
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier: MeeGkZ0/cEtLxFVSHQBh7HlhbIDjFgArqhh3SwrUvDA=
Subject key identifier: 8D:CA:88:1F:F4:A0:F6:9F:6D:4A:BE:3A:CF:85:21:B7:C2:3C:33:82
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number: C3
Signing time: Tue 12 May 2026 19:51:28 +0000
Manifest this update: Tue 12 May 2026 19:51:27 +0000
Manifest next update: Tue 19 May 2026 19:51:27 +0000
Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: 6yZCh0b9HWq5nyrqlvEosW8g5MJvS2rqmSxn4BCM9+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Validity
Not Before: May 12 19:51:27 2026 GMT
Not After : May 19 19:51:27 2026 GMT
Subject: CN=6a0384c0-1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:f1:57:79:7e:86:da:fc:25:d8:59:71:6f:
d8:3c:62:f2:cd:a9:9a:14:1b:8e:da:37:1f:bb:39:
e6:6b:c0:eb:cd:cd:1f:e9:8d:bd:cf:34:d6:09:6a:
50:52:49:96:16:b4:da:9a:49:ff:05:7a:61:ac:00:
2d:08:4c:8a:1a:13:ee:79:16:4f:ae:80:ba:b2:1b:
72:16:94:e1:71:14:df:06:8b:d7:08:a2:f8:9e:a3:
39:66:76:82:b8:7d:66:cc:fc:06:3f:61:b7:49:5f:
e2:86:ba:64:cd:f0:20:2a:09:e0:cd:00:44:1d:38:
27:ac:49:d3:c3:ea:1d:a5:3c:ca:3c:27:40:c7:ee:
60:e3:44:75:da:c4:09:78:1f:43:88:69:bb:a9:a3:
8e:de:63:79:af:b7:6e:c9:08:07:8c:7f:a3:84:dc:
c3:c1:42:49:28:fc:28:ee:34:5e:fe:c2:0f:a2:48:
b9:30:b1:bb:00:d1:58:cb:87:76:0d:d8:87:a7:14:
86:e3:a1:cb:23:a6:2a:1d:11:59:0c:47:93:06:4d:
13:fa:a1:54:95:f1:58:67:3c:89:44:25:9e:56:6e:
68:90:ee:78:ff:b4:c6:c5:5d:02:4f:2b:b7:ff:19:
80:19:66:f5:f9:7c:26:ed:6b:63:b0:34:5a:a3:1e:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:88:1F:F4:A0:F6:9F:6D:4A:BE:3A:CF:85:21:B7:C2:3C:33:82
X509v3 Authority Key Identifier:
keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:80:6a:c7:5d:24:89:63:58:bd:ba:de:dc:5d:dd:f1:1c:4f:
5f:dd:89:2a:50:53:87:de:ae:bf:83:15:5f:54:d1:8a:ff:52:
6d:01:d9:04:9f:8a:b6:f9:6d:88:5b:7c:40:58:36:53:81:5f:
b3:dc:21:70:e4:ce:c3:91:1a:e2:5a:cc:8e:a9:22:b1:e8:07:
d2:0c:59:ef:90:cd:33:8b:c5:f2:f7:58:07:25:33:41:0e:b9:
6c:a5:8b:e0:79:d7:31:3a:b7:cd:bb:68:6e:b6:1d:00:65:2c:
be:fc:a8:1b:2f:89:da:b4:d1:61:ca:d1:eb:a2:4e:fd:1e:36:
df:27:8b:8e:4e:19:dc:d7:fa:87:73:80:89:f3:70:28:d9:30:
8f:ed:2a:44:70:2e:b6:d0:d8:fa:2b:e6:fb:99:77:da:be:20:
86:8f:6d:38:a8:06:7d:80:0c:2d:ec:7a:82:b5:b2:28:eb:6a:
3e:07:d6:c6:c3:8b:9e:ae:9e:17:21:bc:fe:97:03:b4:36:a5:
14:51:dd:ba:52:ed:f1:1e:fa:4d:f4:72:05:3b:94:39:4d:f2:
e7:53:70:62:68:0c:17:17:55:40:fc:cc:62:e0:31:e5:45:7f:
8d:3f:e4:76:18:11:5b:36:fa:32:47:ce:be:70:5e:d2:48:f6:
56:7f:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:45 2026 by rpki-client