
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: d3dNEskksZcUpoLEmWpgBWigiaxS8p4UDhehimklxiE=
Subject key identifier: 35:36:1D:59:1F:1D:97:7F:5C:2F:B9:50:01:05:BE:94:C3:F7:1A:DA
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 029A
Signing time: Wed 25 Mar 2026 01:17:12 +0000
Manifest this update: Wed 25 Mar 2026 01:17:12 +0000
Manifest next update: Wed 01 Apr 2026 01:17:12 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: vqchp6fcRScseCS1K2HjW9tFcPrg6rAQGQPRrQyZ8ag=)
2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
3: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Mar 25 01:17:12 2026 GMT
Not After : Apr 1 01:17:12 2026 GMT
Subject: CN=69c33798-e16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:71:d1:77:13:75:81:10:20:32:ec:29:4b:
4a:be:ac:ab:a1:cd:b4:34:31:c7:c8:e7:22:75:6f:
06:5b:3e:0a:d9:ba:de:63:03:79:ef:c7:3d:1d:7c:
92:0e:13:56:b3:33:77:ef:e0:2d:2a:14:47:2b:d2:
f3:2f:94:6b:95:89:49:29:ea:5b:60:a8:b4:81:56:
7b:a4:ef:d0:8a:6e:0e:7e:06:40:da:df:c4:aa:d7:
f3:ea:97:be:eb:7f:0f:a0:01:69:cd:10:48:c8:10:
fb:cf:12:8c:8a:9d:1e:31:00:c9:33:cf:16:1a:89:
fa:52:f9:25:78:05:07:ba:f6:36:3d:dc:54:68:20:
ea:01:94:91:f0:ad:7b:52:e5:15:99:bf:81:b0:a8:
84:79:05:c1:06:f5:c9:bb:c8:13:1e:7c:a5:eb:b0:
b1:a1:a4:c8:a3:a6:cc:f0:fb:5e:6f:c2:ea:f9:d2:
e1:92:1e:f6:1d:ac:1f:d1:7f:87:82:07:2d:41:16:
5e:11:fe:a3:84:68:c7:92:de:c0:43:c1:45:3c:40:
3d:f6:48:eb:f9:fe:e1:fb:36:d3:90:6e:18:24:05:
f8:6b:99:f1:72:08:b2:a4:5b:bf:5e:26:f5:6a:8b:
2c:a9:09:3f:fc:a2:98:4f:e4:fc:54:14:69:12:2d:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:1D:59:1F:1D:97:7F:5C:2F:B9:50:01:05:BE:94:C3:F7:1A:DA
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:8c:6c:52:81:87:7a:46:4a:e8:69:19:58:be:0a:bc:d4:
ef:34:2a:91:ed:40:45:38:fb:b5:95:a6:9c:69:1b:09:27:69:
60:83:02:1d:04:a5:64:00:a9:8e:9c:29:a9:c7:13:e7:9e:51:
27:c7:cb:a1:93:43:5a:7a:df:5a:b0:3f:0b:0c:8c:37:fe:0c:
ec:12:e8:25:77:58:b9:b8:24:ef:b7:8a:8a:96:06:3d:12:f7:
dd:d3:39:d2:5d:79:b2:bc:9b:62:ab:bb:e1:2c:e4:ff:6b:84:
13:f3:c9:1f:68:88:2f:92:84:10:c2:78:88:33:c6:63:37:74:
90:16:e0:ce:81:dd:61:3d:de:48:b2:a2:0c:91:e8:f7:05:48:
05:01:69:fa:35:51:7d:08:ae:4a:d1:a4:ee:1c:cf:20:b6:dd:
89:ae:bf:12:3b:d6:78:9b:76:41:4c:a6:ea:7d:12:6a:1e:8d:
67:cf:49:69:1b:7a:92:d6:07:43:f3:22:e1:8b:87:4e:b7:80:
b0:a6:c8:31:85:32:2d:e9:32:82:6b:55:f7:7e:c3:88:b3:c0:
f5:82:e4:95:fd:c4:88:6f:a5:40:cb:7f:7c:d0:22:27:fa:e9:
9a:86:8d:fb:4e:9c:b7:85:61:60:18:a3:d0:3e:e2:c7:96:bc:
59:77:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:42 2026 by rpki-client