
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
File: 0DOGEJUQz9wm91V6_5mhMey1lCQ.mft (raw, json)
Hash identifier: eBaAAtsNdB203mTIlKyJcxq8AVl02Kbje20MIKSY2cw=
Subject key identifier: DB:A0:E2:BB:F0:1E:C0:6A:99:7C:0C:49:BE:7B:B9:BE:93:0A:8B:22
Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
Manifest number: 3543
Signing time: Thu 26 Mar 2026 14:58:57 +0000
Manifest this update: Thu 26 Mar 2026 14:58:57 +0000
Manifest next update: Thu 02 Apr 2026 14:58:57 +0000
Files and hashes: 1: 0DOGEJUQz9wm91V6_5mhMey1lCQ.crl (hash: TK1DZij9+/+Au/tYjv1eYN4ZxPNpA/K9DgYy54pY5Tk=)
2: BE39F43074B811EB9AECDC67C4F9AE02.roa (hash: 16WodWe9duRlsrVReLGZtzM0CiqIeUZOIFJ6Ry79xho=)
3: 7CC8FF74562511E78A45783FC4F9AE02.roa (hash: Bn1YNPtkgT+SB+A+ua0TK0p8/s2quhsECBFyY259mck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl
rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189F23, serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424
Validity
Not Before: Mar 26 14:58:57 2026 GMT
Not After : Apr 2 14:58:57 2026 GMT
Subject: CN=69c549b1-f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:9a:ae:94:1a:73:8e:1c:3b:45:5a:16:31:
e3:0c:1d:c2:ea:66:2a:47:82:55:ac:8c:80:ff:14:
26:f0:f0:74:27:f3:eb:9b:04:45:23:f3:57:af:a1:
2c:9c:53:f6:37:06:f4:d3:07:6a:2c:34:07:a0:8b:
56:fc:df:6e:94:4b:39:f6:6b:c5:18:c0:c0:40:e3:
6c:1f:e3:41:93:1e:f2:0d:af:2a:ce:24:44:b6:a4:
f0:69:b2:fa:b5:0e:37:cf:9d:c7:fe:12:2c:a3:c4:
ef:c5:89:88:2b:72:f3:00:76:fa:30:8b:e8:31:ec:
d8:00:8b:f2:eb:9c:a5:5a:6a:35:88:c4:3c:57:e1:
4e:d6:98:8b:81:e1:c6:17:4c:ba:a7:53:93:2c:ac:
51:dc:d0:be:65:d3:bc:7e:61:37:de:db:e6:68:a5:
fc:cf:e8:6c:a1:46:76:16:3a:fb:21:58:32:b6:85:
75:cd:1c:00:cb:fd:27:70:14:2a:f1:5b:87:59:97:
23:83:d0:0a:4d:fd:5c:75:75:a3:aa:29:51:79:ae:
31:15:14:65:75:da:89:fc:0e:18:37:9e:31:f8:3e:
ec:3c:54:63:f1:55:75:92:a1:2e:1c:d6:d3:63:7f:
fd:c4:64:30:df:75:a9:0e:b8:54:09:28:e6:a9:1d:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A0:E2:BB:F0:1E:C0:6A:99:7C:0C:49:BE:7B:B9:BE:93:0A:8B:22
X509v3 Authority Key Identifier:
keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:34:1d:c4:d3:26:15:31:29:21:e6:fd:b5:4c:32:4e:12:
cd:7d:62:89:94:e6:f7:60:47:cc:4e:aa:5d:f6:90:6d:0e:a4:
c5:0e:ba:54:74:15:34:72:d3:a8:f8:20:c0:c4:22:e3:e9:41:
54:12:b8:56:a5:ea:43:19:fb:91:01:ce:39:91:93:77:66:28:
6e:7e:ed:34:c9:71:9c:1a:fb:bc:56:5f:02:47:20:ae:3a:03:
36:47:d2:23:b7:07:eb:dd:c0:bc:b9:f0:4c:13:bf:eb:4b:0a:
4f:3c:d4:cc:45:8c:e3:fc:36:e2:cc:60:1f:0d:a8:77:5d:37:
e3:46:67:d2:c5:f7:34:f9:dd:9a:e8:fa:48:c7:d5:7b:89:94:
c9:ad:dc:5f:05:a8:f5:09:b5:90:51:51:72:46:11:a3:68:23:
5e:b0:57:84:62:e8:57:2d:61:ee:2e:b7:28:75:f7:6b:7f:f9:
75:b5:a7:7e:37:70:6c:c2:c2:00:c9:d8:ac:1a:56:0e:b5:df:
f0:37:d7:40:2f:00:55:ee:d1:1a:07:9b:08:17:fd:53:4f:bd:
4f:c5:aa:98:fa:9e:f2:27:90:18:5e:e7:90:b5:d4:0e:f0:a1:
54:87:32:a3:09:de:56:8b:2d:28:b0:5c:11:12:35:5d:7d:b5:
ad:ac:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:48 2026 by rpki-client