
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: 3TdGCKWin8QDmMZ8aAwG1lfr1U30WAG2cH4x9xO58wQ=
Subject key identifier: 66:D1:6F:DD:59:9F:73:3E:0C:D2:8B:0F:F9:FF:25:5C:78:BD:4C:36
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 01EF
Signing time: Wed 25 Mar 2026 02:36:49 +0000
Manifest this update: Wed 25 Mar 2026 02:36:48 +0000
Manifest next update: Wed 01 Apr 2026 02:36:48 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: iNsojT1TntUxCp8RGFl8g5hnJzH2HjkBpm3E6y1HPxk=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: irHoEjr1GIUaKPYFmyQpkRMEIYv26BomyciGLejer2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Mar 25 02:36:48 2026 GMT
Not After : Apr 1 02:36:48 2026 GMT
Subject: CN=69c34a41-d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:b8:28:ea:65:81:4f:1d:f1:c9:41:4b:f0:
85:a7:75:f1:ca:a3:ac:a2:32:b3:31:f1:05:ac:02:
42:a2:39:eb:a3:0f:71:a3:02:4c:81:92:fa:43:22:
22:d2:42:03:31:6f:dc:bb:68:96:86:ee:28:ef:ab:
c8:c5:2a:27:01:4b:9c:b5:4e:7f:63:fa:f3:60:42:
bd:d5:eb:40:26:90:19:15:43:0f:b1:bc:d4:02:8a:
1c:a0:cb:77:21:72:33:c3:63:6b:fa:66:4d:ab:b9:
60:81:c2:6f:84:27:3a:f2:51:56:7a:d6:9e:09:d5:
c3:9c:ac:b2:98:c0:ae:75:2b:d9:90:19:32:0c:09:
6e:4c:47:42:a8:62:26:74:42:98:c7:5c:a2:5d:00:
d2:90:03:90:db:9d:e7:67:07:2f:f1:46:7c:5b:b4:
eb:35:97:03:ba:08:f6:86:8c:cc:9c:89:cc:17:a3:
b1:4e:95:dc:28:07:e6:4e:fb:4d:7e:09:3e:a7:c8:
3b:fc:70:d3:39:97:eb:4f:34:66:55:95:32:f8:65:
80:11:1d:f3:4e:71:44:e5:73:34:77:de:df:72:0b:
88:4f:20:2b:51:4e:4c:3a:95:39:8a:63:03:fe:89:
91:42:71:59:26:c9:9a:ce:b3:88:ea:be:0d:75:b7:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:6F:DD:59:9F:73:3E:0C:D2:8B:0F:F9:FF:25:5C:78:BD:4C:36
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d6:e6:0c:a0:bb:68:eb:bb:b7:65:51:5c:c5:e8:0d:a4:47:
ea:e4:a2:cc:1e:39:2a:64:7f:db:05:0c:4b:fc:0d:4e:11:b3:
a6:3a:da:c0:de:4f:c4:1f:5a:1a:e6:3c:a4:50:78:f5:10:0a:
57:46:0d:80:b8:6d:a9:ef:ee:05:56:bb:d0:83:52:19:8c:24:
2b:fd:c7:62:48:86:7e:a9:db:ff:38:1e:bd:cd:3f:dc:62:e3:
85:4e:de:aa:c0:9c:aa:bc:e5:06:85:ea:a2:a9:e4:76:02:dd:
38:e4:40:be:36:bb:05:98:d8:f9:6d:ca:0b:16:0c:01:96:a5:
f9:9a:df:67:ea:9b:bc:b1:05:78:a1:27:3c:82:43:f2:70:c7:
79:98:81:c2:8c:81:d6:3b:4d:88:c6:9b:1c:1e:de:6a:a0:04:
f8:52:d0:11:aa:d5:34:ee:7f:b8:f9:60:fc:31:df:a4:89:9b:
fd:db:50:8d:40:56:5e:29:81:50:81:e3:6b:c6:57:9a:cc:3d:
a5:f3:6d:09:32:bc:de:34:d1:25:4e:78:91:4b:ec:6d:c8:e0:
23:4b:ee:e5:17:82:59:90:b6:71:7c:cc:b2:b8:7b:f7:18:4c:
ca:cf:8a:41:76:39:5f:71:97:4c:4b:33:24:0d:da:73:26:a0:
f6:da:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:12 2026 by rpki-client