
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
File: dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft (raw, json)
Hash identifier: xxeXCzUF1hOAku20bElz8Sj4ArNOAWp2QILxVdyXl7s=
Subject key identifier: 3A:C5:A5:02:2B:CF:C2:D6:F6:2A:B6:0F:25:8C:8A:7D:23:6E:A2:4A
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Certificate issuer: /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
Manifest number: 0117
Signing time: Tue 07 Apr 2026 05:29:46 +0000
Manifest this update: Tue 07 Apr 2026 05:29:46 +0000
Manifest next update: Tue 14 Apr 2026 05:29:46 +0000
Files and hashes: 1: dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl (hash: 9x7RQjs4cZDSYjQtZvES+gMQ6k+68X5x27sjmn9AcAk=)
2: 5A844AC639D511F0AE239C5CC4F9AE02.roa (hash: nYqey4x3lkf5DCFx+hCyJ0Ntg0jnhtCySBhzl5ahcNc=)
3: F0D45092BD4D11F0B4019718C4F9AE02.roa (hash: UxRNcFWWBgujwkCG1nsERvTPh4W+tQkhJi1fOJzqfLE=)
4: ED46632AC75311EFAA7A9E0BC4F9AE02.roa (hash: e6L0B2KlJFTFGDaDtH6sFnvjZmfXXj5Ou4En0z0ExTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Validity
Not Before: Apr 7 05:29:46 2026 GMT
Not After : Apr 14 05:29:46 2026 GMT
Subject: CN=69d4964a-a7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:3c:a1:b5:8e:5e:5c:87:dd:b9:2e:98:03:
3c:45:5a:05:73:ee:92:8f:e7:f3:34:37:f3:53:b9:
27:57:70:ff:a2:c8:29:2f:79:7b:ad:3d:7c:86:ba:
ed:94:03:03:04:4b:6d:c5:94:63:59:7e:fe:0b:67:
ff:c2:1c:3b:f1:3f:66:e5:56:12:24:75:cd:d1:b1:
ba:cf:97:01:d1:7e:bf:90:8c:7d:d4:91:b4:78:51:
76:85:80:9f:89:31:9f:03:ad:2e:90:32:8b:66:2c:
63:f8:50:70:92:81:90:49:b3:39:b1:1f:1d:99:ed:
0b:e2:e9:f7:a0:b8:7b:05:e7:08:9a:a6:0f:74:58:
24:ad:c2:25:15:9b:af:a3:2d:f4:74:ed:55:ee:b1:
c1:96:ac:88:7b:bd:2e:a5:b3:ff:3a:ca:8b:3c:2a:
9c:66:9e:94:6c:9e:f8:a6:b6:6e:43:3c:a2:0a:35:
0c:ce:62:25:ab:22:d4:1b:5e:bf:e0:00:69:37:d0:
f6:1a:bc:46:6e:e0:44:3b:b7:48:df:93:ed:fa:c8:
a5:27:23:4f:6d:86:e8:d4:1e:6c:dd:91:24:bd:97:
5f:8a:2b:76:5e:88:13:ba:63:11:dd:ab:54:5a:82:
f8:28:33:bd:0f:1e:10:f0:65:3e:a6:88:02:84:53:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:A5:02:2B:CF:C2:D6:F6:2A:B6:0F:25:8C:8A:7D:23:6E:A2:4A
X509v3 Authority Key Identifier:
keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:64:b1:5f:21:c0:1f:5b:8d:a1:47:1d:e8:fe:8a:85:2c:54:
c0:0e:f6:a4:bd:1b:87:06:76:f3:f2:0f:d2:74:01:34:5b:02:
6c:b2:ed:c7:28:99:30:7f:03:8d:a1:f9:b3:16:b5:54:fe:a0:
f8:9c:fd:1b:54:72:b7:9c:e9:79:63:d6:73:78:05:b6:b2:ff:
a2:25:50:cf:d5:fb:f5:ed:1d:74:24:51:54:76:ef:f5:8b:44:
89:e0:b0:fe:c5:93:eb:b4:d5:f1:ff:42:1f:2e:fb:a7:d8:8f:
d7:b6:5e:42:f5:4e:88:c5:73:a3:1e:8a:3a:03:69:46:3e:cf:
d8:20:1e:c4:4f:a1:bf:34:a7:23:bf:d3:72:85:4b:d6:de:e3:
98:ed:32:f4:a2:06:c1:40:2e:89:4b:b3:4f:3d:85:3c:82:72:
e8:71:c2:e7:ca:24:7e:66:0e:43:ac:4d:39:01:0b:55:84:c4:
9b:fa:2e:e3:35:a2:82:81:36:d8:89:1b:d9:83:ef:d8:d2:29:
46:c9:78:cb:1e:8d:0b:ac:99:58:f8:46:66:d2:ef:f6:c5:ec:
64:fd:0b:9d:39:f2:9a:81:6d:39:0c:01:c4:20:5b:55:e7:9f:
ca:49:f6:4f:b0:49:ff:06:10:3b:e1:6c:cd:92:df:61:90:3f:
81:4f:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:17:16 2026 by rpki-client