
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
File: DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json)
Hash identifier: KnhPPnpRx57Eogy7bA5T/elno0tbvEBklz+P79+3Gfw=
Subject key identifier: CF:84:95:64:C4:14:0A:1A:AE:04:64:26:AF:91:96:44:6B:63:95:64
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
Manifest number: 0354
Signing time: Fri 27 Mar 2026 00:43:40 +0000
Manifest this update: Fri 27 Mar 2026 00:43:40 +0000
Manifest next update: Fri 03 Apr 2026 00:43:40 +0000
Files and hashes: 1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: 4lNA8bjA56iPCO4+LF839t6+/z+aq5LOgwJFTeweSlc=)
2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: hAzzush7yJ4uggCEzGOjwed85AdGqHq5euECAazgkSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Validity
Not Before: Mar 27 00:43:40 2026 GMT
Not After : Apr 3 00:43:40 2026 GMT
Subject: CN=69c5d2bc-c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:34:03:67:29:fd:be:95:12:26:12:33:fb:
72:e0:d9:6a:7c:b4:a4:35:c5:ab:46:38:1f:1f:61:
76:e3:d0:93:32:5b:4e:d5:3e:b8:c2:3e:96:cf:db:
8b:ee:61:69:8f:bf:cf:64:af:31:35:63:bf:95:35:
a9:84:6d:bd:88:99:d1:81:79:07:aa:a9:d0:02:c5:
2a:e5:f9:8f:f2:d5:4e:76:2e:cc:b0:fe:87:87:85:
3f:2f:0c:72:33:32:5e:61:58:53:2f:49:1e:6f:db:
56:f0:82:c1:6a:52:96:13:b4:aa:51:1a:38:8a:2b:
55:1a:ab:20:13:ce:c5:5f:62:01:e4:b3:33:ac:08:
59:27:f4:d5:b5:a2:ee:f5:5c:b9:1c:fa:de:c8:c1:
85:9b:52:f8:e6:67:4b:c8:9a:ca:e7:54:0f:bb:52:
03:a9:24:17:e5:26:a4:6c:c5:1f:81:4a:e9:b8:90:
39:99:18:3a:44:ee:9a:e3:c6:9c:48:55:9e:f4:62:
32:51:87:82:a4:64:27:53:50:f2:db:49:ec:7d:62:
cc:47:f1:7c:99:e6:8a:b2:89:9b:e4:61:b9:03:a9:
57:b9:d9:96:2f:67:9a:03:75:98:6c:39:a0:6d:4f:
1a:d1:46:aa:79:95:c4:7c:4e:99:0e:d2:0a:e2:61:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:95:64:C4:14:0A:1A:AE:04:64:26:AF:91:96:44:6B:63:95:64
X509v3 Authority Key Identifier:
keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:4d:e8:7e:84:83:15:bc:bc:87:18:9d:11:c0:f3:2f:96:f7:
60:09:cd:69:2e:1d:14:b3:48:cc:74:65:05:1e:f3:06:20:d9:
44:c7:8c:b8:f5:24:b8:a1:a5:f6:d4:81:7c:f9:e5:69:14:55:
b2:4a:44:90:f7:01:7e:fc:8a:2f:c4:73:31:1a:f9:5e:08:0d:
3f:08:ca:69:66:1e:17:cd:ed:ed:31:19:d3:94:70:a5:95:7f:
55:55:0e:79:de:09:ba:b6:a0:01:68:96:a8:09:1d:77:3b:fa:
24:1c:0f:7a:2c:14:e3:49:f5:71:d5:b1:6c:d4:d8:fc:80:8f:
6b:8d:a2:8f:de:92:97:18:d7:7a:a5:e1:36:c9:8f:0f:37:37:
3e:54:88:23:36:e8:58:d9:6a:90:ec:89:65:51:b5:e8:98:d2:
19:4a:8f:8d:33:b6:11:9e:29:01:15:6f:ba:fc:fa:76:dc:b3:
bb:80:5a:87:46:70:58:b8:1f:c8:78:4a:84:2f:d4:37:e1:83:
93:40:65:1d:c2:43:37:81:17:3d:9d:29:82:88:f1:c6:8d:04:
82:a9:df:23:7f:5b:0c:c7:14:56:4c:c8:c0:77:dc:49:10:af:
15:90:cc:36:f8:48:8b:61:35:4a:e2:5b:4a:d7:4b:33:78:87:
db:d1:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:04 2026 by rpki-client