
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json)
Hash identifier: fYP0CJKAKqRANrjtVU9/kVkZVZLgh/IGDZ8qmtwTfek=
Subject key identifier: 6B:3D:AF:C0:40:C8:9B:AC:EE:80:B4:2F:21:BD:94:7D:78:E7:FE:8D
Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
Manifest number: 0168
Signing time: Wed 25 Mar 2026 04:29:45 +0000
Manifest this update: Wed 25 Mar 2026 04:29:45 +0000
Manifest next update: Wed 01 Apr 2026 04:29:45 +0000
Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: nvPEzNqx2Wo+7h+7wUHCs2+FZ80367f+GxQ/R8CKyc0=)
2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: b7tTkIQLwSx6JAaS4yo7JlLAOBsvulqfSiRwtnC5b7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl
rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Validity
Not Before: Mar 25 04:29:45 2026 GMT
Not After : Apr 1 04:29:45 2026 GMT
Subject: CN=69c364b9-ea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:ce:9f:42:27:63:b4:81:e8:76:4f:d9:00:
d6:84:fb:f6:df:af:c3:c4:44:7e:fd:88:d1:08:96:
83:8f:ee:45:0f:f7:d5:66:54:10:f2:4d:76:49:ff:
f5:77:c0:37:3d:37:24:10:51:72:2c:5c:93:2b:32:
06:f3:1b:c0:9b:e1:d9:eb:d8:56:8b:b1:6a:cb:75:
67:10:4e:ec:e0:30:0d:44:f3:f4:03:8a:a0:af:a9:
7a:28:50:76:e5:9f:e4:1b:04:0b:e9:94:39:ed:3d:
19:fa:06:15:a3:e2:fc:c1:9b:51:7a:81:02:aa:88:
7b:b8:b6:1e:8b:bc:15:20:29:db:df:3a:3e:b3:5e:
3c:03:0a:ea:c7:ce:2f:48:23:39:65:e7:4c:58:5f:
15:f6:f5:62:9a:46:0a:53:dc:b9:2a:68:88:6a:ac:
53:a6:06:7f:e0:5b:0f:d0:bf:14:d6:f9:f4:6a:f1:
41:e8:f9:27:ea:ee:8c:1f:6f:99:e2:ec:1d:6d:47:
eb:b3:f4:62:58:67:e3:e3:6d:46:5a:20:7f:3a:02:
59:ce:5d:58:a1:2a:91:db:4b:01:e0:45:5d:71:18:
6f:6f:3a:17:2e:fa:52:cb:08:5d:5a:ba:34:6f:30:
4a:79:00:d6:c8:79:68:50:8e:c2:dc:88:fe:83:28:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:AF:C0:40:C8:9B:AC:EE:80:B4:2F:21:BD:94:7D:78:E7:FE:8D
X509v3 Authority Key Identifier:
keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:de:5b:14:5c:b5:f7:13:9a:cc:02:92:d8:62:da:02:be:f0:
00:c4:f6:8f:6f:57:77:83:53:37:76:a2:35:72:6a:9f:33:e9:
56:fa:94:8e:08:a8:c1:03:ac:51:88:05:31:68:ae:83:5d:79:
69:0a:93:98:e0:86:17:cb:ad:0e:ff:0b:de:b7:98:8e:ac:1d:
b6:32:c1:2f:02:5f:50:09:7f:6d:51:13:34:ac:79:6e:9c:77:
e9:3e:37:15:7b:9c:9b:9f:33:d1:e8:73:68:f1:e0:96:11:c3:
02:e2:a6:42:99:d5:5b:d2:7b:b6:b2:71:dd:04:1b:5c:56:b7:
20:7d:39:3d:53:6e:ed:2d:ca:0f:20:28:55:18:10:fe:3b:68:
0f:bb:bc:40:53:c1:c2:d4:d5:8d:b2:c2:ad:5e:5a:76:24:5f:
df:15:44:dc:b2:28:c7:5a:6d:ff:0d:20:eb:d1:68:3b:5c:94:
43:5e:cb:3e:f2:ab:5b:22:a7:ad:67:68:0e:16:d3:a2:4a:04:
0b:93:34:94:03:ca:ab:37:75:29:6f:74:84:e8:44:12:aa:ab:
43:16:5e:15:ce:15:3e:cd:ba:43:a3:35:1a:f0:46:89:71:aa:
48:4b:fd:fc:7a:99:30:fd:17:89:40:f2:98:45:4b:df:23:48:
55:0d:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:16 2026 by rpki-client