
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json)
Hash identifier: 8q8vQ0UAlaUkIs/m3yV9DUbtGlTqqyNG9izbqOVRKjY=
Subject key identifier: 7B:E2:D3:D2:14:4B:7A:B5:18:83:0A:C9:BC:01:B3:BD:3E:63:3A:6E
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
Manifest number: 02A2
Signing time: Fri 27 Mar 2026 01:14:15 +0000
Manifest this update: Fri 27 Mar 2026 01:14:15 +0000
Manifest next update: Fri 03 Apr 2026 01:14:15 +0000
Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: hfgK8n1r+ZAd4aiCic92B1i2c6XEjNnyv8XDRwvtUwM=)
2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: J9UUSEwKqauquMmKvfncZPjjMkXwX/cwJi3gEdCy2os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Validity
Not Before: Mar 27 01:14:15 2026 GMT
Not After : Apr 3 01:14:15 2026 GMT
Subject: CN=69c5d9e7-28a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:58:fb:13:39:78:1e:b7:ab:7e:67:29:35:
69:5a:b3:ec:51:7a:66:a4:1e:26:4f:cf:7e:38:f3:
b8:3b:96:56:25:55:b5:80:b5:17:25:4e:28:bb:48:
39:5d:13:84:61:d6:cc:9a:60:ed:3b:7f:41:37:1e:
b6:79:ef:f4:41:48:39:20:f7:c2:c8:a0:11:d5:0e:
fb:28:d3:7e:4f:19:8b:d8:40:d2:28:8a:a2:70:17:
24:3b:94:51:b4:92:bc:82:81:ea:ae:96:0e:ef:33:
15:6f:02:03:a3:e9:10:ef:ef:7b:fc:08:46:a2:13:
9d:7a:66:1e:dc:60:00:2b:4c:9e:3c:34:0f:33:cf:
28:74:8a:71:95:67:46:45:cc:bc:5e:2a:48:a8:3c:
ea:f9:55:24:71:b7:8c:d7:c9:6c:69:07:6f:e1:24:
b5:71:54:de:7b:c7:c0:31:7e:c7:1f:64:24:41:de:
23:ba:d0:ca:58:03:62:5a:d3:c6:3b:c0:86:48:4f:
49:16:09:a1:64:38:d7:81:9c:6b:74:9f:c5:5f:fd:
f2:4b:01:73:88:cb:42:83:79:83:5c:c5:18:29:aa:
8f:5f:c8:00:84:59:f4:ea:f3:11:03:6d:0f:d1:0f:
c3:7f:1c:74:d3:75:1e:af:3b:7f:8f:61:29:4b:82:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:D3:D2:14:4B:7A:B5:18:83:0A:C9:BC:01:B3:BD:3E:63:3A:6E
X509v3 Authority Key Identifier:
keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dd:86:07:a4:0f:f0:2b:94:e4:3a:2b:1a:ef:a8:67:4b:a5:
33:54:a4:c7:9f:64:08:8a:29:f8:c5:85:02:88:b9:52:1c:6f:
96:33:ec:c1:64:c3:fa:03:69:51:ee:40:41:b3:53:f5:02:61:
c1:01:af:c0:1e:84:fb:cb:3e:b3:2b:71:ae:ab:ac:a0:d3:2c:
e2:60:7e:40:73:1d:3c:4c:b1:4f:4e:58:49:9e:76:37:b5:55:
78:da:52:56:75:03:c5:0c:87:15:65:12:4d:33:50:17:6a:a8:
4b:c0:ad:9d:56:9f:0e:5b:0e:94:c4:d6:1a:be:90:19:b0:d7:
ef:0b:2a:94:dd:bd:98:8f:51:70:54:24:ce:41:75:28:f0:34:
90:aa:cc:32:81:86:cc:db:58:df:a3:23:a5:43:ea:91:4b:8a:
82:0d:a1:89:e4:d0:52:6f:eb:2d:da:c8:e9:cb:60:25:61:df:
8b:bb:ad:63:2d:0b:db:ee:77:d2:06:89:29:b4:81:16:32:c6:
d2:b9:2b:52:40:ff:df:c2:29:a4:88:fe:44:72:88:7f:ec:fb:
2f:87:d5:df:cb:df:75:65:30:be:18:13:01:0f:15:aa:db:cc:
91:fe:4b:e7:0d:93:59:b3:84:64:ad:e9:00:49:b3:23:c2:0e:
5b:8b:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:33 2026 by rpki-client