2026 05:15:44 +0000
Manifest next update: Sun 12 Apr 2026 05:15:44 +0000
Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: ooDC4/xmKNCss/2Cgpxk8NGASP08vmjr6rTer9MyVrs=)
2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Validity
Not Before: Apr 5 05:15:44 2026 GMT
Not After : Apr 12 05:15:44 2026 GMT
Subject: CN=69d1f001-ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:ad:f4:f6:8e:e0:e7:29:a3:d9:fe:eb:0f:
8b:26:99:bb:32:62:ee:f1:aa:4e:96:1b:74:78:dc:
16:d3:c4:4d:1c:1a:a7:dd:6c:09:f2:26:e0:c8:24:
15:a1:90:3b:10:10:c5:5f:9c:de:6a:cf:e0:25:99:
75:95:4b:cd:3e:59:b6:90:05:c5:6a:e9:05:0e:9d:
f5:94:3b:78:0d:b5:6e:9f:c9:a7:b2:e5:1f:21:40:
9a:ce:0c:cc:98:e7:14:0a:b9:60:93:36:0c:f8:9e:
76:23:77:1c:ca:81:fd:64:4b:ed:17:64:97:c6:2b:
5d:18:f0:f1:85:81:7e:3c:ee:c8:10:bf:03:99:76:
e6:78:3b:be:bc:e5:96:69:13:f5:f6:31:fd:d0:d7:
d4:8f:4c:13:30:bd:92:11:9d:9e:62:4b:9d:5a:36:
1a:7f:54:35:41:7e:a0:0a:55:c1:28:a6:b5:85:cf:
df:57:a5:80:3e:48:cd:6d:d3:32:9f:df:44:b9:5d:
5f:2f:62:cc:78:e1:62:73:ab:28:22:90:d7:3a:cc:
72:65:bc:25:4b:d2:7b:bb:45:27:ab:53:80:3b:0f:
15:56:26:2b:69:24:2f:fc:89:1d:20:c5:26:b0:bc:
61:7d:0f:d5:85:fd:b4:b5:47:82:b8:a0:0d:6a:4a:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:5B:45:D3:3F:D4:F7:0F:8C:BD:94:3F:E6:0B:A6:E3:A9:C7:3A
X509v3 Authority Key Identifier:
keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:48:e6:ad:84:ce:5a:dc:3f:2f:96:ee:07:df:42:dc:a3:
aa:0d:bf:9b:de:12:5a:bd:15:4a:5c:0f:b0:da:1c:42:26:eb:
f0:3f:a3:03:15:53:eb:77:99:0a:24:b0:11:ae:f4:c4:12:9e:
27:7c:10:9b:c4:5e:35:3c:06:12:b8:86:e9:3e:27:d7:ad:a1:
7c:f2:76:fe:de:d8:5d:a9:7c:5c:d6:22:2a:18:33:04:36:87:
5a:93:5e:2b:4c:94:d6:f7:d8:6d:9e:3a:c0:0d:a7:83:47:7e:
b6:55:41:a7:a2:fc:23:0c:81:48:8e:20:8a:eb:38:53:61:a8:
ba:9b:2a:c0:ad:d9:be:4c:d0:78:3c:d2:db:d3:dd:9d:aa:33:
e0:11:8d:be:28:3e:cb:75:32:d1:87:b8:d1:14:ef:85:39:39:
79:c6:c5:57:de:53:68:b0:fa:f5:9a:58:17:b5:bb:ff:33:5e:
64:45:e7:db:12:d4:ab:ac:89:a1:21:c4:58:3e:ea:83:f5:59:
1d:9b:db:6b:3d:3d:47:17:d1:7c:31:16:2d:9c:c3:20:6a:ff:
9c:11:5d:ef:6b:ed:99:4d:6d:30:da:dd:c1:d3:2b:48:85:42:
83:84:2d:95:6f:07:9e:45:37:df:1a:2a:0f:8d:06:6e:df:94:
7b:1c:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:02 2026 by rpki-client