
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json)
Hash identifier: mlimLFyZFlhUMATobl9pQqmXtlUxOw1f1XKCzmlYo4g=
Subject key identifier: E4:4C:B7:6A:08:B3:45:7D:A4:25:09:71:0B:AC:1B:7F:1E:FD:37:75
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
Manifest number: 8B
Signing time: Mon 11 May 2026 07:53:11 +0000
Manifest this update: Mon 11 May 2026 07:53:10 +0000
Manifest next update: Mon 18 May 2026 07:53:10 +0000
Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: b7Y+k3BJuwhOAgxWCQ+I7UFYbY1Y7adukgSm5NgET8c=)
2: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=)
3: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=)
4: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: May 11 07:53:10 2026 GMT
Not After : May 18 07:53:10 2026 GMT
Subject: CN=6a018ae7-69d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:5a:89:36:c8:95:bc:86:bf:c7:b6:9b:7f:
5b:71:65:11:8d:bb:de:4b:56:9f:30:88:c3:3e:9b:
11:f4:89:cd:90:94:68:39:f6:4a:89:ad:63:2e:e9:
cc:f7:85:15:3c:b0:37:a2:0d:c8:6e:e1:4e:01:07:
80:4e:59:50:59:25:f9:b2:d3:b6:19:db:eb:c7:98:
51:3a:21:b7:d2:72:23:f0:4d:25:bb:0f:a9:71:d7:
8c:28:3b:40:ea:87:04:6a:ea:c1:b3:7b:9d:24:c2:
ce:86:c2:86:8a:74:ea:ab:a2:e4:cb:7e:39:0c:2a:
15:17:a5:8a:b2:80:19:71:a8:f8:14:5b:00:41:43:
04:a2:e3:33:c1:8a:d5:d8:76:6c:e5:2f:5b:86:f6:
a3:a8:73:ab:a9:f0:cb:e2:4f:52:03:65:a8:b1:b1:
5f:04:b6:fe:16:13:7a:84:2d:f2:f9:e3:2e:11:5c:
98:94:55:b1:b7:76:48:0e:0a:24:e7:19:dc:4f:fe:
f2:57:47:3a:d1:93:97:51:3e:87:c3:87:44:5d:c2:
e0:36:7e:7c:bf:d5:4f:7d:02:3c:5d:c2:34:fa:7b:
dc:d2:22:ea:9c:f8:70:89:aa:2f:c2:88:b5:3b:65:
4e:fe:fa:a3:85:3b:9c:3a:36:dd:30:0d:74:e6:b0:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:B7:6A:08:B3:45:7D:A4:25:09:71:0B:AC:1B:7F:1E:FD:37:75
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:4a:af:18:d6:7a:2f:b2:92:c7:97:43:60:ca:1b:f1:a9:6e:
07:cb:6d:43:d4:4d:33:89:2a:fe:d5:e3:34:3c:75:fb:35:1b:
79:60:2f:2e:6d:cc:c4:d5:d7:78:b4:af:c8:55:d2:f2:a7:82:
ac:f8:10:16:d2:11:6a:fd:0e:6a:2a:73:c0:1f:b2:ef:e0:bb:
c0:f3:1b:15:28:db:32:13:5b:94:e8:45:68:f7:1a:ea:4f:de:
38:43:7f:30:d0:18:6b:df:d5:f2:a9:b3:c7:ab:e3:9c:8f:3b:
10:bd:fb:33:3f:c8:2f:40:72:a7:f0:ba:11:79:1a:e2:c6:fb:
89:be:cf:c2:50:6b:95:b7:41:e7:00:2f:f3:f6:4d:bc:62:0c:
8d:bb:21:92:d3:c8:f2:e8:5c:a9:41:7f:b8:cf:5b:f4:b4:78:
37:ad:aa:6d:1f:1a:aa:26:2d:c2:a3:e5:e7:35:46:c7:7b:59:
29:73:cb:d2:0a:94:da:00:ef:c1:22:28:b6:fe:69:e1:e2:7f:
dd:10:bc:ac:cb:d9:a9:6d:4f:9f:b3:c2:2e:c8:76:0f:08:33:
59:cf:38:65:7f:3f:8c:60:b2:3d:eb:32:2a:b2:0d:b5:1f:e4:
0e:68:b5:61:1f:ad:a5:9f:28:34:04:56:d1:75:8e:19:f9:59:
4b:73:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:49 2026 by rpki-client