
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier: Ky3G6NEOulewSgAqodd5zta+j/m+eiiC6/UFb339OMQ=
Subject key identifier: 84:EE:B5:86:47:01:EB:51:0A:FD:89:C8:36:C3:51:41:15:E6:7F:96
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number: 01A8
Signing time: Fri 27 Mar 2026 03:36:31 +0000
Manifest this update: Fri 27 Mar 2026 03:36:30 +0000
Manifest next update: Fri 03 Apr 2026 03:36:30 +0000
Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: +dPYAIpCtH1blFc0YFzIZIIsY+8+6q9k5S0oGWfO4mg=)
2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: 8ztK9WaHhwxCqfAPSsy7g03jnTlBHy5ygH9vBUeQxBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Validity
Not Before: Mar 27 03:36:30 2026 GMT
Not After : Apr 3 03:36:30 2026 GMT
Subject: CN=69c5fb3f-b464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:e3:d5:ba:1b:57:ec:d1:82:c6:2e:af:82:
35:f2:28:a7:21:20:5c:e6:0f:80:fd:a9:49:7e:e7:
de:a5:e4:13:b2:ed:69:1a:09:42:12:1b:df:c9:8f:
ce:27:20:d1:98:44:cf:3a:80:08:cc:a8:14:8c:21:
a6:d4:75:34:b7:f9:c2:23:fe:e1:dd:c9:59:ec:44:
4c:1e:06:ae:46:7d:ce:99:84:39:98:80:7f:ad:4a:
a7:cb:fa:da:43:fd:f5:72:6a:4e:bc:b8:e3:23:6b:
5b:68:48:44:57:2d:47:28:62:24:5c:20:8b:3c:2b:
83:58:e2:e4:1a:bd:30:ea:50:30:7c:e2:0f:d3:5f:
22:81:7d:fc:ef:3f:99:ac:14:d2:4f:5a:78:11:a7:
d6:fc:db:b4:ad:c7:e2:a0:5c:1d:23:df:bd:e4:ab:
73:36:33:ff:b7:10:a4:da:98:f0:27:54:5a:e8:18:
0d:90:cc:f3:76:6b:3f:6a:c1:9d:92:49:15:c8:be:
c5:c8:85:bd:da:2d:27:aa:09:da:32:55:19:60:d8:
52:8a:38:10:56:a4:bb:a4:5e:2d:87:e9:97:c8:26:
be:b4:02:65:90:f9:b2:61:17:e9:14:1b:b9:5a:67:
c9:e8:d5:68:66:db:99:28:f9:7c:62:00:d4:3d:d2:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:B5:86:47:01:EB:51:0A:FD:89:C8:36:C3:51:41:15:E6:7F:96
X509v3 Authority Key Identifier:
keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ba:10:1c:60:21:e4:98:19:c5:35:22:76:d1:a7:9a:08:1f:
99:80:e2:74:d2:da:6b:db:60:c0:dd:b5:e0:2a:e7:a6:46:3c:
87:7c:e4:08:60:56:53:25:f6:82:68:0e:70:ad:7b:de:01:be:
5e:6d:8c:4b:96:b8:a6:80:e8:3b:c1:28:39:c6:89:e5:e8:de:
d6:dc:0c:c1:64:e2:d9:ae:63:84:42:d8:83:50:38:00:3b:4e:
92:e6:a7:d3:97:a7:7d:23:0e:46:89:5a:72:ab:99:ec:f1:21:
aa:23:4e:d8:e6:52:73:3f:6c:e9:68:12:a5:d6:0a:94:5b:48:
94:f0:6e:e2:36:34:a1:52:c9:df:58:6e:b7:82:10:90:d7:9a:
77:53:88:8b:70:d6:94:13:89:86:ed:41:29:cf:a3:bf:a4:da:
4a:8c:8a:76:41:21:a9:19:b2:2b:23:e2:9a:1a:90:d2:42:d4:
3b:53:c8:92:6b:06:07:3a:77:63:8e:54:0d:9d:f4:34:bf:20:
03:12:7b:98:71:d8:3f:10:1e:d3:15:31:0e:c6:de:15:b4:86:
f5:36:89:77:43:b5:4a:62:bb:8c:8d:cf:a7:4d:50:3d:56:94:
db:7f:ab:c6:7a:2b:00:92:85:32:8d:9d:84:69:f4:30:02:14:
4e:0c:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:02 2026 by rpki-client