
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json)
Hash identifier: 5wivRh8F5ecodm8F4XBNFPc/tLSuXzPHEVda5cv7hbE=
Subject key identifier: 48:1E:3C:B2:05:28:F1:2E:14:0B:C7:9B:4E:01:E4:39:81:1C:BD:97
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
Manifest number: 0D0B
Signing time: Thu 26 Mar 2026 18:04:14 +0000
Manifest this update: Thu 26 Mar 2026 18:04:14 +0000
Manifest next update: Thu 02 Apr 2026 18:04:14 +0000
Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: rrvAluDyObFoCJMahceMLw5KcB3Mm2zm4RnYCG4bUVQ=)
2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: Q0TiMFa8tUssNISe0Ku0sJXnlAQzZvxq6YnX7JI1uME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Validity
Not Before: Mar 26 18:04:14 2026 GMT
Not After : Apr 2 18:04:14 2026 GMT
Subject: CN=69c5751e-b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:76:3b:dd:e5:8f:2d:66:b1:61:bd:eb:69:
0c:ca:2e:3e:5e:59:da:00:c9:18:ee:b9:2c:40:95:
87:c0:8b:2c:07:65:1b:e8:96:d1:bc:d3:f0:c9:28:
eb:66:e0:8f:c7:40:bb:2b:9c:a5:bb:78:ad:0b:16:
f8:f9:e7:2d:75:11:8a:6d:c0:ca:5d:51:bf:b0:6e:
a3:90:ed:42:93:d9:08:0e:8b:37:af:42:5d:f0:ca:
50:41:ef:61:29:1b:10:6b:19:d0:2c:ba:4f:84:e4:
03:0c:97:e0:d9:f9:92:35:ff:26:5b:d9:23:c2:c6:
60:3a:c9:23:91:98:68:1f:2b:fa:a0:44:88:53:8f:
ce:19:d9:e0:20:bf:7a:d8:77:a1:b1:01:5c:61:36:
76:35:32:a9:31:2e:7b:14:90:83:1f:40:af:a8:1f:
08:2b:01:56:b5:0f:0c:a7:52:7e:bc:be:d0:73:01:
21:01:86:9c:23:4a:e7:c3:5e:36:be:8d:bb:e5:e0:
eb:a7:f5:e3:c0:3b:6d:d8:c5:c3:94:1a:76:7e:43:
09:19:9c:da:22:28:5a:f2:2c:89:f4:c6:26:21:15:
fc:6f:dd:f9:26:5a:7c:c1:83:98:4c:97:ed:35:4e:
34:42:d0:6b:52:a9:4a:ff:8d:74:b0:d6:ce:a6:44:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:3C:B2:05:28:F1:2E:14:0B:C7:9B:4E:01:E4:39:81:1C:BD:97
X509v3 Authority Key Identifier:
keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:a6:98:b5:1e:7e:51:a2:23:59:88:fa:59:89:6b:f1:31:
be:3e:ad:69:ec:f8:86:0e:f0:8b:df:e9:9d:3e:87:af:7f:48:
e7:d4:f7:00:0c:5f:c1:85:c8:67:15:01:70:11:37:06:02:74:
ea:97:e6:1a:c5:3d:82:66:43:e0:de:df:4c:74:f8:37:33:d2:
a2:60:94:94:8d:18:d5:30:09:c6:5b:4d:29:27:6b:0c:a8:bc:
26:86:64:45:91:3f:33:33:91:13:82:0f:be:18:74:d7:73:80:
75:02:8b:f0:60:0a:bd:4b:f0:85:9d:7a:f2:cb:dd:88:97:0d:
e4:85:dc:4a:3a:5e:eb:0e:29:88:61:b0:53:0c:f5:51:a4:4f:
24:78:72:20:bd:c2:f9:80:6d:44:d7:fa:9f:45:96:a9:10:ca:
ff:3b:d5:41:0a:37:85:61:22:62:0f:f0:7c:4d:07:ab:e3:05:
e1:f1:a6:dc:f5:9e:cd:45:4a:46:3d:46:55:f4:a3:9d:50:49:
cc:a7:47:ae:ee:0b:89:c5:81:1d:d8:3e:a5:6c:7d:82:61:f5:
a6:fa:44:26:23:d2:2f:5c:85:c4:21:eb:e4:3c:42:c6:48:d2:
4e:af:01:08:4a:ba:88:38:61:33:ec:25:8b:b2:00:b9:ca:24:
0f:78:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:29 2026 by rpki-client