
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: 5k/jpbPd2MPdjUnF+Ft8+hc72E9A+0mtRd7K9I7kfmM=
Subject key identifier: BC:87:1A:A3:2B:44:5F:F0:48:C0:F1:DD:F2:3A:8D:85:AA:62:3B:46
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 0659
Signing time: Thu 16 Jul 2026 23:11:11 +0000
Manifest this update: Thu 16 Jul 2026 23:11:10 +0000
Manifest next update: Thu 23 Jul 2026 23:11:10 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: TFnFL/0sA3XeVc4XtcaZrhr+K1VbIyOLNG9OoI1PIM4=)
2: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
3: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
4: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Jul 16 23:11:10 2026 GMT
Not After : Jul 23 23:11:10 2026 GMT
Subject: CN=6a59650f-858b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:41:1a:f8:b7:69:16:db:c9:50:b2:34:a4:
b0:5a:31:c9:ac:14:b3:6e:9f:ee:1b:e0:5f:3f:06:
5a:04:4e:af:a9:f8:28:08:b6:4a:53:e9:18:81:de:
ac:e3:b6:73:21:3e:be:5a:29:af:d9:23:51:b2:8a:
61:30:06:4d:e1:c6:87:7d:25:f6:0f:c4:b7:54:4f:
b8:b4:93:17:b1:7a:37:12:96:80:14:0a:72:87:95:
13:e7:be:de:65:ee:d1:f6:36:5b:32:f7:f7:62:21:
2a:06:47:14:35:b8:f9:0b:63:17:54:60:0c:b5:1e:
a7:85:04:d9:32:11:b6:81:4e:a5:26:76:ad:69:50:
da:42:43:cf:37:c5:c6:f0:43:2e:a2:f5:7b:48:b8:
fb:9a:9d:59:d0:fe:bc:ee:25:09:a9:aa:d9:88:20:
db:82:47:67:35:7d:45:be:f1:08:ce:f9:d9:01:6d:
b7:54:f7:7b:56:06:e3:30:80:f6:a5:55:d7:35:55:
c2:8e:5a:2c:84:a9:47:78:dd:26:53:5f:e4:2c:0f:
80:6f:40:40:df:4b:0b:4f:95:57:ee:b1:a0:c8:04:
ee:99:eb:a6:4f:4a:1a:16:19:3b:16:62:c9:eb:9b:
b8:61:7a:b6:bc:8c:f0:52:e2:80:ba:ae:44:68:2c:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:1A:A3:2B:44:5F:F0:48:C0:F1:DD:F2:3A:8D:85:AA:62:3B:46
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:80:0b:83:9b:ad:17:21:c5:66:a2:73:5a:ad:c6:19:1a:
c0:b9:42:d1:d8:57:26:26:a4:6f:8a:55:7d:06:da:a8:18:b9:
2b:0a:f1:f3:5b:88:43:78:7e:65:25:dc:8f:0b:6b:45:54:47:
8b:34:6e:5d:8f:22:12:d4:0c:c9:0e:d3:ab:98:0c:c5:d1:4d:
00:0c:d4:93:3a:0d:54:4d:cc:d1:c0:bb:16:68:bb:e4:45:a0:
92:38:e7:7f:ad:ee:38:e4:b5:5d:b7:7a:5d:26:03:bc:4d:d0:
bc:8c:90:01:f4:27:45:36:f1:af:a9:53:90:0c:84:d4:2f:45:
dd:f2:c3:e6:f4:7f:b2:e9:8a:75:3d:61:ce:db:99:38:30:f7:
2d:a0:c8:9f:14:9a:48:ff:d2:73:b9:3f:88:0c:9e:61:9d:e1:
1f:28:d3:cd:4e:52:62:e7:4c:d3:2d:39:83:2f:15:a6:6b:03:
5f:0b:c6:06:b7:25:f8:b5:15:91:ff:5c:8e:84:50:93:93:94:
44:8e:b7:b8:ac:a7:cd:42:15:b4:10:95:cf:fd:60:aa:64:0e:
9c:64:ff:ea:41:b6:ea:42:3d:b5:ca:03:a9:76:d0:ef:9d:34:
d8:4f:6e:b4:72:1d:f1:5c:ee:bd:dd:f0:02:1e:ea:73:d3:b7:
4b:50:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:29:52 2026 by rpki-client