
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json)
Hash identifier: puEpUgd+JI93qqb6uZJ5xDyAdQhKpb8RV31JBETYZ6A=
Subject key identifier: C7:43:06:72:BA:7E:26:76:79:4B:52:A0:66:66:62:A3:D1:9C:F8:E8
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
Manifest number: 0581
Signing time: Tue 24 Mar 2026 22:58:03 +0000
Manifest this update: Tue 24 Mar 2026 22:58:02 +0000
Manifest next update: Tue 31 Mar 2026 22:58:02 +0000
Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: 75ufMfJKxUPzF+bih4mngX1SdfjzQLBS8A128ww3+Ak=)
2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: O7zzjDBWEUSYqll/hl0eb8ojldYcS/JklLQk1YXiDkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Validity
Not Before: Mar 24 22:58:02 2026 GMT
Not After : Mar 31 22:58:02 2026 GMT
Subject: CN=69c316fb-dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:d3:48:2f:82:dd:27:24:50:0c:09:93:8d:
19:00:55:bd:2a:51:a7:30:3b:ab:0d:8b:ec:59:cb:
f9:b8:d4:88:66:7d:ba:8e:89:38:9c:e4:60:49:62:
d0:7b:9f:45:48:4c:7d:5e:cd:e3:21:eb:1f:6d:02:
be:4b:42:09:a2:bd:21:c2:65:9a:f5:0c:02:c4:4f:
72:b9:7b:6f:d2:94:90:60:6b:28:96:2a:06:b3:d5:
95:0e:52:f9:78:35:27:f5:25:76:bd:13:07:85:00:
27:f4:32:7a:6f:6b:8e:d3:36:0f:bf:a2:cc:74:62:
1d:74:b6:b1:12:d5:d0:2a:cb:d5:7d:20:5b:b7:cd:
47:2f:84:fc:80:09:d1:d6:5b:d0:e5:84:08:2e:4b:
f4:03:6f:03:cb:2d:85:5a:76:46:09:3a:5a:92:db:
3a:da:40:30:23:9c:61:36:27:9e:47:ac:60:60:e8:
68:95:39:ce:30:8a:df:63:f5:94:bb:a8:b9:91:7e:
bb:f8:fd:9c:9d:d0:a2:40:f0:80:ed:75:cd:4c:60:
8b:f4:c4:9d:53:9e:bc:09:6c:eb:4d:f3:21:4e:36:
47:ea:34:81:4d:02:57:67:5f:8a:e1:86:d1:7b:8e:
86:a7:46:50:cb:3f:c2:24:a4:32:bc:74:ab:77:06:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:06:72:BA:7E:26:76:79:4B:52:A0:66:66:62:A3:D1:9C:F8:E8
X509v3 Authority Key Identifier:
keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e5:12:57:43:b3:63:51:75:7e:36:82:30:df:13:9d:39:e7:
43:c5:7f:06:fa:f8:a0:eb:0d:69:95:0f:c1:26:01:18:10:44:
35:0a:76:cf:23:2b:87:71:d4:ac:23:a9:46:c2:81:ce:93:10:
a7:4c:e9:36:18:3c:4f:a5:f5:11:4a:e1:04:32:2b:b0:ae:93:
c9:7c:5c:22:41:c0:51:cf:9c:33:84:57:15:37:97:8b:d2:a8:
97:22:ab:3e:64:2c:3d:3e:ba:0b:99:36:9c:cb:cb:de:49:50:
60:42:96:7c:59:1a:22:98:b1:39:ca:c0:32:5c:9d:dc:b2:0c:
d4:b9:7e:2a:49:ff:21:79:18:47:8c:11:28:a5:d9:e0:be:d6:
6e:ef:ac:11:83:d8:ea:9d:a5:8e:eb:67:48:72:b4:31:e5:71:
bd:a4:bb:14:02:58:b4:dc:ee:72:33:b1:74:84:0c:d9:ba:f1:
42:6c:2d:d9:25:41:0c:b0:f4:e0:44:82:7c:41:81:f9:f3:51:
c1:9b:41:15:33:9f:8b:83:d9:fe:00:4f:ef:66:15:e1:20:66:
2e:ba:ba:60:b1:d2:2c:ed:9e:64:7f:de:90:ed:dd:72:52:23:
ac:a8:82:c3:9c:fe:7c:ae:e7:b7:b9:55:ad:da:4c:f8:94:3d:
aa:10:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:29:50 2026 by rpki-client