
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json)
Hash identifier: e7pMNjJrL40zzBgKqCRoSPW2mgdvI/zw8UmeJ/nJ2yE=
Subject key identifier: 56:DE:60:46:64:C6:29:3C:65:8F:D0:ED:04:B4:C0:24:AD:83:AD:3B
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
Manifest number: 77
Signing time: Wed 13 May 2026 07:53:11 +0000
Manifest this update: Wed 13 May 2026 07:53:10 +0000
Manifest next update: Wed 20 May 2026 07:53:10 +0000
Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: ixIVVaL3wOyvWQ+P8mG3hjlupy28HdHwyTRa7wzXtqo=)
2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Validity
Not Before: May 13 07:53:10 2026 GMT
Not After : May 20 07:53:10 2026 GMT
Subject: CN=6a042de7-7abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:11:a4:b4:f6:df:93:93:ce:08:33:48:e7:
8f:1d:cf:12:fc:dc:92:98:e7:2e:f4:1f:f0:11:79:
c3:e3:8a:e5:cb:4b:2a:1f:5d:68:62:83:35:a6:2b:
15:32:a9:12:2f:19:d2:ca:bd:6c:a4:af:11:90:2a:
7f:7f:13:f8:70:87:4c:2d:c1:69:4c:e7:19:32:c7:
4e:ba:7f:4d:26:23:99:60:dd:46:ff:46:c8:64:ac:
d7:9a:12:97:50:62:24:6c:82:90:a0:cf:4f:de:b6:
6c:4e:7e:76:44:2e:8e:79:5b:92:d2:fc:d3:12:42:
65:1c:2d:6c:39:d3:89:d5:19:2e:70:29:f8:6c:49:
96:54:e3:21:24:a6:f5:af:9a:30:e2:55:f0:46:ad:
e2:7d:0d:d5:52:2c:a8:f5:91:2b:d6:28:49:42:75:
3a:fa:04:6e:5a:fd:30:59:54:bd:41:4a:55:92:79:
a4:34:a8:7a:f2:65:c2:6e:21:4c:6c:01:3f:56:6d:
95:75:c3:59:b2:27:2e:c6:c0:a9:54:42:85:0f:63:
5c:dd:c4:45:83:42:66:97:24:8e:7c:e5:08:13:a7:
d8:48:b9:05:c7:46:e1:ae:68:46:29:c5:6a:34:5c:
01:04:7a:36:23:2e:eb:94:d1:1b:e8:79:25:db:c3:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:60:46:64:C6:29:3C:65:8F:D0:ED:04:B4:C0:24:AD:83:AD:3B
X509v3 Authority Key Identifier:
keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:84:db:78:9c:a6:57:ad:a4:68:80:7b:88:f1:42:bf:fe:
bf:ea:36:f8:8a:99:85:8a:4d:7e:20:d2:c5:b5:ab:be:7d:74:
e1:ca:f6:22:1d:40:9f:a9:3e:ef:4c:34:3f:8a:bb:59:16:e4:
e2:cc:02:46:92:f4:58:f0:22:db:ba:db:b5:0d:72:90:e0:6f:
f4:dd:be:67:e1:71:70:6e:7f:f3:5d:b8:9b:86:6f:ab:42:cc:
e7:96:85:ff:4c:33:0b:19:c3:e9:28:5c:7f:5d:cc:7d:f0:b2:
7a:be:ff:16:b9:09:34:d4:9c:90:2f:3a:d6:72:2b:08:e5:17:
9c:47:f0:a0:a8:bf:8c:5c:99:20:f7:23:da:08:7c:11:ce:70:
0c:1c:8d:c5:02:f0:54:7a:51:27:08:87:a4:c7:2f:73:ba:85:
07:3c:49:e7:05:60:55:c9:ac:66:19:cd:0a:73:d8:db:60:f7:
12:79:76:4a:53:69:e6:13:36:77:08:da:b1:24:8f:4e:2f:9e:
1e:d8:e8:2e:c2:0d:22:64:4a:77:ae:e2:e5:c2:80:d4:7a:65:
8e:69:83:b1:32:ba:ce:55:1c:0b:f0:22:2d:24:fa:cf:12:86:
57:13:07:28:6c:b7:14:7c:7c:24:87:47:eb:7b:1d:64:ec:b7:
68:d4:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:55 2026 by rpki-client