
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: 9oGaEXmDiBkHZrNnVRGBNVu/rddbPpKuWVGXzfkzSZY=
Subject key identifier: B2:B2:05:85:9E:23:A4:14:5E:B5:55:D3:24:C4:CC:8A:67:E6:14:8A
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02F6
Signing time: Wed 23 Sep 2026 00:54:06 +0000
Manifest this update: Wed 23 Sep 2026 00:54:05 +0000
Manifest next update: Wed 30 Sep 2026 00:54:05 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: cvIOkK1h7QCJz6Q/HM9ccBJcEuHcucTf5jPMkFWTAt4=)
2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
3: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Sep 23 00:54:05 2026 GMT
Not After : Sep 30 00:54:05 2026 GMT
Subject: CN=6ab3232e-470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:ba:d9:aa:aa:99:f5:48:91:c0:6f:e6:9b:
99:56:c9:54:03:d1:5b:41:aa:24:a3:cb:98:c0:db:
4f:6b:dd:ae:c0:82:49:d4:5a:a9:d5:db:86:e1:39:
be:30:68:01:fb:3d:94:6d:c1:32:7b:ed:45:94:6a:
e9:46:e0:5d:a8:a3:c7:4e:3b:3d:d2:f0:af:38:ae:
d7:90:a1:b0:dd:e5:07:0c:2d:65:2b:f2:2a:e3:f9:
c3:70:22:1e:72:6f:3d:b0:ac:f2:01:42:ab:ec:bb:
b6:4b:e2:5a:25:c4:d9:5a:da:02:0d:16:d1:83:72:
66:5b:1b:d7:60:f0:e7:5f:26:9b:fb:f1:58:b8:5a:
4e:9c:72:81:06:b9:95:b3:3f:36:36:c2:7a:e6:4f:
05:a2:ad:27:2d:f2:24:dd:17:41:0e:70:ed:1f:27:
a5:a8:6e:0d:37:71:5c:61:15:f2:fa:37:03:68:c3:
6c:b9:8d:68:12:45:ac:c9:37:99:6f:f9:12:b9:db:
02:e8:49:88:df:52:63:37:be:70:f6:65:a4:88:e2:
4b:e1:1e:e7:8d:87:a3:4f:d3:07:97:06:1c:8b:94:
c9:e8:67:69:90:a9:f2:4f:0a:e4:99:b9:50:19:e0:
d9:3b:a4:6e:59:a9:ef:31:bb:f6:a2:69:39:9b:f2:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B2:05:85:9E:23:A4:14:5E:B5:55:D3:24:C4:CC:8A:67:E6:14:8A
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:18:11:df:87:8a:52:96:b2:76:7e:f5:82:df:a2:f0:b7:b1:
31:2f:ff:14:3f:c0:af:29:a6:fc:b4:28:71:b9:0d:e2:4e:39:
18:34:01:dc:bf:9e:b8:03:62:ee:50:d4:07:99:71:2b:f8:38:
97:15:e2:56:ab:44:ef:9a:74:61:c0:bb:e9:d3:dc:bb:57:bc:
c9:f8:68:84:01:0b:55:15:a6:02:a5:00:e0:3d:c8:57:0a:ff:
20:47:e1:67:b2:45:a2:68:18:3a:ba:49:73:f8:56:19:e1:8b:
2f:94:4b:67:29:1d:85:3c:31:86:68:41:94:9e:a3:2f:fc:6d:
ee:45:74:8c:2d:d7:86:32:7e:c5:8c:e1:64:e6:ab:42:82:a7:
9f:c6:3e:17:7b:d2:b0:96:5e:71:06:6b:cd:53:6e:17:a9:49:
f2:82:b5:41:72:24:db:43:28:e9:65:f1:69:9a:44:7f:a9:23:
e7:44:f0:5c:af:19:2b:34:19:f7:b3:53:38:67:89:42:3c:d9:
51:50:44:2a:e2:e6:7a:da:3b:3c:ff:44:e4:76:74:2f:2a:fd:
cd:e6:48:d7:18:44:76:47:26:d0:37:17:2d:95:1c:53:e0:19:
21:c5:e7:a1:f8:fa:12:fa:24:9b:81:69:36:cb:01:fe:9f:c6:
28:e6:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:53:59 2026 by rpki-client