
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier: +DEz6uMO9zLsR9WpofM4gSS/k4jz/XnDUU5ady5/5vA=
Subject key identifier: 7A:B8:AD:2E:9B:0A:C3:3F:12:08:54:78:B5:33:90:DD:2B:52:C1:61
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number: 0289
Signing time: Wed 25 Mar 2026 01:12:07 +0000
Manifest this update: Wed 25 Mar 2026 01:12:06 +0000
Manifest next update: Wed 01 Apr 2026 01:12:06 +0000
Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: psgMisaF+QKEI6C/nHy4UMx6+9NdaWpveUKwNNpdaZQ=)
2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Validity
Not Before: Mar 25 01:12:06 2026 GMT
Not After : Apr 1 01:12:06 2026 GMT
Subject: CN=69c33667-c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:41:0a:9b:d2:a7:e2:d8:c2:40:4c:e1:eb:
90:d2:b1:e7:7e:e1:f9:65:b2:85:bd:41:3c:3e:46:
9d:a8:6a:7c:a7:11:c4:ec:de:40:73:39:17:21:92:
03:ba:15:ae:15:4e:a8:ab:e5:64:86:a5:5e:b3:b9:
15:8c:ff:28:45:33:a0:1f:56:ce:44:cc:59:38:0f:
3a:d1:01:e3:f4:97:85:5a:01:32:90:99:7c:1f:43:
bd:60:19:bc:56:fd:9a:c8:33:8f:f1:e2:b4:f1:9f:
1c:d1:b0:30:51:21:d8:fa:1e:59:a0:08:d4:fc:c6:
fa:2b:12:94:51:74:df:b4:84:fa:0f:94:ba:1c:78:
38:c7:b4:1f:fa:b0:6d:45:d0:99:c4:ae:1a:bc:25:
c6:60:57:46:75:46:b1:f0:0a:53:ea:21:bf:13:88:
66:f8:69:2f:2c:15:11:cd:31:69:c7:86:31:7b:17:
a1:62:ec:0d:c9:7a:a2:d6:3e:44:48:97:29:3a:40:
7f:13:c4:1c:e6:3b:54:9a:7e:96:f1:ec:71:41:23:
35:09:f5:89:8f:5b:53:fd:a8:4e:5f:71:bd:62:a3:
68:67:7f:0d:ce:2a:b2:3b:f3:a5:0a:e2:e6:d8:a8:
17:2f:e0:60:2d:ef:25:02:c5:aa:c9:0b:06:07:76:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:AD:2E:9B:0A:C3:3F:12:08:54:78:B5:33:90:DD:2B:52:C1:61
X509v3 Authority Key Identifier:
keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:a8:66:a6:42:14:94:76:f1:e0:33:ea:bc:10:7c:e3:a0:
db:4e:e3:ac:52:38:96:65:00:06:ad:6a:8e:6d:36:f4:26:45:
f0:a7:f0:8e:b8:bd:ec:1c:33:06:79:00:33:8a:23:78:85:eb:
70:d7:8f:9a:d9:0c:bd:70:90:8d:a0:8c:73:54:04:23:98:8f:
23:17:af:cf:b6:ce:05:aa:7d:a8:b1:d8:92:90:72:8b:11:e8:
7d:d9:76:9e:f4:f8:a6:be:c6:1f:06:da:e6:bb:d8:99:2d:71:
0f:fd:d8:50:b6:c7:c7:bc:51:44:06:45:6f:ec:16:ea:fa:53:
eb:f6:fc:47:d4:05:8f:da:bf:eb:c8:0a:b8:82:7f:cb:f4:8f:
44:a6:9e:b5:ac:c9:9a:a8:95:a1:c7:d4:0c:df:12:e9:14:1e:
84:1b:07:3b:4a:3b:93:06:c2:a5:62:53:d4:c4:cf:5a:05:ca:
fe:68:7b:59:e8:7c:ef:d5:7f:66:ce:15:f9:4c:31:10:ca:a1:
a8:ad:55:9e:b1:03:84:e3:cd:2d:f7:eb:2c:3c:4d:c0:71:86:
47:0f:ee:de:83:32:61:2c:7e:f5:e5:76:72:b4:6f:05:ba:ee:
25:a8:46:00:ad:ef:50:25:4a:65:a8:b1:6d:82:e4:eb:19:52:
65:6f:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:13 2026 by rpki-client