
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier: NRIfFvnDYBnH9z2mpRxQl5nYT9jtB9bSw80/coGuuNk=
Subject key identifier: 99:2F:16:63:03:31:A2:6E:A6:08:0A:78:82:F3:05:BD:53:40:50:55
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number: 0811
Signing time: Sat 10 Oct 2026 21:17:35 +0000
Manifest this update: Sat 10 Oct 2026 21:17:34 +0000
Manifest next update: Sat 17 Oct 2026 21:17:34 +0000
Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: TEg4BOW/flpgu6zJc7vhzpq4fcAay2DjgHU7VE9aGNk=)
2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: XmHPjbOfHoD1pV3ANoGj1UOp5hoQSRI4UyhfbzC32OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Validity
Not Before: Oct 10 21:17:34 2026 GMT
Not After : Oct 17 21:17:34 2026 GMT
Subject: CN=6acaab6e-52fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:75:c5:a7:21:24:a2:8f:5a:bf:83:89:6e:
cd:09:18:94:01:fe:13:4e:e1:23:8a:9c:b3:25:a1:
fe:a4:8d:32:49:df:95:bc:b3:ae:fe:58:69:63:b3:
04:f0:10:12:b7:11:26:55:4a:cc:a6:4f:88:d1:34:
55:b5:83:52:6a:2f:3b:12:47:39:1f:34:50:35:e5:
ce:29:b1:e1:1f:19:c5:69:b4:3c:a7:48:85:26:2b:
28:ed:fa:7d:a5:d6:47:8c:0a:d0:9b:c3:c9:4b:7d:
05:d3:39:91:34:d9:4d:ae:bf:53:91:7b:45:da:60:
a8:01:7e:f8:e4:d1:92:0d:0e:b6:23:f1:48:f7:37:
75:b0:80:f2:5c:25:67:46:4c:c2:1e:cd:5d:c4:c7:
fa:10:0e:70:5e:ab:bd:d2:01:17:e7:08:9f:dc:30:
9b:d0:06:83:55:dc:87:92:0d:9d:b7:f3:25:1c:9e:
4a:18:01:2b:c8:3e:be:6e:2c:7c:cb:86:ff:10:7b:
a6:c9:e5:47:ed:5c:1a:1a:75:ef:13:e5:14:7e:b4:
94:7a:4a:25:6f:6c:e0:0a:e8:af:1e:cc:2f:03:62:
f3:72:45:f7:a0:7f:97:d0:16:a4:35:e2:d3:fc:85:
48:7f:90:41:ed:7d:58:67:6a:ce:a6:6b:b4:1d:6a:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:16:63:03:31:A2:6E:A6:08:0A:78:82:F3:05:BD:53:40:50:55
X509v3 Authority Key Identifier:
keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:26:36:b1:b0:b2:cf:8c:d3:85:9a:36:bd:da:52:df:41:42:
80:33:82:10:d6:29:99:cc:cf:bc:7b:a2:61:17:66:09:aa:ca:
99:b6:39:d8:ab:d4:dd:1b:29:e2:9e:4a:50:40:d7:e3:fb:37:
d0:3c:fe:a9:b0:61:11:12:b2:1b:88:01:c1:4f:df:07:b8:9a:
97:b3:fb:e7:d1:b9:c4:f9:d3:7b:b1:ec:d4:03:02:6e:af:ec:
96:08:91:86:ff:9a:30:a3:9e:b1:29:b5:c3:42:9b:8b:fa:2f:
17:0e:8a:45:5f:8c:cb:19:de:f2:31:50:09:1e:c7:0e:3a:da:
10:1d:1a:f3:4e:ac:93:07:18:5e:2f:3a:33:e2:c1:e1:95:e7:
82:5f:ae:41:66:4d:f1:b8:30:79:a9:51:9d:db:90:3e:bd:35:
94:69:15:53:fd:31:8b:50:8d:31:a0:77:e5:71:e0:b7:99:2f:
0a:db:b0:59:9e:b8:04:4c:b2:e3:f1:87:d1:fa:10:66:3a:83:
cd:bf:3f:a9:ce:6f:5f:25:d6:3e:85:16:2f:76:a8:c5:75:fe:
fa:56:f8:55:c1:23:63:12:8f:f6:56:96:ed:38:d5:49:e1:6e:
34:d1:cb:00:2c:2c:6e:9e:20:c8:6b:aa:7f:26:e8:a8:6d:ff:
4b:97:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:31 2026 by rpki-client