
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json)
Hash identifier: xSfaZ/7WEfIMk13dwdPthpczYYMfKdbUo82/1n2i/pQ=
Subject key identifier: CD:DD:DB:7B:30:BA:89:0B:13:12:D2:A9:90:3C:A3:55:70:88:33:9C
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
Manifest number: 54
Signing time: Mon 11 May 2026 06:51:04 +0000
Manifest this update: Mon 11 May 2026 06:51:04 +0000
Manifest next update: Mon 18 May 2026 06:51:04 +0000
Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: dxmVKhHMAvOLuLVc2gLE4zsfxQShKmEvuilTKY0CRQk=)
2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=)
3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: May 11 06:51:04 2026 GMT
Not After : May 18 06:51:04 2026 GMT
Subject: CN=6a017c58-85bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:44:58:30:e8:bd:44:1e:b0:4b:a5:99:a8:
bc:3c:17:68:b4:31:53:ad:e1:12:fd:a8:fb:c1:19:
c3:81:3d:e7:0d:b3:a9:2f:40:96:95:08:a7:48:27:
f7:07:d9:51:86:6a:6e:d6:b6:f7:58:1e:91:90:da:
41:ca:11:32:10:4b:00:65:17:da:74:32:d3:e9:43:
9c:16:d9:d2:eb:a2:1f:ac:15:62:51:ad:52:a4:7a:
2f:ac:76:45:a8:51:71:18:e8:c0:6a:e5:18:d2:dc:
77:b1:f0:ad:29:de:3b:87:5b:34:61:13:12:f6:92:
ba:26:a7:cf:33:24:31:3d:02:a2:d6:a9:cb:ed:a1:
4c:12:b1:c7:55:87:4b:79:6e:0f:e2:4b:50:60:9e:
92:7c:89:0c:e6:ae:3f:77:01:d9:24:88:cf:8a:e6:
0f:7b:cb:f9:f5:6f:0e:d9:68:ca:53:5c:44:26:f1:
cc:c0:25:fa:00:fb:83:bf:e8:91:d0:af:a6:04:8c:
d6:2f:63:d7:b2:8c:93:ce:e7:e0:92:bb:bc:16:57:
71:5f:55:13:0c:a8:30:4c:9d:f5:5a:67:7a:5c:c0:
2b:67:a8:dc:67:eb:bb:99:1f:ce:d8:bb:ba:f7:d1:
f1:e8:a9:ad:5d:3b:b1:b1:4f:c5:e4:00:a2:98:23:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:DB:7B:30:BA:89:0B:13:12:D2:A9:90:3C:A3:55:70:88:33:9C
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:76:31:74:39:c6:00:c8:ec:b7:02:67:d2:c9:10:d2:55:48:
e9:f0:51:74:ba:6a:26:77:eb:0d:bf:11:f3:5f:0f:a7:06:64:
32:d9:83:06:bc:a7:2b:bd:bc:99:e3:c2:d7:ad:19:b0:15:47:
6b:1f:da:dc:02:87:21:f7:e4:0d:42:05:c6:13:4b:ad:ca:58:
e2:42:15:6b:75:bf:bb:6e:0f:38:77:3c:bc:b7:e6:bf:42:7e:
e8:e7:bf:1a:9a:b7:bd:22:81:34:a1:89:f2:24:0c:a1:39:67:
ab:e0:81:37:7c:f3:70:12:1d:65:39:e2:61:28:09:7a:2e:3f:
ad:75:b9:c9:ff:67:b7:e6:7d:80:58:77:a4:a2:12:39:cd:49:
69:35:85:b7:e1:50:fc:f9:00:d8:7d:ed:fd:2a:9b:05:c3:57:
a8:44:98:45:9a:f1:a2:9d:ac:77:e7:dd:c0:18:20:cf:63:71:
a2:eb:35:b3:e8:f1:8e:4e:8b:6b:43:9a:0b:60:6f:11:42:41:
ca:62:07:3f:bd:93:92:26:41:b4:02:f8:45:0d:d0:10:50:fe:
c9:6f:b8:0d:a2:f1:9d:d3:91:6f:bf:62:3a:a1:4b:d0:8c:d3:
b9:85:20:ba:33:0f:00:00:88:b7:67:88:07:94:a1:9c:22:cb:
53:2c:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:20 2026 by rpki-client