
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier: EyeP0SZMCb0iBs4C1x2mhg/73gz2Ni3i8IoRZqrsgus=
Subject key identifier: AB:54:23:47:C6:D9:77:FC:C0:E1:AC:49:39:74:D0:8E:4E:95:64:9E
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number: 01D4
Signing time: Fri 09 Oct 2026 04:16:27 +0000
Manifest this update: Fri 09 Oct 2026 04:16:26 +0000
Manifest next update: Fri 16 Oct 2026 04:16:26 +0000
Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: 1o5uvcLk2DZiMZUaI+xPmCHObfz0g+Igb/6AJOgEQgc=)
2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: zvV0e48dwD3IVwxrvC+3E1d2bP8roEkFmj5ckF5v3Ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
Validity
Not Before: Oct 9 04:16:26 2026 GMT
Not After : Oct 16 04:16:26 2026 GMT
Subject: CN=6ac86a9b-402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3a:06:7e:a3:24:1d:36:de:0d:f6:30:af:3b:
04:64:30:38:1e:bf:03:8c:3d:be:06:d1:c6:69:43:
6e:e8:79:60:4e:2e:5f:47:f0:16:c4:40:fd:65:69:
9b:db:4c:ac:84:a7:4f:65:d9:c8:01:93:e7:27:bf:
f4:c6:d4:53:1a:9d:95:5b:12:2a:57:6c:af:94:35:
a7:a0:66:6b:d9:45:d1:9f:d5:be:86:3c:56:54:08:
9b:56:12:34:fa:bc:c2:1f:c2:f8:e1:db:c8:e7:da:
af:f4:c1:d3:5b:a3:6d:c9:46:57:33:c1:4f:5b:56:
79:ea:d5:86:f2:50:f2:f1:5c:db:29:63:1a:20:77:
fe:0f:8c:32:bf:26:ef:fa:dc:06:31:4e:69:4b:93:
c2:bc:11:0d:71:a6:9a:a7:af:48:b9:b4:21:1d:b4:
ee:04:ec:4c:e8:08:c9:85:d7:e2:43:c0:7b:ed:11:
cb:43:6d:e9:20:d0:3a:a1:ef:45:e3:86:da:44:40:
b4:4e:e4:f6:d8:35:cd:c5:91:10:7c:18:3b:b2:ee:
27:7d:f3:33:28:17:68:db:e1:a8:22:7b:72:68:d7:
5e:ab:65:60:ba:e6:65:bb:b1:8a:e7:97:9f:82:ab:
e3:a4:74:4f:f2:d6:28:f1:d3:5d:9a:75:71:10:d8:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:23:47:C6:D9:77:FC:C0:E1:AC:49:39:74:D0:8E:4E:95:64:9E
X509v3 Authority Key Identifier:
keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:80:e6:1a:31:9a:19:38:61:ec:eb:49:72:f5:f6:dd:86:
05:12:37:02:b5:26:ec:79:9c:00:9c:7a:96:5d:90:1e:f2:65:
8c:94:0f:6e:fe:fd:e3:c8:46:00:32:16:a3:34:9a:5c:5a:df:
c8:f1:cb:0e:e1:67:ff:a1:10:b3:49:e2:82:1c:2e:1e:90:f4:
59:ca:3c:e1:7b:74:b2:7a:ef:40:b3:ea:25:f2:74:af:0f:98:
b0:62:57:aa:47:06:f6:5e:3a:ce:ed:7c:b1:3a:72:cd:41:ed:
69:2d:23:26:01:5f:54:ff:57:55:5c:9f:21:b4:2f:65:dc:be:
00:ff:b3:68:33:22:e8:81:00:a7:d2:47:89:4f:44:6b:e6:a3:
cc:85:a3:1c:d3:7d:85:a5:12:59:52:6a:d3:31:ae:04:11:2b:
19:8c:e5:fd:21:19:9a:21:a6:e8:98:48:99:55:50:22:22:d8:
0e:2a:50:53:1f:55:89:39:48:b3:e2:43:8e:f1:e8:de:c4:c6:
c5:86:c3:50:1f:15:da:01:79:73:e9:53:15:de:3c:6c:bc:e5:
11:5d:1b:43:57:db:22:85:91:0b:36:7a:06:d6:77:08:a9:42:
ed:1d:76:1b:76:ee:61:5d:5c:1f:1e:da:18:65:fa:59:b2:29:
27:36:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:07 2026 by rpki-client