
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: etG/xdw3Q455LHgvRPUeUwblWhBvxjDIVNAYPyfQokE=
Subject key identifier: 07:C9:4D:B0:F2:3E:10:BC:B9:87:BB:43:F4:EA:96:8C:00:99:14:1D
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 07DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 07C0
Signing time: Tue 24 Mar 2026 21:10:24 +0000
Manifest this update: Tue 24 Mar 2026 21:10:24 +0000
Manifest next update: Tue 31 Mar 2026 21:10:24 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: OhtUzmm9vTYogV1Csxj+0N0WaS9Gv0DYzVMJS1F34hI=)
2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Mar 24 21:10:24 2026 GMT
Not After : Mar 31 21:10:24 2026 GMT
Subject: CN=69c2fdc0-0502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:3a:f3:64:c2:08:a6:ee:4e:bf:32:44:0b:
87:43:19:84:fb:de:6f:ff:82:b1:c8:29:f0:c3:79:
fb:23:cf:b1:10:03:8b:0d:d9:81:2d:d6:9f:9e:9d:
05:3b:74:36:94:96:f1:84:17:60:37:1c:ac:21:5d:
64:8f:c3:34:bf:64:08:5c:08:f6:9b:26:f4:47:d3:
a8:53:46:6d:57:3e:3c:45:73:10:cf:ff:3a:a3:df:
dd:0e:ab:83:d8:13:4b:78:7b:eb:bc:05:2a:a6:dd:
ce:9d:88:f2:12:fa:4a:68:aa:b6:ba:32:1f:95:0b:
8b:98:61:40:70:a7:bb:cd:5e:79:41:71:fc:78:38:
c3:aa:cf:e7:53:25:b1:8c:4e:e7:ee:97:3b:50:1e:
d0:14:e3:f7:c3:01:b4:bc:27:15:42:79:8c:b7:5b:
7b:84:ae:9f:51:08:67:60:ed:66:c9:a0:8d:2d:d5:
f9:37:5d:87:c5:18:f0:27:a6:0d:bc:f0:66:d3:7b:
b6:9d:ed:38:d2:0b:73:ca:8b:f2:a8:26:9b:81:bd:
c9:4a:0d:98:75:7e:a0:12:4b:56:1c:0f:84:6c:68:
50:92:1d:34:9d:ca:e6:94:0f:30:51:1e:32:a7:77:
d7:62:f8:33:23:84:de:b7:98:25:4c:67:c6:a3:8d:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:4D:B0:F2:3E:10:BC:B9:87:BB:43:F4:EA:96:8C:00:99:14:1D
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:c7:18:d7:ae:0c:be:b4:20:06:ce:15:b0:9f:24:b4:25:
48:5e:cc:cb:fd:70:0b:04:36:a2:3f:a7:74:8f:c6:62:16:f4:
e4:51:75:ae:fd:86:e3:78:9a:ee:85:6b:7f:c0:a6:ab:a1:d7:
f2:21:1e:12:7e:96:d9:15:19:f3:46:9d:21:1f:1b:ff:32:a0:
e2:db:a4:ef:2a:1d:7f:a2:23:a3:0e:ed:ea:b7:8b:e3:8b:d3:
0f:39:9d:8b:70:a3:34:18:6c:ae:c4:6d:9a:79:bc:70:66:21:
5f:ab:a9:fb:e7:58:c0:d0:f2:af:35:19:3a:c5:69:b5:e7:ba:
5e:93:71:5c:f8:83:95:56:81:62:7c:14:e1:de:5a:bd:39:2b:
61:a7:32:74:04:9b:28:05:32:5f:3e:51:ed:e0:ff:4e:c8:a3:
7a:be:90:a3:f6:cc:8b:3c:8f:fa:86:2d:7b:fb:45:cb:d7:71:
db:ec:98:88:a8:80:c9:ab:c9:22:15:1e:bb:df:d9:de:4f:7a:
54:f0:83:68:3e:94:a7:ce:91:b0:96:fa:65:06:70:b6:fd:f2:
b0:51:04:4f:82:d9:f6:99:1d:97:94:fb:bb:fd:21:92:04:52:
33:b7:1a:34:06:c9:49:d4:1f:1d:06:cc:f4:af:30:ca:32:af:
89:1d:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:15 2026 by rpki-client