
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier: 7IToqn0ZzBh2dmJ4WlCe3YWYf0SZ/wCDcm1dFjz3dMM=
Subject key identifier: 48:11:7B:B9:92:0F:B0:D5:26:47:7D:06:5A:33:CA:A8:9C:E8:08:1B
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number: 01CC
Signing time: Wed 23 Sep 2026 03:37:55 +0000
Manifest this update: Wed 23 Sep 2026 03:37:54 +0000
Manifest next update: Wed 30 Sep 2026 03:37:54 +0000
Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: 2zP4lEoo/MX6ympVrtIhVYyMLqLnjk6x/9fAAXEuoMY=)
2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: zvV0e48dwD3IVwxrvC+3E1d2bP8roEkFmj5ckF5v3Ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
Validity
Not Before: Sep 23 03:37:54 2026 GMT
Not After : Sep 30 03:37:54 2026 GMT
Subject: CN=6ab34993-ef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:c6:23:de:50:dc:15:da:24:b6:18:8a:c1:
f2:23:0d:07:b0:fc:b3:5e:30:88:8b:43:60:cb:85:
cd:4e:52:dc:c9:9b:4b:e9:15:b1:d1:12:92:e3:71:
54:9a:c5:4e:05:2b:22:81:11:a2:c9:c8:78:74:17:
3e:e4:ed:09:ec:e1:aa:7a:02:61:19:09:ee:4d:b6:
8f:12:e8:18:9d:ac:ac:f0:80:3e:4e:68:e4:86:a0:
cb:5e:75:4c:e4:25:33:e8:b8:53:49:73:21:69:30:
66:17:89:45:2c:bc:2c:39:b9:43:d7:83:3e:b9:0a:
0a:dd:0e:9b:24:95:ae:17:23:0a:87:bb:8c:52:bc:
e3:69:d5:64:5e:14:8b:4e:ab:a8:e7:a4:6b:0e:6d:
0d:b2:6e:89:8d:35:4e:91:80:cf:7e:1b:f6:bf:87:
93:e5:b2:94:ae:30:75:8c:23:b2:95:1b:15:aa:26:
13:50:80:ee:19:9e:90:cf:a7:ff:15:03:50:a0:f2:
55:33:26:1e:b8:bb:46:89:0d:24:97:fb:ba:be:97:
10:bf:da:f3:7f:a4:00:9b:53:b1:d6:08:24:1f:c0:
dc:3a:49:1f:e7:a2:1c:5f:7b:8d:e6:d5:34:2b:96:
e7:1f:19:36:7b:4b:12:5d:8b:65:ea:43:9e:2a:d7:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:7B:B9:92:0F:B0:D5:26:47:7D:06:5A:33:CA:A8:9C:E8:08:1B
X509v3 Authority Key Identifier:
keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:00:4e:8a:15:41:e5:ad:48:8d:35:5b:ad:c0:3c:98:c0:
a9:2f:93:21:5e:fb:22:7f:01:ed:0f:ec:a6:f6:41:ff:bd:50:
e7:75:f4:f5:b2:27:66:21:8b:47:d1:64:5b:bd:f4:dd:cd:6e:
5f:c5:2f:f8:91:69:3b:5d:9e:a7:16:b7:99:e5:e3:4c:ba:e7:
5c:50:2f:1c:e4:4d:e2:1d:84:f7:4a:98:18:67:c9:57:f4:33:
64:24:67:d3:c9:82:19:bd:e7:a5:71:dc:92:5d:00:03:b7:f5:
2f:74:ad:d0:9b:b7:78:da:2b:75:03:be:d6:fe:cc:b7:4f:2a:
c1:65:ed:2a:ca:70:d5:9a:ec:39:09:21:19:1e:7f:e1:0d:27:
0c:f6:a3:bf:15:e9:f2:2f:f1:6a:1a:3b:09:d0:6f:35:cc:b9:
77:8f:28:26:19:66:ca:1c:f0:41:89:b4:7f:07:dd:3b:4b:4c:
54:00:fa:8b:81:d0:ca:9e:63:71:03:f3:ff:0d:9b:f3:54:99:
17:bc:8a:51:64:91:e1:8e:3d:66:4c:c7:0d:f6:51:51:bf:f7:
48:25:7a:4e:77:7b:aa:b8:59:12:44:8a:9f:5e:8f:72:f2:ef:
e8:c1:39:08:b4:ac:88:a8:f3:16:51:b7:84:cd:03:1f:11:c1:
dc:f2:d4:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE2MjMxMTAvBgNVBAUTKDc2OTUzNjgzNDAyMDkzNDk1MjI5N0VCREI3ODE4OTM1
N0IxM0ExNDUwHhcNMjYwOTIzMDMzNzU0WhcNMjYwOTMwMDMzNzU0WjAYMRYwFAYD
VQQDEw02YWIzNDk5My1lZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HvGI95Q3BXaJLYYisHyIw0HsPyzXjCIi0Ngy4XNTlLcyZtL6RWx0RKS43FU
msVOBSsigRGiych4dBc+5O0J7OGqegJhGQnuTbaPEugYnays8IA+TmjkhqDLXnVM
5CUz6LhTSXMhaTBmF4lFLLwsOblD14M+uQoK3Q6bJJWuFyMKh7uMUrzjadVkXhSL
Tquo56RrDm0Nsm6JjTVOkYDPfhv2v4eT5bKUrjB1jCOylRsVqiYTUIDuGZ6Qz6f/
FQNQoPJVMyYeuLtGiQ0kl/u6vpcQv9rzf6QAm1Ox1ggkH8DcOkkf56IcX3uN5tU0
K5bnHxk2e0sSXYtl6kOeKtdG2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgRe7mS
D7DVJkd9Blozyqic6AgbMB8GA1UdIwQYMBaAFHaVNoNAIJNJUil+vbeBiTV7E6FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTYyMy81MEFEMDcxOEZE
NDUxMUVFQUIzQUQ3MUJDNEY5QUUwMi9kcFUyZzBBZ2swbFNLWDY5dDRHSk5Yc1Rv
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RwVTJnMEFnazBsU0tYNjl0NEdKTlhzVG9VVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTYyMy81MEFEMDcxOEZENDUxMUVFQUIzQUQ3MUJDNEY5QUUwMi9kcFUyZzBBZ2sw
bFNLWDY5dDRHSk5Yc1RvVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAdkATooVQeWtSI01W63APJjAqS+TIV77In8B7Q/spvZB/71Q53X09bInZiGL
R9FkW7303c1uX8Uv+JFpO12epxa3meXjTLrnXFAvHORN4h2E90qYGGfJV/QzZCRn
08mCGb3npXHckl0AA7f1L3St0Ju3eNordQO+1v7Mt08qwWXtKspw1ZrsOQkhGR5/
4Q0nDPajvxXp8i/xaho7CdBvNcy5d48oJhlmyhzwQYm0fwfdO0tMVAD6i4HQyp5j
cQPz/w2b81SZF7yKUWSR4Y49ZkzHDfZRUb/3SCV6Tnd7qrhZEkSKn16PcvLv6ME5
CLSsiKjzFlG3hM0DHxHB3PLULA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:19 2026 by rpki-client