
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier: kzuLwa9x0dNhsf60o9elF1hxpoq2EQPIVpA1nfPMuqY=
Subject key identifier: 6E:0B:D7:82:60:8C:1A:77:86:93:A1:B0:22:69:4E:CE:C6:E0:12:6F
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number: 0160
Signing time: Wed 25 Mar 2026 04:17:58 +0000
Manifest this update: Wed 25 Mar 2026 04:17:58 +0000
Manifest next update: Wed 01 Apr 2026 04:17:58 +0000
Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: lg0UV3wHmxPT8a5eyE5UfIptiYWlM9tBf8kfFDFxU8I=)
2: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
3: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
4: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Mar 25 04:17:58 2026 GMT
Not After : Apr 1 04:17:58 2026 GMT
Subject: CN=69c361f6-11b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:68:8f:30:df:f4:be:16:b9:f0:55:b3:ed:
f1:d9:1c:07:2a:c4:92:a0:da:9d:91:af:fc:91:c6:
e5:8b:32:f4:89:f1:db:a6:fb:8b:c5:af:8b:98:1b:
7e:8b:e5:ae:b5:2c:6b:03:78:d8:5f:f4:53:39:90:
44:9d:90:90:3c:36:cb:4d:ed:f6:3e:b7:0a:7f:b0:
3e:54:3e:d3:df:a8:fc:93:fd:6c:86:43:21:3a:ec:
bb:c3:5a:72:93:51:21:19:a7:77:20:c3:36:39:ed:
8e:d6:c4:c6:ac:f0:b0:58:9c:68:7e:eb:7d:b9:54:
d2:cb:3a:bf:65:de:d5:c9:b7:4d:78:7c:61:19:b2:
b9:91:40:47:91:82:6b:eb:49:e9:ff:d1:2e:d8:a5:
fc:89:35:cd:88:16:90:4c:24:61:d6:27:19:9b:6f:
ff:b7:d1:41:a8:64:43:4a:fb:a2:9a:2f:aa:d1:9a:
6f:e7:10:f9:72:de:93:5e:86:20:7d:86:2d:a0:a9:
55:f9:25:62:8e:dd:0c:a8:0d:82:21:87:d3:09:3c:
5f:5e:96:ad:14:d6:80:86:e9:5f:a2:78:8f:dd:70:
25:19:8a:7d:1c:57:2c:52:7a:79:d3:62:a3:11:31:
7d:0b:01:22:0c:f2:9c:28:53:4a:e7:c0:24:07:87:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:D7:82:60:8C:1A:77:86:93:A1:B0:22:69:4E:CE:C6:E0:12:6F
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:f7:8f:f2:18:02:b1:29:5d:fc:0f:db:2f:ec:65:a8:08:
a6:7a:11:8e:d6:d5:8d:bc:1c:ec:62:51:95:a9:81:59:52:48:
61:3f:63:ea:a7:b3:f6:61:7b:04:85:a3:c6:2b:c0:98:d8:3b:
0c:16:c5:84:ab:5c:8a:90:67:ec:3d:02:cf:11:76:ed:74:b7:
79:08:55:81:eb:35:60:cd:8d:2c:3f:19:3d:0e:16:ea:2c:c0:
7c:d9:0a:a2:09:d4:e8:bc:a0:f5:c3:c6:4b:78:9a:e3:18:aa:
09:dd:1a:39:4a:56:ba:6c:3e:49:f6:ce:c2:7a:47:4d:f1:f2:
8a:79:6e:06:f7:d8:6e:2a:c0:05:94:02:6a:69:4e:87:98:d7:
dc:13:0b:6e:76:4f:a6:36:2b:2d:b0:80:32:24:26:5d:a8:68:
a2:3f:e9:b8:bf:37:77:bd:25:91:65:76:5e:c1:5b:98:70:cd:
09:bf:00:be:b7:0c:e1:cc:fc:5c:9b:b0:4e:95:87:04:99:1c:
04:9c:2e:23:8d:05:95:4b:4d:e9:e3:eb:35:ed:d5:5e:f4:11:
58:a6:42:59:07:0a:89:2f:68:51:2f:98:20:6c:73:2d:37:3a:
b6:dc:25:ea:3a:07:a7:8b:06:c9:ff:cd:20:30:99:dc:c0:8a:
f4:8b:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:05 2026 by rpki-client