
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File: c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier: p3ALM5bFeHnb+fhw0/DRStCDpDBj9lix9ReCHnCkSSw=
Subject key identifier: 3C:EB:A6:D1:76:EE:33:F4:B6:41:51:BD:90:0B:D4:A0:20:5E:AC:34
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1EDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number: 1EB5
Signing time: Tue 12 May 2026 16:03:33 +0000
Manifest this update: Tue 12 May 2026 16:03:33 +0000
Manifest next update: Tue 19 May 2026 16:03:33 +0000
Files and hashes: 1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: DZQf5XWTNq+VgPwWtZXp4gPBXd6Ox5PosLNUXa2TYsI=)
2: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: liMT6OAzfvJnsspgI1FzQ6ZwFHNyDq37HvK43oMb2f8=)
3: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: /qsVaB9Ik2QgEaAelOskN07kdqvopeyP2GfAlI1Wn9w=)
4: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: Q8meJh+l3QvnqqqYOUJJQlzzASdq6o1tO+VcZsCelFk=)
5: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: UYMwVYPaK7nzCwDIb/TjC1GQVHBFdraAzq6uV6QZN+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7899 (0x1edb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: May 12 16:03:33 2026 GMT
Not After : May 19 16:03:33 2026 GMT
Subject: CN=6a034f55-53bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:ca:40:1b:8e:0a:05:43:0d:c7:00:eb:5c:
88:09:07:87:4f:ed:a4:f5:ea:9d:ca:a4:c0:3e:a8:
cb:22:fe:56:7c:de:05:c8:0e:60:54:f7:a2:fb:92:
b0:83:3d:79:8a:c1:90:f8:68:7c:5b:e5:72:be:85:
6e:dc:c9:ba:c4:e2:0d:1d:08:04:bc:54:81:5c:b6:
b9:3b:6e:fd:1c:21:92:2b:fd:6c:7d:42:fc:e1:b3:
2e:95:59:6a:71:de:4e:65:78:1e:51:83:0d:d5:95:
ae:ea:8f:f6:f8:c1:d9:ec:6c:98:44:59:02:d8:a2:
26:b2:f5:c8:2d:8f:b5:88:ef:f1:4f:d3:c6:fd:59:
8b:2a:23:4e:ed:3f:6c:f1:b6:b5:fb:3d:a0:45:ba:
81:7f:1d:ee:fd:d9:73:91:7e:a2:25:8d:72:eb:66:
30:bb:13:c7:7a:71:8c:47:c8:9b:2e:f9:1e:85:b0:
1c:d9:e7:69:cd:20:ee:06:26:86:00:88:73:45:fc:
d5:7f:e7:ac:60:e5:8a:ce:61:30:c6:6b:70:75:ee:
02:bc:a6:d3:fe:bb:96:de:b0:93:13:2e:db:1c:d7:
e2:e7:d7:6e:0c:e5:62:1c:34:cc:9b:65:e7:3c:0f:
9a:a7:f0:7f:34:a7:71:b0:08:54:12:14:4a:16:1a:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:A6:D1:76:EE:33:F4:B6:41:51:BD:90:0B:D4:A0:20:5E:AC:34
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:12:99:5d:87:7e:8a:96:65:37:27:73:bf:76:71:20:89:
df:c3:80:af:2b:17:6e:a5:c2:bc:4c:10:52:a9:7e:40:2a:d5:
45:ea:fc:68:e9:57:fb:9c:78:ac:fc:25:28:89:6c:ef:8d:0c:
60:96:00:cd:74:97:20:fc:d0:c1:ad:b9:5f:5b:fb:ad:21:94:
c2:4d:a2:54:87:ba:29:b5:90:d7:60:21:cb:e4:d6:28:33:0f:
4a:0e:62:4c:1c:e4:0a:ee:41:8e:81:7b:7f:53:3d:a9:04:67:
bd:28:9e:ad:88:14:56:a1:e9:42:b8:4b:86:53:02:41:35:e2:
07:0d:ea:54:e2:ff:d0:24:ce:5f:3c:b9:88:df:5b:19:32:0a:
f4:0a:b8:78:b0:43:bf:f8:55:64:6a:a7:75:02:90:be:84:b5:
ff:20:bf:78:fd:6a:8c:9b:2f:3f:69:ff:66:98:ec:d2:0c:24:
86:76:34:15:de:b2:4c:fe:fd:cc:f9:78:51:2d:07:f5:c9:fb:
b2:87:46:de:de:f0:07:f1:4b:dc:2e:96:45:c8:be:67:fa:42:
3e:12:4b:ee:fb:20:70:d0:cb:65:f2:eb:03:ca:32:9a:58:cb:
55:9f:0b:93:92:38:4e:89:3e:a4:2d:fb:d3:f7:bc:6b:90:32:
05:b7:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:09 2026 by rpki-client