
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: Q/sBtH+/1Pt/PPAoYHBSD+TpnA3ZN40m4Wwal/GYPug=
Subject key identifier: D3:64:32:24:82:49:D0:E4:25:40:C9:C4:0F:33:F2:D4:E8:98:BF:5C
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 063C
Signing time: Wed 20 May 2026 22:50:56 +0000
Manifest this update: Wed 20 May 2026 22:50:56 +0000
Manifest next update: Wed 27 May 2026 22:50:56 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: f2n9gXa/yYeu3drXFKAFGTFySdWVvIMgVvVcHWMixDg=)
2: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
3: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
4: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: May 20 22:50:56 2026 GMT
Not After : May 27 22:50:56 2026 GMT
Subject: CN=6a0e3ad0-4e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:ce:5d:b2:68:75:87:7a:40:9f:66:fc:28:
c7:fc:b2:fa:76:d1:b1:5e:21:7e:c3:9b:a5:1b:64:
ce:07:13:27:85:9a:ae:44:31:38:3f:d7:3e:f1:64:
2e:04:cc:ff:32:71:95:6d:a0:94:b0:3a:c4:15:69:
88:e4:6f:bb:e7:7a:86:14:e7:4b:c0:25:9b:e8:15:
cd:cc:2c:ac:43:12:91:e8:8e:ea:62:1f:8d:e7:6a:
4e:14:33:dc:35:30:3d:69:11:e6:e9:62:be:79:fb:
35:95:f9:d4:5b:1a:ae:5e:0f:12:2d:4e:f0:dd:f5:
b1:b8:54:f4:dc:97:f7:31:f9:3b:44:92:1a:7e:36:
de:23:16:46:ec:35:8b:13:41:f4:56:05:04:41:2d:
db:44:f8:72:c6:be:25:75:20:b9:ee:00:ca:9a:84:
75:74:eb:d7:c7:f7:e9:85:10:8a:d9:61:fe:46:0f:
61:43:44:14:5e:ee:ae:62:08:93:4f:53:48:db:93:
28:3c:7d:b0:66:c3:65:34:15:f2:47:1a:f3:fd:d9:
b8:ef:99:a2:4b:88:bb:9d:c5:21:38:90:2f:a5:76:
e4:67:03:31:f7:54:04:b3:f6:ff:36:fc:e9:8c:59:
3b:b7:c0:14:02:7b:b9:a6:ce:dd:14:11:1d:f6:e2:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:32:24:82:49:D0:E4:25:40:C9:C4:0F:33:F2:D4:E8:98:BF:5C
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:90:28:53:c9:8b:fe:38:c3:99:db:fb:e9:d6:de:17:06:
6b:1e:c6:64:b9:78:9b:04:d7:8b:ce:31:df:82:ec:e9:ab:02:
4d:99:52:10:7b:b2:8f:0a:f5:fa:2e:23:19:f9:c6:53:33:a0:
e8:2a:31:41:a1:5a:00:d9:72:1a:17:f0:ce:a8:c8:d2:a6:c6:
2b:f2:56:90:bc:ce:86:48:96:6e:63:6c:44:5b:d7:b3:cb:fc:
43:42:92:dc:d0:6b:77:5a:64:ca:f9:c3:d2:69:6e:3a:70:45:
c2:70:4f:3b:7d:a5:3d:35:2c:f9:0c:2a:d6:85:3b:90:fa:fe:
f6:1a:d9:b9:80:b6:68:70:8c:73:47:ce:8e:69:9f:42:1f:f9:
91:ca:73:66:0c:61:4f:e7:c5:85:af:d4:cb:6e:d8:e2:f2:b8:
de:df:b6:5a:9c:0e:64:85:d7:91:19:01:22:c2:49:ae:c7:fb:
60:ed:84:bf:95:33:a0:b2:8b:bc:da:57:17:fa:2f:1c:75:d1:
46:7f:14:ab:da:39:e1:75:6f:fa:fa:05:02:6b:3a:d0:d2:fa:
56:94:dd:c6:25:d4:53:18:06:2d:45:1b:4e:33:86:63:35:57:
eb:77:cd:ff:cf:d3:76:b3:62:e6:e6:55:91:ce:e6:b4:34:b2:
22:96:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:25:02 2026 by rpki-client