
$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier: cyluInRrhBSI7ZXIhegTWvnQ8yNyoNkptVYzi0EF1OA=
Subject key identifier: 85:4C:37:84:9F:1A:47:FA:62:F7:F7:3F:A9:63:B6:ED:38:46:72:02
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 1122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number: 1115
Signing time: Tue 12 May 2026 17:17:10 +0000
Manifest this update: Tue 12 May 2026 17:17:09 +0000
Manifest next update: Tue 19 May 2026 17:17:09 +0000
Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: 8AyOUAtgDYYljd+XTZ/VYNbJKlkJYS7F/z2hqEKXIEw=)
2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: PxGfyB9W/rrckFKkWTDwSaYZ5fUPv1DDMqq0Qrh6HDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4386 (0x1122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Validity
Not Before: May 12 17:17:09 2026 GMT
Not After : May 19 17:17:09 2026 GMT
Subject: CN=6a036096-bd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:28:c4:3d:8f:44:40:3f:9e:34:62:85:12:
67:80:d5:42:f9:cc:68:94:4e:ec:89:ad:43:54:3d:
99:5a:7b:74:26:21:fb:5c:33:c2:65:e6:48:cf:04:
ec:d2:36:aa:65:b1:af:a0:45:5a:f9:fd:aa:8c:6b:
83:cd:01:85:db:4c:fb:c6:17:ed:af:e8:94:14:60:
82:88:05:14:c6:b4:36:c8:75:21:6e:1e:d1:73:75:
bc:11:a5:d3:84:25:ec:85:50:b8:c4:3c:72:b1:69:
77:1a:02:6d:81:4d:ca:59:d5:fd:18:fe:ed:e0:90:
71:0f:17:39:a2:e2:8c:d9:bc:60:81:7b:ff:99:64:
9b:cb:9e:ba:90:f0:53:b8:12:78:e9:fa:f5:38:c1:
58:61:7a:79:c2:cc:2e:1d:68:c7:6f:89:ce:68:69:
2c:ec:c2:75:27:d8:08:d3:75:90:3b:73:ff:e9:7d:
63:bc:00:c9:bc:b5:a1:88:17:4f:a5:2c:5c:bc:2e:
57:58:0b:53:93:ef:8b:df:ad:0b:c8:db:85:a7:54:
40:41:47:c6:06:76:bd:e5:35:63:8d:0b:9a:85:b2:
ca:b8:57:9c:47:40:37:58:33:49:66:a4:2c:f2:b6:
ce:bd:1c:22:6d:57:10:8e:8e:bb:33:47:89:b9:e5:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:37:84:9F:1A:47:FA:62:F7:F7:3F:A9:63:B6:ED:38:46:72:02
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:45:87:44:48:d4:1e:ec:c7:2f:c0:8e:e6:64:8c:bc:30:5b:
49:96:51:6f:f5:b5:e6:6e:35:70:0a:e9:c5:79:01:fa:b9:e1:
d7:27:8f:78:d3:af:4f:34:e5:cc:01:7a:3c:6e:0c:7d:51:09:
78:04:85:ca:4b:a3:ec:bd:ab:d0:66:d0:c1:ed:b5:c6:75:d0:
a3:3c:29:1e:7d:25:5b:12:4d:90:10:ea:0f:82:89:bd:75:27:
d6:03:d7:db:32:6d:c5:4d:54:6b:ee:a0:1e:2f:4d:0e:67:42:
97:03:91:36:c0:c8:c2:f4:01:be:6e:0a:a8:0c:4a:c0:43:9c:
1a:70:95:60:d1:6f:63:e8:91:b0:49:af:a7:b9:ef:4b:2e:cc:
eb:c6:51:ae:b1:f0:12:43:9f:e6:c8:da:b1:f1:f4:c5:42:2d:
37:a2:70:5f:0f:55:a0:c3:6b:46:d5:a0:3b:cc:54:4c:4d:67:
8f:68:a2:78:35:19:7d:cb:7a:d7:b5:4c:1b:c5:3d:ed:c6:22:
fb:97:bf:37:8d:50:ab:fe:91:31:7b:bb:08:1d:91:ca:6e:4b:
24:b8:b4:5a:d2:69:18:6f:48:8d:2c:0f:9a:14:0d:ea:7e:d7:
14:ea:a9:21:c4:a3:8a:d1:6e:5a:10:d0:b3:b0:11:0f:3f:e2:
67:68:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:30 2026 by rpki-client