
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier: Jr0vRf5a6I5CkY7nfpjaVuyMPxlOeG4wjMUMHgm1kXQ=
Subject key identifier: B7:73:1D:4C:56:76:AC:43:8F:21:8E:42:F0:B4:5D:06:DD:42:19:21
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 06A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number: 06A2
Signing time: Tue 24 Mar 2026 22:07:18 +0000
Manifest this update: Tue 24 Mar 2026 22:07:18 +0000
Manifest next update: Tue 31 Mar 2026 22:07:18 +0000
Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: 5LJsL88k1u8Oks2seO4uuxkk5S0QiKKzCOUUH8OTO/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Mar 24 22:07:18 2026 GMT
Not After : Mar 31 22:07:18 2026 GMT
Subject: CN=69c30b16-26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:55:e5:3b:e3:75:23:99:7e:1e:bb:1f:5f:
72:75:a6:7f:a6:69:e6:5d:13:13:9b:36:9b:33:ed:
56:96:ca:06:3d:7e:fa:13:da:5c:fb:62:54:4e:e0:
6d:97:aa:cb:75:16:cd:bf:c0:6a:1c:09:ab:47:fc:
6b:28:af:89:2a:a8:02:be:4a:85:52:65:1d:11:f9:
76:04:b9:c1:13:fa:79:71:f0:26:57:e9:f6:67:50:
1d:17:2f:77:45:bb:87:9b:78:93:09:df:73:77:98:
5b:6d:ea:8e:6a:75:a5:ef:64:05:43:04:c4:14:09:
3d:c7:ab:8d:08:36:d0:2d:3d:a4:f1:87:a5:50:da:
df:17:5b:d3:c3:c2:ea:2f:37:bc:d7:04:66:2e:39:
6e:23:32:ed:68:7e:2c:82:a2:a0:bb:dd:dc:f2:ad:
b1:df:ab:86:c2:41:d5:39:cd:55:30:25:ef:98:21:
65:17:e0:9e:54:fd:e2:81:d8:09:ed:11:11:8e:b9:
06:f3:55:bb:b2:7c:7f:85:18:3b:c8:96:b0:24:cf:
01:ee:17:5a:ae:26:71:01:aa:16:78:13:c9:95:94:
46:a6:38:d5:ee:22:59:bf:3e:4e:15:8c:6b:85:51:
75:20:c0:27:41:5a:71:4c:15:01:bb:28:84:f4:7a:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:1D:4C:56:76:AC:43:8F:21:8E:42:F0:B4:5D:06:DD:42:19:21
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:d3:5a:0a:54:8c:ba:99:90:4e:28:df:bd:d2:0a:b1:3f:19:
ac:88:a1:7a:da:f5:57:4d:90:fb:10:33:ba:d8:6a:24:68:5f:
36:25:97:7b:03:af:17:df:ee:60:b8:c1:ab:1b:71:b7:13:0c:
92:19:77:8b:ed:5c:ae:5f:01:a5:24:4f:94:3d:30:99:ab:e5:
5d:a6:08:3c:4b:e3:07:90:f1:21:09:a0:d5:35:17:4a:00:6d:
17:e7:cb:18:f4:a5:ed:bf:08:b3:30:23:b4:27:74:1b:7d:a7:
23:d7:f2:bb:07:d3:f2:8b:e9:7f:66:0f:da:36:35:6a:56:b6:
31:4d:fa:46:95:a6:96:37:ae:60:8d:d3:fa:00:ea:c2:41:93:
3f:e3:69:d1:ae:bb:26:05:41:fc:61:59:25:32:b7:e8:38:d1:
54:f6:0b:29:b0:aa:b7:27:c0:89:84:35:71:7c:67:8a:e4:f7:
3f:08:ad:8a:c9:3f:4b:37:c9:46:e2:57:64:ab:20:8a:be:24:
57:4d:2f:ed:84:77:f9:f3:b6:c8:a7:7f:58:f7:53:92:34:f3:
c1:81:98:7e:ab:e1:6d:0a:ab:47:11:dd:c0:91:0d:a1:37:c0:
e1:a1:66:25:97:40:e3:e9:cf:ff:39:17:8b:38:35:e5:35:2d:
17:2a:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:21 2026 by rpki-client