
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier: 8riWqFlzWQoMN7p21jK/9YoKM5ktqIPN1iYyA2sigBk=
Subject key identifier: AC:EF:0A:A5:4F:35:CE:18:FB:70:57:6E:F1:2B:C7:91:92:C6:D8:78
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number: 0426
Signing time: Mon 11 May 2026 00:25:37 +0000
Manifest this update: Mon 11 May 2026 00:25:37 +0000
Manifest next update: Mon 18 May 2026 00:25:37 +0000
Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: a/85CoAMwl6blHsLP/8pugtyYkMdtE4gJSBL0OlhnoM=)
2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: May 11 00:25:37 2026 GMT
Not After : May 18 00:25:37 2026 GMT
Subject: CN=6a012201-c635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:11:c1:a3:a6:7b:5a:9a:24:2e:07:b0:a5:
9b:e0:ea:06:7c:40:70:97:6f:c0:96:bf:87:9d:0e:
e2:b5:c4:bb:94:50:66:d7:94:a3:1a:99:65:ec:10:
52:3d:1e:37:bb:03:38:21:42:0c:30:de:a9:05:f0:
09:77:8f:6e:40:ce:58:67:ce:67:24:21:10:80:61:
0b:7a:22:24:0c:a8:ae:24:b5:93:5e:c0:45:90:84:
60:0e:cf:5c:48:e8:79:53:f5:07:c3:cd:6b:68:9a:
61:2d:4c:a4:9a:d0:a5:b8:f2:f2:e6:2f:1c:fe:ff:
8c:ac:e6:88:9a:91:17:8e:3b:eb:93:54:ed:49:8b:
b9:47:c2:11:ff:42:19:b3:54:ce:b9:74:61:58:81:
31:f2:ac:b1:78:72:4e:bf:45:1a:58:84:9b:54:3b:
bd:84:5f:a4:2f:d5:24:a6:5a:d4:8d:80:b1:a8:8f:
22:83:fd:89:36:ab:9a:49:c1:ba:3d:13:20:17:eb:
10:07:a2:cd:9a:d6:a8:5b:10:33:77:b8:82:a2:7c:
44:07:7b:56:dd:23:92:3d:b8:12:c8:24:1d:38:ea:
90:b8:92:8b:a0:13:97:3a:83:2b:d3:82:f4:c7:8d:
30:86:74:ed:cd:4c:fc:09:74:0e:a0:41:2b:68:92:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:0A:A5:4F:35:CE:18:FB:70:57:6E:F1:2B:C7:91:92:C6:D8:78
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:fe:60:47:7e:80:39:32:61:59:62:81:d8:fb:0e:ac:98:04:
67:0d:68:5c:1f:b6:85:89:ca:a0:a6:fc:6f:0b:d7:09:73:b2:
02:90:75:94:12:dc:21:c1:1f:38:45:f7:77:3b:85:f0:4d:54:
59:0c:ef:3d:ee:0b:e3:a1:5f:65:30:12:8b:ea:34:6b:9f:2d:
9c:07:ee:d2:17:25:71:92:cc:22:7b:78:85:8c:50:b4:58:5a:
fb:81:db:53:2e:6b:a4:a9:6a:98:63:ef:b6:4c:9c:89:a2:af:
c7:2c:56:7b:7a:30:7a:a3:90:ab:93:32:c6:1e:16:97:bc:54:
0f:43:56:96:96:81:d8:7e:a9:7c:4b:5e:90:1b:15:dd:ad:96:
d8:4f:77:6f:93:a4:ca:f4:e4:c0:8a:97:de:ee:42:8b:81:1c:
43:a2:98:6e:27:67:a1:73:31:0f:bc:50:8d:5f:dc:1f:5e:36:
cd:5f:f4:e9:71:ab:d8:ea:bc:1c:65:02:9f:31:2e:a2:0d:bd:
e4:a3:29:d6:bf:65:1d:99:d3:68:18:49:d0:57:89:9d:0f:30:
4d:aa:0d:de:b3:83:57:92:28:c6:17:38:7a:f1:c0:2d:82:47:
e3:d7:3b:f1:5c:01:af:2c:7c:b6:0d:62:a3:70:0e:9d:a0:b0:
22:38:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:36 2026 by rpki-client