
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier: CVlSXm8GQffFAhmoLz/S299+c+Ru0W3CxXIdgylc93I=
Subject key identifier: 86:01:F2:BC:68:84:9F:10:4F:25:75:AD:0C:0E:3D:76:2A:8B:3B:4A
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number: FE
Signing time: Thu 23 Jul 2026 07:57:56 +0000
Manifest this update: Thu 23 Jul 2026 07:57:56 +0000
Manifest next update: Thu 30 Jul 2026 07:57:56 +0000
Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: nDEudX9KZOx5UnjqNskuoAv3xVTnOc2qttnL2kV5N7s=)
2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Validity
Not Before: Jul 23 07:57:56 2026 GMT
Not After : Jul 30 07:57:56 2026 GMT
Subject: CN=6a61c984-708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:95:fe:32:19:37:aa:de:26:4a:d7:a6:72:
87:28:ba:3d:04:51:05:74:a4:d6:dc:24:35:f2:da:
1e:e5:27:b8:4c:bb:3d:c8:38:5b:6f:f8:8f:d3:30:
de:cf:be:ca:a7:a0:52:ee:3f:e4:9a:c7:fd:41:25:
6e:af:1e:bf:f1:eb:15:a6:b6:5a:83:39:67:04:05:
5f:e2:51:04:68:fd:86:17:f6:af:51:2a:6b:98:c7:
cd:6a:34:33:be:e4:0a:2f:a0:2b:d5:b9:dc:bf:26:
15:3e:7a:90:75:5f:d0:55:fa:a4:76:32:8e:28:c7:
ca:9c:a0:c6:6e:e7:7e:bc:dd:0c:85:1a:86:7e:e8:
3d:2d:95:fb:11:98:62:ec:b7:ff:93:6f:36:10:5d:
41:53:42:a4:02:b3:0d:f1:b8:8f:2b:9d:e3:13:74:
03:7d:b8:01:a6:99:e8:7b:90:ec:2b:f1:be:a5:de:
1f:a7:30:43:88:4c:60:a4:73:98:29:cf:ba:7d:03:
be:78:4f:3e:50:98:9e:0d:1f:4d:10:c5:9c:1b:b8:
43:3d:12:c1:7c:75:07:9f:ae:89:20:53:e2:2d:68:
86:67:c2:75:e5:10:6d:fe:d9:c2:8d:c7:05:c3:f5:
9d:af:55:ef:a2:34:a5:23:4e:fb:ea:e4:c4:e7:12:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:F2:BC:68:84:9F:10:4F:25:75:AD:0C:0E:3D:76:2A:8B:3B:4A
X509v3 Authority Key Identifier:
keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:27:67:bd:bf:54:9c:e7:ff:bf:01:42:46:48:10:5d:e9:
e9:35:ff:24:ba:d8:42:43:93:e5:d3:4a:1e:8c:f8:a7:1a:c1:
56:31:ac:e0:59:77:53:3b:e5:dc:2f:07:56:94:75:38:78:ea:
be:1f:d6:d9:c4:f3:e4:b8:93:7f:44:6d:53:08:c6:fe:bd:db:
d6:c3:ed:6d:ca:7d:8b:c0:71:ae:c6:6c:4b:75:42:ad:c4:1e:
9f:69:f8:62:12:62:14:bd:38:28:54:f4:d5:9c:24:b3:0f:b3:
f1:7b:30:9a:17:f8:b1:e3:5f:27:8f:94:93:78:e9:4b:ad:f7:
60:12:fd:dd:a8:15:98:51:c7:09:15:e2:cb:76:52:a9:ff:c5:
33:36:b0:c2:15:89:29:73:86:3a:22:59:6c:ea:c8:52:dd:6b:
4c:68:a5:24:30:dd:a0:ae:06:04:3a:b3:fb:f6:09:7e:73:da:
e7:e7:c3:ac:3f:9c:52:2e:fd:81:81:5b:14:18:96:c1:5a:3f:
bf:bd:81:ac:3a:e4:61:ed:b9:f4:8c:0e:a3:3d:fa:2a:37:b9:
31:17:f0:36:2a:db:bd:89:a0:58:82:4c:be:20:7a:53:6d:d9:
dc:7b:ab:fa:13:fa:82:f8:ee:e5:ac:c7:6d:03:ef:6c:06:20:
f7:c0:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:28 2026 by rpki-client