
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: apju9PnBhj9l9iyPTW9A0YU1eDqSretmT3R9gTmroCg=
Subject key identifier: 51:04:96:32:DD:91:6D:04:72:00:24:EF:AB:5D:8C:22:05:81:81:86
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 0179
Signing time: Wed 13 May 2026 04:49:02 +0000
Manifest this update: Wed 13 May 2026 04:49:02 +0000
Manifest next update: Wed 20 May 2026 04:49:02 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: 7OwngA7p7aaNd/lDFeqrfi7kDfIC4uvshm+hh53k6WU=)
2: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
4: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: May 13 04:49:02 2026 GMT
Not After : May 20 04:49:02 2026 GMT
Subject: CN=6a0402be-a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:e1:a1:7c:97:8b:98:c4:d7:59:e0:cc:e8:
39:b9:a1:f9:34:71:8c:4f:bf:b3:30:bb:c0:6c:0b:
82:99:44:54:75:f1:88:09:bb:81:f7:eb:6e:ea:db:
ac:0e:fd:ab:fa:0b:e5:42:ec:5a:03:51:bf:4a:5e:
52:c0:b1:f3:75:04:a6:7b:ea:83:fe:b7:44:1e:0b:
ec:c2:8e:c8:55:75:1d:f5:15:92:98:2b:f1:b8:82:
83:29:2f:59:61:f2:e3:f3:cc:88:7b:a6:9a:43:ae:
2c:bf:55:2e:5e:f0:a6:9e:97:70:8e:9e:78:2c:6e:
24:29:fc:d2:61:6f:45:49:67:c6:03:39:19:ee:9a:
f8:65:22:e7:c6:e5:b7:9b:2c:cc:07:e2:9e:79:11:
b0:c9:af:0c:f4:bb:26:b2:59:86:26:3b:8e:c1:dc:
60:90:0b:a0:4d:51:22:7f:f6:5c:89:fb:3d:31:53:
4c:b4:62:90:72:cf:e2:3d:20:94:f6:f2:12:73:81:
df:64:2c:d9:08:92:e7:3b:fe:b5:44:ca:b4:38:25:
7c:d7:d3:ab:76:af:ed:ea:7c:5c:ad:aa:4f:19:f7:
2d:f3:50:5a:8c:d5:0a:fb:1e:42:f9:68:47:f9:1a:
aa:2d:ed:28:40:a8:da:51:74:5e:0b:9e:ac:f8:cb:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:96:32:DD:91:6D:04:72:00:24:EF:AB:5D:8C:22:05:81:81:86
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:e6:e3:96:a5:85:01:dd:76:f7:53:47:49:4c:2d:52:1c:
41:a2:92:e1:fa:69:c6:c4:a2:94:2d:1c:a9:f7:4f:ed:50:16:
08:12:71:47:bf:ea:a0:17:21:22:dc:c1:98:65:1d:a7:5f:ed:
27:d4:e7:53:5a:93:a6:9c:71:f9:c6:f3:80:1b:2f:0b:20:84:
51:18:c5:89:d0:d1:99:92:8b:be:26:c2:1f:10:f3:0b:e9:53:
a0:10:ec:94:88:97:51:f7:54:a2:24:ff:21:ea:fd:06:bf:06:
50:f0:4e:4b:8f:1f:91:71:fe:82:23:05:78:96:4a:b8:4d:27:
79:a2:91:81:ea:69:da:33:ad:83:cd:af:44:34:5b:3c:f0:0e:
fc:61:f4:d9:f2:81:62:7f:e6:d3:4c:da:f6:8a:d4:aa:8b:b6:
09:ac:fe:95:b0:0b:41:5e:49:a2:89:13:db:c1:1b:c8:01:e8:
4b:b6:ca:67:00:21:54:a7:15:a7:18:cf:df:af:11:02:e1:fa:
03:75:31:e7:d4:64:89:e7:72:1a:44:98:e0:f0:d5:2c:70:ac:
f0:5b:e1:2d:39:4c:b9:fd:91:5f:b2:5c:5a:7e:40:3a:89:53:
f9:1f:89:0e:43:46:7e:7c:e7:22:23:13:47:6d:5d:09:a4:12:
f6:8f:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:05 2026 by rpki-client