
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier: /i6mh8KmFpejrRybcSvgrhqGGTmJATlhJxtyEB1tnf8=
Subject key identifier: 4C:E4:67:18:85:FA:8C:20:6B:F9:E8:CA:3D:40:32:7A:06:FB:54:C1
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 06E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number: 06DF
Signing time: Wed 22 Jul 2026 22:54:55 +0000
Manifest this update: Wed 22 Jul 2026 22:54:55 +0000
Manifest next update: Wed 29 Jul 2026 22:54:55 +0000
Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: MFEDo/pBJuBToDRHByRkVXW5C+PAZkOtIIwkF+ZukuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Jul 22 22:54:55 2026 GMT
Not After : Jul 29 22:54:55 2026 GMT
Subject: CN=6a614a3f-79ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:42:31:2a:a0:08:06:d1:19:08:5f:78:cb:
c4:33:0b:20:a3:ae:28:8a:6d:17:d3:6c:7b:50:65:
87:1b:0a:08:db:92:60:70:dc:7e:06:fc:ce:ef:f4:
53:9e:7d:a8:c7:cd:6b:7c:5e:65:54:89:47:9b:42:
6a:77:4c:78:aa:3a:66:d3:88:59:74:30:6b:9c:ac:
82:7f:be:8f:e6:9f:7c:32:fb:e0:b9:9c:64:f4:d2:
a1:fd:c8:7a:e0:75:b3:27:43:57:f4:35:53:49:23:
9a:d2:ce:69:8c:31:ea:c5:c4:c5:ae:fd:34:a5:c6:
3c:38:3c:fc:16:89:a7:f8:4d:ab:0e:be:cc:16:66:
8b:33:1d:80:be:84:fa:05:85:80:01:20:60:73:dc:
e7:97:ff:2a:7c:99:40:e1:7e:76:8c:10:93:c4:b6:
71:5e:74:df:99:e6:15:94:c6:68:b7:2e:d6:77:87:
3e:f2:9c:11:31:df:99:4d:ab:65:6f:1e:c9:47:41:
f8:e7:68:11:4d:50:be:24:01:b5:5d:3e:ad:00:ac:
bf:ce:21:74:7a:2e:9f:e7:80:8a:1f:4c:f1:2c:88:
e6:b5:7a:28:10:67:b4:84:b1:ce:4e:63:13:5c:1a:
a6:27:52:7c:0a:82:f2:10:54:81:96:b1:5b:42:63:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:67:18:85:FA:8C:20:6B:F9:E8:CA:3D:40:32:7A:06:FB:54:C1
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:eb:64:f6:77:4b:46:50:e3:f7:52:b6:77:62:7e:85:e3:
68:67:cb:7a:16:73:f4:4e:0d:e1:6f:b1:57:f0:ca:47:e0:a9:
f6:d5:de:21:e0:9f:39:c6:78:29:bb:07:16:f9:5e:9a:ce:38:
cc:a1:6a:55:a8:7f:76:3d:65:98:ba:3d:52:20:3f:d1:e8:1d:
4c:c6:e7:fd:d9:e0:96:74:8a:4f:5c:7d:48:a4:f2:6a:ba:c5:
ae:f5:f3:2b:81:d2:04:1b:fc:15:04:83:4e:a0:53:e5:59:53:
d8:c3:7f:d0:57:7c:57:4d:4f:8a:ab:44:bf:da:1a:bc:bc:6b:
53:3a:5c:38:27:64:48:75:c6:0d:28:aa:f5:96:85:3c:7b:c7:
21:35:82:39:ec:20:4b:97:39:4c:52:c5:47:56:2b:1c:71:a9:
ff:2a:37:0a:1d:04:81:03:d2:b3:1c:d9:c2:93:20:ab:9d:e4:
f9:25:2f:44:ec:aa:9f:8d:56:eb:11:1f:cc:17:2e:88:75:d4:
7f:33:18:d2:80:fe:83:85:ec:f3:c6:01:6b:ab:e0:5b:f6:f6:
2f:1b:ee:ac:58:3e:15:d6:5e:67:0d:18:bf:12:80:68:57:64:
41:91:c7:56:05:dd:dc:4a:44:d3:d7:57:d5:18:e8:98:84:98:
15:25:68:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC
MUQ1ODgzNjkwHhcNMjYwNzIyMjI1NDU1WhcNMjYwNzI5MjI1NDU1WjAYMRYwFAYD
VQQDEw02YTYxNGEzZi03OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYdCMSqgCAbRGQhfeMvEMwsgo64oim0X02x7UGWHGwoI25JgcNx+BvzO7/RT
nn2ox81rfF5lVIlHm0Jqd0x4qjpm04hZdDBrnKyCf76P5p98MvvguZxk9NKh/ch6
4HWzJ0NX9DVTSSOa0s5pjDHqxcTFrv00pcY8ODz8Fomn+E2rDr7MFmaLMx2AvoT6
BYWAASBgc9znl/8qfJlA4X52jBCTxLZxXnTfmeYVlMZoty7Wd4c+8pwRMd+ZTatl
bx7JR0H452gRTVC+JAG1XT6tAKy/ziF0ei6f54CKH0zxLIjmtXooEGe0hLHOTmMT
XBqmJ1J8CoLyEFSBlrFbQmNe7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzkZxiF
+owga/noyj1AMnoG+1TBMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2
MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O
OGJBQXBEMGZpUy14MVlnMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGxTrZPZ3S0ZQ4/dStndifoXjaGfLehZz9E4N4W+xV/DKR+Cp9tXeIeCfOcZ4
KbsHFvlems44zKFqVah/dj1lmLo9UiA/0egdTMbn/dnglnSKT1x9SKTyarrFrvXz
K4HSBBv8FQSDTqBT5VlT2MN/0Fd8V01PiqtEv9oavLxrUzpcOCdkSHXGDSiq9ZaF
PHvHITWCOewgS5c5TFLFR1YrHHGp/yo3Ch0EgQPSsxzZwpMgq53k+SUvROyqn41W
6xEfzBcuiHXUfzMY0oD+g4Xs88YBa6vgW/b2LxvurFg+FdZeZw0YvxKAaFdkQZHH
VgXd3EpE09dX1RjomISYFSVoSA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:00 2026 by rpki-client