
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: pFtRuKvaA/pqVTY6AnpXQzOfPLaSLCUOr+7Ml2FFCU0=
Subject key identifier: 4A:26:C5:9E:74:70:31:A5:2A:BC:8E:B5:D6:5D:50:7A:B2:CA:D0:DE
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0696
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 067D
Signing time: Thu 24 Sep 2026 22:28:59 +0000
Manifest this update: Thu 24 Sep 2026 22:28:58 +0000
Manifest next update: Thu 01 Oct 2026 22:28:58 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: lGAEPcBpw+SIv3XAkAMlkOh0WGXN1YTFnP5WHQcCqmY=)
2: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
3: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
4: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Sep 24 22:28:58 2026 GMT
Not After : Oct 1 22:28:58 2026 GMT
Subject: CN=6ab5a42b-0bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:ff:91:ca:11:21:0a:a6:7b:43:5d:97:2c:
27:78:34:3d:fc:6d:08:24:0c:98:86:8d:05:9d:11:
d5:18:16:34:b7:a7:22:15:da:3f:9e:c8:f3:27:48:
b7:8c:5e:9d:9f:58:91:58:72:51:26:51:12:0c:76:
bb:da:cf:23:42:5e:98:4d:43:e0:b6:4d:19:29:e3:
e0:0e:4c:e2:9a:44:d1:07:e5:71:0b:01:ba:2d:0c:
b2:1b:4d:36:13:f5:bc:f8:c6:1a:67:b7:a7:ae:52:
4f:c3:2d:2f:48:8c:53:a6:bd:7b:06:0f:f1:47:b5:
42:96:81:74:7f:13:6f:76:93:d3:54:e2:2f:9d:af:
05:46:85:3a:d9:92:5a:73:8f:00:7f:f4:e5:4d:6d:
b1:e0:6f:97:85:d0:fb:fe:5b:d8:fd:77:fb:79:71:
5b:9b:df:af:b6:3f:64:32:1d:ca:42:22:a6:54:2b:
dc:47:a4:9b:c6:1f:5a:0d:ac:3a:e9:a9:e6:c2:28:
9d:00:92:ab:6f:21:d5:ef:44:c5:51:a5:4b:04:db:
90:1e:d1:9f:89:92:f3:f8:d3:6b:ea:af:f4:c5:e7:
89:f7:81:f6:41:47:f5:4b:19:49:ba:53:13:99:d4:
99:8f:94:96:9d:a6:e8:b7:06:aa:56:4f:9e:49:e4:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:C5:9E:74:70:31:A5:2A:BC:8E:B5:D6:5D:50:7A:B2:CA:D0:DE
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:b5:bd:b3:f5:d3:e1:0a:e8:3b:ae:85:1a:00:65:79:68:
0c:f5:d9:98:bb:74:16:b6:93:46:48:dc:fd:f1:8b:d3:51:a7:
d5:33:f6:cb:de:5c:e8:b2:38:a3:8f:31:7c:54:1f:f6:e7:24:
9b:03:5e:5f:ac:34:83:14:76:40:c2:8b:48:d8:5f:c0:c9:60:
44:f4:07:db:d9:99:9f:e4:3d:70:d7:3a:39:d3:39:d3:c9:89:
ee:0c:ae:1b:3b:3c:e9:cb:5e:5b:86:80:e4:e9:f4:3a:bc:0e:
c2:95:70:11:bb:61:df:92:98:8d:c6:ea:51:81:28:8a:f0:35:
2c:53:b9:84:7e:4d:ca:aa:31:6f:b8:3f:62:a6:08:ef:25:61:
4d:00:89:57:c3:d0:fd:45:7b:48:d7:11:e0:fb:37:40:15:e1:
20:82:ea:d7:6e:63:31:87:3f:e6:14:23:d4:98:3c:ed:8c:b4:
56:7f:76:1a:bc:b3:ff:bd:b0:b0:86:c9:53:99:a8:1d:a4:df:
d1:a8:27:c9:15:66:90:b6:aa:d0:0f:fd:d8:1c:d5:16:c7:4a:
ac:2c:e5:00:ed:9c:ff:92:69:6c:21:97:e7:6a:1a:d4:bf:5b:
ee:7e:aa:27:90:02:77:d0:84:f5:d4:1e:66:c4:4f:c2:47:c5:
5c:ef:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:44:06 2026 by rpki-client