
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: MDV8YFDK6WTel3wsfRyRBGF2aF21zNXy6eYadrE2LQ4=
Subject key identifier: 7B:D6:65:43:16:40:04:D5:AA:E5:19:36:5C:D4:52:9C:0A:21:F9:0C
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 06A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 068C
Signing time: Sat 24 Oct 2026 22:32:14 +0000
Manifest this update: Sat 24 Oct 2026 22:32:14 +0000
Manifest next update: Sat 31 Oct 2026 22:32:14 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: muARTJ3/3MA6dZ3RkPiGoSzFw3ZNwOVpsy+1N378rxs=)
2: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
4: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Oct 24 22:32:14 2026 GMT
Not After : Oct 31 22:32:14 2026 GMT
Subject: CN=6add31ee-d608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:52:e8:f8:fe:66:e3:90:5c:48:19:06:73:
e1:f8:c2:ba:c4:bf:71:f0:62:93:36:16:18:75:8e:
e9:34:31:4e:e1:0e:61:a7:87:66:b1:ef:40:08:f9:
71:47:40:e8:9f:3c:b7:ae:b2:75:61:d0:73:02:e6:
88:43:61:a0:6f:ad:a7:fb:27:fb:56:f4:c8:f0:75:
43:67:61:45:06:59:2c:92:5f:ab:41:11:f5:12:63:
c4:38:2b:1c:40:bd:0f:c1:29:c8:d7:1b:e9:a4:f4:
6f:55:e4:42:f5:33:88:31:65:00:06:79:df:ba:33:
bc:95:75:ef:98:a5:04:32:7f:0e:1a:a9:b6:be:ef:
af:a9:3e:e5:fe:9a:57:a6:a5:73:ff:5a:30:4d:37:
10:cf:b2:eb:56:6b:bf:96:3f:9b:71:e8:e6:18:31:
4b:03:fb:25:a5:d7:36:17:12:7f:4f:d0:76:2d:01:
f2:d6:7c:a2:90:e0:ee:33:37:6f:1d:5c:52:c1:b6:
53:2a:e4:68:1e:e6:a5:a5:50:30:8d:5e:f4:cf:75:
b9:3d:e9:00:e5:a4:55:c8:da:84:26:66:4a:68:5e:
97:db:0e:f9:b3:55:2c:fd:36:e1:8b:55:82:32:6d:
a0:3d:16:7f:e1:9b:51:fc:8a:24:e8:21:7b:50:3c:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:65:43:16:40:04:D5:AA:E5:19:36:5C:D4:52:9C:0A:21:F9:0C
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:d3:f5:9d:1a:86:2c:f8:c7:db:c1:90:69:e1:d0:d5:24:
63:b0:2a:3e:58:74:06:33:c1:51:c2:ee:b4:6a:d5:9d:07:ed:
db:ae:9f:45:1b:e8:b8:6c:6e:f6:00:8d:4d:e4:04:53:14:ad:
09:b1:f2:5f:72:49:fc:a9:71:7c:90:3d:12:27:ae:8c:77:52:
aa:44:41:80:40:e3:61:b3:d2:46:13:49:6a:ce:67:54:f1:0b:
e3:1f:94:64:ed:8c:c4:c8:d0:11:ed:b5:37:3c:e3:39:77:b6:
92:f1:df:7d:9b:47:2d:fe:2d:c4:6a:60:1b:f8:3d:fa:9a:d8:
25:8e:1c:79:b2:d5:c9:ab:18:1d:f4:f5:a2:2a:d2:c0:7d:d5:
1d:67:88:f4:16:c6:31:00:01:dc:1d:01:1f:be:c6:27:0f:d1:
58:22:59:8c:8c:2d:d6:85:7d:93:3f:57:16:b2:b1:0c:8c:b4:
8e:0c:87:16:a8:ad:ad:8b:fd:57:cf:53:3c:84:e8:8f:95:6c:
2b:3c:f6:18:3f:cd:48:9c:22:0e:9d:30:3e:77:37:42:fb:d9:
b4:e2:f8:2e:bf:8f:3b:e7:3b:25:06:a1:18:cf:12:25:41:10:
2c:fa:d2:f9:89:c4:64:74:d3:6e:2c:cd:a9:d1:49:6a:3b:89:
33:6d:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:45:46 2026 by rpki-client