
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
File: P352KHem7vVf7hmyuvchynA55k4.mft (raw, json)
Hash identifier: u5CQPbD4YxyWqOpfT8G/KqBWrlpCpIgunfYLua1FkLM=
Subject key identifier: 27:C3:6C:97:7C:7E:55:E4:07:F0:22:17:F5:2D:35:09:F7:47:DD:FB
Authority key identifier: 3F:7E:76:28:77:A6:EE:F5:5F:EE:19:B2:BA:F7:21:CA:70:39:E6:4E
Certificate issuer: /CN=A911049F/serialNumber=3F7E762877A6EEF55FEE19B2BAF721CA7039E64E
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P352KHem7vVf7hmyuvchynA55k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
Manifest number: 1C
Signing time: Wed 23 Sep 2026 05:33:53 +0000
Manifest this update: Wed 23 Sep 2026 05:33:52 +0000
Manifest next update: Wed 30 Sep 2026 05:33:52 +0000
Files and hashes: 1: P352KHem7vVf7hmyuvchynA55k4.crl (hash: DdHPslXKK/dqGVFu8ym0gLgkG+/i37ZoEj/eiD5dcxA=)
2: B34893FA92FE11F191C12B186D11F970.roa (hash: wHxIyUd2ELk+bazhMCqNlHcAb6aFgDu+aV9Iqu/ksUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.crl
rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P352KHem7vVf7hmyuvchynA55k4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911049F, serialNumber=3F7E762877A6EEF55FEE19B2BAF721CA7039E64E
Validity
Not Before: Sep 23 05:33:52 2026 GMT
Not After : Sep 30 05:33:52 2026 GMT
Subject: CN=6ab364c1-fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:29:d2:95:5f:57:36:b7:b0:b6:b7:19:9e:
b7:04:40:1e:4f:9b:41:72:5c:e8:2b:4d:b1:e2:d2:
75:eb:9a:6a:6b:b5:d6:13:db:9d:c7:66:43:ef:32:
42:5e:fe:62:25:08:ee:52:28:21:de:7d:85:7f:2c:
f4:d2:d0:46:4b:a6:ea:6c:24:7e:59:5c:c6:89:2e:
86:24:01:e0:91:19:09:dc:32:60:31:26:3a:d6:be:
94:21:fb:cc:f0:ea:8c:0d:ca:ea:91:25:09:be:fe:
71:e3:15:33:80:d1:62:38:9b:de:c5:61:0d:7b:39:
c2:e4:05:7a:cd:ab:fa:07:96:8f:6d:8d:3d:c3:f2:
9d:42:9f:17:29:1f:4a:16:18:3c:51:97:69:6c:3b:
34:a8:93:1b:0e:bb:24:80:1a:ec:e0:0a:40:c0:15:
7b:27:3e:90:d1:da:8e:fa:a3:48:bc:f2:88:67:6e:
e4:54:10:e3:57:ea:2a:ac:eb:a7:af:d2:0d:8a:bc:
a8:1a:cb:4c:15:35:b5:10:17:b5:cb:9e:26:bd:47:
95:bd:f9:53:db:f3:e7:e6:d8:9f:e7:27:60:da:0a:
0c:c5:e9:8f:bb:6b:18:a0:b5:c9:39:b3:cb:b2:7b:
c9:95:78:14:f4:35:53:91:0e:7f:83:5b:a6:1e:2a:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:6C:97:7C:7E:55:E4:07:F0:22:17:F5:2D:35:09:F7:47:DD:FB
X509v3 Authority Key Identifier:
keyid:3F:7E:76:28:77:A6:EE:F5:5F:EE:19:B2:BA:F7:21:CA:70:39:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P352KHem7vVf7hmyuvchynA55k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/72E48266912711F19FB2F4FE5A11F970/P352KHem7vVf7hmyuvchynA55k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:b2:5c:17:ba:74:62:b1:64:cb:a9:ac:55:66:48:0b:bb:
2e:02:b6:7b:ae:7e:7d:33:6a:e6:2f:5a:d3:c6:cc:18:c4:7c:
0f:18:32:8d:d3:01:f7:d4:ea:8a:2d:77:46:ef:9c:58:01:c7:
7c:35:5c:13:99:1c:ee:a6:ed:bb:86:06:28:86:ab:27:a2:f1:
43:c7:ae:b1:64:a5:c3:55:62:03:59:06:a5:f6:2e:cc:16:65:
58:72:d2:e8:c4:33:e1:39:5b:40:63:ae:97:bc:92:a9:1d:95:
2b:db:f8:02:f5:4a:ad:98:dc:cf:81:80:71:68:ca:a9:52:87:
2e:c5:7c:27:92:53:ca:88:7b:6f:22:22:1a:25:19:ac:6b:55:
1a:a1:c3:cd:f3:6d:84:c2:03:bc:83:fc:c4:00:10:13:0e:ca:
88:f3:55:b3:1f:b2:d0:e5:f0:75:37:89:0c:2f:bd:b4:2c:f5:
64:0b:23:bb:dd:aa:f0:54:4a:21:55:53:b1:af:b1:31:a9:3d:
da:f3:b7:0a:36:d3:90:a2:8a:d1:31:21:a7:42:9f:4d:12:c6:
40:b3:44:c7:77:7b:c2:c6:16:f2:61:f4:8e:c5:11:78:6c:14:
ec:38:40:c2:c4:8a:5b:3c:3e:63:7d:8c:66:95:e2:e5:f3:58:
4d:e7:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:15 2026 by rpki-client