
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: Vd2VSqxsGu4XKAA12hYfLezV4lbBKk/kFnKwa4WWWNI=
Subject key identifier: 42:E9:8A:92:EF:03:57:DC:D5:6C:40:46:E1:0D:6B:12:7A:66:0F:0C
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 02F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02D6
Signing time: Thu 23 Jul 2026 02:24:19 +0000
Manifest this update: Thu 23 Jul 2026 02:24:18 +0000
Manifest next update: Thu 30 Jul 2026 02:24:18 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: rGBV1AwdgXx7jcJqp6+OOtrpkgRgt6GIBqR7X4GcoFY=)
2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
3: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Jul 23 02:24:18 2026 GMT
Not After : Jul 30 02:24:18 2026 GMT
Subject: CN=6a617b53-51f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:09:21:27:a6:46:98:9d:ef:fd:20:af:15:
c0:51:ac:40:98:ed:98:69:5f:ac:9a:de:c9:a0:80:
f4:c7:7a:27:d7:7d:56:e4:ba:fd:62:59:77:62:73:
f6:ed:91:e6:35:ed:68:ac:40:58:9f:bb:59:27:5b:
73:4d:27:6d:19:98:d5:5b:6c:0b:f7:d6:d8:e4:bf:
59:f3:03:18:df:70:24:b6:b9:7f:62:14:36:b9:27:
a5:d4:a4:b3:ed:14:c9:98:3c:e0:ba:01:b4:c1:91:
75:82:70:b3:02:87:29:34:40:22:0b:bf:22:04:72:
9f:7e:12:7d:0c:82:74:f4:cc:8e:54:62:e3:bc:f1:
44:6e:ab:20:07:3c:79:90:44:b6:60:f0:c5:fe:0e:
e2:93:f4:fb:e9:29:5d:a4:6f:7a:71:19:e8:41:6c:
3c:b0:8d:eb:66:65:a1:2f:f1:b6:b7:66:a9:80:11:
96:b2:1e:7f:27:a7:a1:df:4c:3b:89:67:d7:51:4a:
c9:0a:1b:18:b8:01:e5:02:ce:21:37:8d:b8:e1:11:
cb:a5:4f:e3:bc:7f:e8:8b:6e:e3:1d:b9:90:d1:56:
ca:a8:93:3b:4e:4e:30:8f:5d:21:28:a8:d9:1a:3c:
3d:b7:79:10:58:b7:f1:4d:40:bc:4c:fe:9e:8f:9f:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E9:8A:92:EF:03:57:DC:D5:6C:40:46:E1:0D:6B:12:7A:66:0F:0C
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:e6:9a:46:ff:c6:c6:ac:fe:d7:17:5f:ca:c8:51:c6:b4:
63:18:c0:54:ca:9b:3f:be:f9:68:28:d0:c6:62:c7:62:f2:32:
10:8b:61:e1:55:d6:4e:9b:8d:40:a8:f7:46:66:77:b6:a0:d6:
54:31:26:36:95:66:f5:f2:c1:e1:56:d7:50:90:fd:d2:52:9c:
5c:7c:40:bc:53:18:2f:3c:e6:9c:db:35:f4:e1:8c:43:eb:8e:
cc:81:eb:f7:03:8e:cd:3b:23:33:48:19:7a:95:d3:e2:45:d2:
36:27:68:bb:ca:72:eb:2d:19:a3:15:08:9a:c0:ec:b7:ab:9a:
68:fd:58:80:d9:ae:9d:45:8d:b7:a3:fc:03:f4:60:70:ff:c7:
34:ff:5d:88:22:ae:50:a6:35:57:ea:55:c0:da:5a:b2:55:5d:
81:3d:14:05:67:3c:c7:28:4d:d8:9a:66:8c:6a:03:66:64:23:
9d:2b:0a:29:43:6c:7e:3c:f2:0e:fb:c0:6a:52:a4:6e:be:2d:
5f:ad:21:c7:2b:9f:4b:17:5b:91:29:6c:9b:35:d4:40:a8:c0:
23:97:49:5f:04:ad:a7:e1:67:68:f4:d8:21:57:c6:76:fb:19:
57:81:b0:fe:5c:3c:cb:6f:79:c9:19:7f:1b:db:1c:b1:3c:84:
50:b0:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:38 2026 by rpki-client