
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier: IXEHLVlfzK4jphQmg6DcNEIEwb4Vcv2ntsoX1jobRZA=
Subject key identifier: 0A:36:EB:0D:01:85:16:53:D1:D6:63:14:17:35:1E:E4:3D:15:81:D0
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number: 028F
Signing time: Sun 05 Apr 2026 01:17:44 +0000
Manifest this update: Sun 05 Apr 2026 01:17:44 +0000
Manifest next update: Sun 12 Apr 2026 01:17:44 +0000
Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: HPou0zL92cGVFriq2amJ6vWi8bkCCp/CLAYrLnqyTQM=)
2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Validity
Not Before: Apr 5 01:17:44 2026 GMT
Not After : Apr 12 01:17:44 2026 GMT
Subject: CN=69d1b838-2c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:bc:f0:9c:0a:69:bf:a3:a6:91:f0:58:aa:
38:b7:f2:44:55:fe:35:3e:b5:a4:8a:ff:44:48:59:
1a:5e:39:21:28:21:de:e3:e9:78:24:cb:68:8b:ae:
96:05:6a:f2:a0:9d:11:97:0a:77:43:90:76:43:51:
b1:53:64:8b:29:3c:ad:62:d4:42:4b:7a:c4:d6:5d:
4a:78:38:0c:e1:dd:64:da:52:c9:0a:16:42:8b:86:
0e:1d:91:6d:77:4b:b2:c4:35:6a:31:8f:1a:28:a6:
f4:6f:56:95:1d:bf:1d:22:d7:4b:b6:44:7b:0b:f0:
8e:81:37:af:b7:c1:21:4f:80:e8:0e:40:ab:68:6f:
61:e3:9e:f6:b4:d4:99:fb:46:da:67:93:9b:9d:cd:
24:42:99:f9:09:24:34:0e:82:1c:6b:c7:6e:6a:c4:
1c:77:b5:74:86:fe:b1:2f:4f:f5:d9:cf:62:60:f8:
00:a4:bd:de:1b:dc:6d:a3:1d:08:6a:d7:4d:92:ea:
1e:84:3f:3b:a8:9b:ba:b0:57:4e:17:7b:41:f6:9f:
12:fe:5c:fe:f0:59:f5:8c:ee:be:cc:7a:42:5a:a6:
8f:60:51:7e:d7:16:e6:2e:1b:13:4b:37:dd:d2:67:
fb:c7:db:37:ba:ba:26:fd:91:52:b5:80:ff:09:9c:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:EB:0D:01:85:16:53:D1:D6:63:14:17:35:1E:E4:3D:15:81:D0
X509v3 Authority Key Identifier:
keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:24:53:ac:2c:81:90:cb:f5:32:e3:bd:3c:31:8c:a7:7b:79:
76:c8:66:4c:b0:4e:f0:89:7f:ca:8d:52:97:f7:25:b4:6b:bd:
b7:2a:5d:76:7f:38:e8:e9:5e:ad:af:0e:0c:fc:47:1d:65:6a:
e4:56:84:3a:75:91:bb:c2:18:fe:28:3e:e9:1d:36:97:31:f9:
5d:2d:ef:13:5f:7f:6c:10:c2:5a:2e:51:0f:63:da:92:66:0b:
b9:c3:4a:fc:49:d9:0f:05:5d:bf:77:9e:9f:79:91:bc:61:e7:
fa:32:49:8b:a0:9f:69:e8:b9:f9:35:d3:7e:35:64:e9:27:b1:
f3:7a:93:12:ec:04:c2:8e:eb:f6:31:da:4b:5d:71:06:0f:05:
df:e3:51:49:a3:f1:f0:f1:a3:70:45:38:3f:33:36:64:9b:3f:
25:f2:b7:34:d8:b4:5e:e6:be:05:cf:3f:77:ff:0e:40:f5:46:
93:1d:c8:b1:d1:9b:b5:05:f5:43:ab:24:80:9c:0e:a0:d4:97:
83:ef:4e:46:0a:05:6c:36:f3:d0:e2:0b:00:68:f1:32:3d:5e:
a9:9f:cd:d2:40:10:bf:a3:a0:29:f8:d1:b4:77:7c:7f:04:c1:
f7:de:2d:77:a5:fb:ff:d9:4d:a2:f3:f5:2e:02:e5:86:d2:a5:
4b:bf:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:29 2026 by rpki-client