
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json)
Hash identifier: RQStsuGL/zXaZmCV5SsNIazYjGw96CwfxaMNkyTf6i0=
Subject key identifier: E1:D7:A0:5A:77:FB:44:B4:C4:AD:2A:47:3F:85:38:82:33:E1:D3:27
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
Manifest number: 31
Signing time: Tue 03 Mar 2026 06:44:12 +0000
Manifest this update: Tue 03 Mar 2026 06:44:12 +0000
Manifest next update: Tue 10 Mar 2026 06:44:12 +0000
Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: SwbGI08CxHXN+XyPHijPnUFRDz46OEvPfnTtGyUky44=)
2: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=)
3: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Mar 3 06:44:12 2026 GMT
Not After : Mar 10 06:44:12 2026 GMT
Subject: CN=69a6833c-7bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d2:55:59:37:79:23:76:c6:f2:1e:e3:99:91:
c5:56:de:92:06:59:e7:4b:4c:f2:d3:1f:6d:e9:e9:
c5:e0:47:44:75:86:5a:ef:52:3c:87:b7:66:c1:62:
73:4a:4d:d0:5d:06:17:37:a0:29:b8:b3:ab:39:21:
50:d1:45:0a:5c:3c:b6:71:8d:81:8e:32:f4:c1:74:
38:8a:35:68:e1:e0:4a:c9:a7:a5:50:e9:d3:ee:94:
d2:85:8f:6e:c9:d1:ec:46:f2:6a:7e:9b:0b:95:cc:
fc:43:57:7e:89:a7:02:60:bd:0e:3d:08:23:92:29:
da:80:6e:74:b1:23:9e:50:d0:70:8d:4c:4d:a3:f6:
45:87:e8:58:83:e5:fe:9b:2f:89:9b:26:cb:73:e5:
69:2b:50:48:8d:e6:b5:18:9d:c9:c3:37:e0:56:b2:
9c:42:16:9f:a4:9d:4d:a2:ad:dc:75:7f:74:6d:68:
22:e9:ec:fe:e6:ac:8f:33:e1:e5:b3:73:bc:53:49:
1d:09:06:18:2d:63:f7:04:5c:b1:f9:5d:51:99:ed:
f3:06:cc:ec:c2:f2:76:4b:3b:41:bf:6d:78:6f:b2:
d9:95:65:13:a5:38:16:22:e4:ec:1b:ea:d7:42:e6:
f0:83:e5:5c:b8:41:63:0d:49:40:c0:8f:d2:eb:d5:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:A0:5A:77:FB:44:B4:C4:AD:2A:47:3F:85:38:82:33:E1:D3:27
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:10:44:a9:a0:55:05:a8:ee:f4:42:ee:23:d9:c8:05:8f:
69:19:3b:55:ac:81:83:6e:23:4d:5b:86:5f:82:c1:82:8f:29:
a1:db:3f:82:1b:0a:c4:1c:63:4a:38:23:a8:cd:fa:07:5f:f0:
c7:3d:4a:f0:91:c2:97:ae:72:59:6f:af:96:1d:74:01:96:00:
9b:e4:b3:45:5e:fe:c1:d7:94:88:9d:e2:8f:5c:07:0c:5a:ba:
d9:5b:f0:af:fc:cf:4d:bd:14:ad:02:64:64:64:e3:a6:7f:2b:
de:65:d9:10:2a:75:ee:92:a2:a7:a9:53:43:78:ae:60:a2:c6:
01:ce:e5:d8:08:57:2f:53:e9:f5:f1:c0:3d:ac:06:1d:30:67:
a7:17:9a:8b:f0:7b:ae:58:f5:6c:20:9d:6c:e2:ac:db:93:2d:
77:c5:91:a1:80:f2:fa:50:af:35:ce:45:22:b2:21:d8:32:6f:
89:d1:4d:b9:e5:80:32:35:11:02:a9:f7:98:19:b8:09:c2:3a:
a7:71:0f:17:7a:e7:df:90:42:6c:ba:43:e2:0d:8f:cf:ee:6c:
e3:48:f4:6d:39:8e:a1:e2:29:30:a0:02:4d:b9:33:00:2e:4a:
ff:2c:b0:2d:89:20:66:5a:5a:60:46:8e:89:52:f1:fa:46:de:
0d:cb:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:42 2026 by rpki-client