
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File: DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier: L9y+btlFih9LOhHBi3Yvvs9yxg9isPvfUsqog0bbSbs=
Subject key identifier: 21:D2:5A:FA:73:2D:17:C1:23:DE:A3:7B:ED:21:6E:76:CD:C6:1E:59
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number: EF
Signing time: Sun 05 Apr 2026 04:55:05 +0000
Manifest this update: Sun 05 Apr 2026 04:55:04 +0000
Manifest next update: Sun 12 Apr 2026 04:55:04 +0000
Files and hashes: 1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: CxiODuWvAmBK3NELCkpvI3l8ievkg2i0u7VVz4/6qRs=)
2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Validity
Not Before: Apr 5 04:55:04 2026 GMT
Not After : Apr 12 04:55:04 2026 GMT
Subject: CN=69d1eb28-9af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:6e:13:76:f3:f1:5f:04:28:ca:95:f2:30:
9a:11:ad:78:c7:03:77:50:09:08:69:b7:5c:47:87:
f8:63:c6:6c:b7:7f:c3:fb:a6:57:5a:68:19:da:40:
f4:ed:ef:5d:8c:50:46:9c:51:05:24:31:ee:be:84:
71:ab:ca:e4:1d:57:4b:3d:30:a6:fa:2f:23:3c:0b:
89:f3:92:c6:da:93:94:46:8d:65:33:96:69:ce:4d:
aa:13:92:09:d7:5c:20:25:8e:30:8a:c3:49:2c:8b:
1e:79:d0:8f:0f:ce:bc:e2:d5:97:f1:ef:77:f9:fc:
8f:33:bb:01:73:31:ac:0b:4c:6f:9f:6c:e1:6b:a2:
9d:ff:a4:47:7f:97:20:97:db:f9:c6:14:54:b5:ff:
1a:c2:97:98:60:26:98:dc:2a:11:39:a0:03:f8:a1:
b1:37:7c:65:2c:7c:0d:a1:12:de:7b:48:10:ef:30:
63:88:73:4b:e9:6e:1b:4e:94:b4:59:e2:43:71:b5:
2e:81:52:e3:e8:04:14:b8:70:fb:d1:ee:ff:f7:4a:
b9:7c:13:68:d4:8f:82:76:1f:90:a7:4c:36:37:d5:
6f:8f:38:07:0b:09:8a:dd:35:21:ad:d5:07:78:b3:
1a:62:00:b8:41:7b:5a:6e:b6:a2:53:4e:64:29:8a:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:5A:FA:73:2D:17:C1:23:DE:A3:7B:ED:21:6E:76:CD:C6:1E:59
X509v3 Authority Key Identifier:
keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:0f:37:5a:38:6b:d9:4e:8e:1c:0e:43:2c:58:5b:f7:f0:01:
61:b7:2b:e6:50:2e:20:65:dd:f7:a1:da:87:7a:76:5b:83:35:
ad:e2:2a:22:bb:6c:84:28:56:00:99:a9:99:1a:bf:72:11:f5:
5c:05:8a:6a:70:dc:69:c9:b3:8f:bb:66:1b:8d:bf:e6:5f:8d:
ec:74:da:68:4a:bc:bf:1f:bc:a8:05:3f:db:d3:46:cc:c3:3d:
9b:d6:ad:f2:76:9f:46:7d:8a:82:e1:d1:cf:bb:04:44:66:b1:
02:aa:11:3c:a5:0d:89:fb:d1:75:30:8a:1d:1e:5e:60:d8:9f:
25:67:40:4a:6b:8c:a7:e6:76:c3:6f:54:65:28:e5:b5:67:ec:
80:13:82:ca:7f:a1:83:bb:cd:1c:43:e5:40:ea:c9:f1:7e:07:
b6:75:76:20:b3:a9:41:86:26:5d:32:44:70:da:94:10:93:a6:
2f:38:54:91:5c:de:09:3d:03:3b:42:ba:90:34:a5:c3:01:b4:
60:ae:10:6e:f9:a5:cf:46:10:91:1d:d0:5a:65:b4:b1:80:ae:
47:bc:f7:1d:87:d5:3d:85:ee:56:45:6b:62:7f:ad:13:e1:89:
f6:97:9e:27:df:9c:d3:60:fe:4e:fc:b3:dc:c6:95:a1:5d:f2:
1a:a8:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:35 2026 by rpki-client