
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File: DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier: WG8Y73ojL2CYMdmuB9e3AFzNrwMarX/7eItHoCX/m3g=
Subject key identifier: B7:81:7E:C4:6D:C5:F4:AB:83:60:61:FA:86:3F:21:BE:44:C6:C8:13
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number: 9C
Signing time: Thu 23 Jul 2026 09:11:16 +0000
Manifest this update: Thu 23 Jul 2026 09:11:15 +0000
Manifest next update: Thu 30 Jul 2026 09:11:15 +0000
Files and hashes: 1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: DO90zVPfmmV96k26LekcPSMj56kjP1QGEAAe8Het950=)
2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Validity
Not Before: Jul 23 09:11:15 2026 GMT
Not After : Jul 30 09:11:15 2026 GMT
Subject: CN=6a61dab4-30cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:b7:41:c8:1b:69:65:c2:11:2a:bb:42:1e:
39:80:ae:92:fa:1b:ff:97:11:3a:a1:0a:cf:c8:d9:
49:a3:48:56:0a:bc:0c:8e:9f:01:9b:4d:c5:f0:2b:
4b:91:83:7f:77:52:c8:f5:27:44:d2:86:27:6b:dc:
f4:95:e6:3c:6a:f0:5e:2a:d2:9b:c6:0d:37:fd:3f:
41:73:13:c0:f2:69:0d:0c:62:e9:3d:7d:68:86:60:
52:bb:1c:36:da:29:d0:ed:b1:65:c8:f7:5b:e0:0d:
50:ee:dd:38:11:8b:ea:74:c6:e6:21:f3:c7:97:18:
14:95:92:cd:e8:92:c7:20:a1:61:58:3f:88:b4:d7:
53:8b:84:70:3b:82:cf:5c:f6:85:79:c0:d7:13:33:
e5:b4:56:08:7d:69:ea:b0:cf:cf:f9:1d:e5:c4:b9:
b2:f9:d0:57:78:ab:44:22:e2:50:8e:4f:9a:f1:72:
bc:ff:e9:e5:d0:e6:1c:66:18:5d:1e:5b:44:3c:f0:
e2:53:63:9c:4e:8e:83:b1:67:bb:2e:ac:d3:8c:01:
f8:24:eb:92:0f:af:0d:1c:b8:cd:df:5d:1c:ce:ad:
47:33:a8:73:f8:e1:f8:ed:44:e8:eb:b1:3e:4e:1d:
4c:50:94:be:7d:4e:7d:57:74:b4:43:74:17:25:b3:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:7E:C4:6D:C5:F4:AB:83:60:61:FA:86:3F:21:BE:44:C6:C8:13
X509v3 Authority Key Identifier:
keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a1:18:c5:8b:6f:f7:5a:28:72:ae:cb:fa:9e:5d:16:af:42:
db:81:71:ea:48:a0:78:ac:7b:a8:dd:e0:ca:e6:58:e8:a0:57:
68:63:c2:0d:88:ce:af:84:2f:d2:d6:30:11:58:37:3a:2d:7a:
c2:6c:84:6d:d7:ab:d0:39:00:96:d8:7e:db:b3:ac:1c:26:60:
7a:d2:8e:b9:b1:60:1b:6d:f3:4a:57:9b:13:65:a0:a1:39:aa:
c8:4b:58:db:3f:33:af:14:23:fd:8d:12:52:01:2f:0e:a6:e6:
c5:82:31:62:b0:4b:30:ec:86:58:bd:e7:6d:99:16:92:1a:ee:
0d:a9:d5:10:5f:a2:f0:6d:9c:31:7e:fc:cc:2c:5c:eb:42:c1:
b2:59:10:20:c4:8a:1b:c8:88:03:a8:35:81:03:62:28:da:0c:
ba:4f:db:75:c5:af:10:9a:84:cd:02:ad:9b:0a:05:ad:15:b5:
e8:b3:ec:ef:26:f3:aa:78:8f:b5:01:92:8d:c2:6b:96:e3:8b:
30:a6:b3:ec:81:46:44:9c:60:63:43:3b:3b:4e:49:0a:e8:28:
07:89:7d:e0:c6:a9:4f:db:16:ce:ed:5f:b1:ae:d7:fc:06:a9:
d3:8e:c1:35:f9:3e:2c:e9:da:38:ac:0c:cf:88:f7:5d:1a:1d:
3a:c8:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:33:59 2026 by rpki-client