
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: 17Z16Gr6tq8x22c+IxOiGFGAfSLS2kruOZXtoYvKru0=
Subject key identifier: A0:97:C0:3B:57:AC:0E:2F:42:DE:C9:A6:8E:C2:C2:20:78:22:EC:B6
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 023B
Signing time: Wed 19 Aug 2026 03:05:08 +0000
Manifest this update: Wed 19 Aug 2026 03:05:07 +0000
Manifest next update: Wed 26 Aug 2026 03:05:07 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: mbD4d5QBVIMMuoQ2EHumKnZMnAHlc3SB5c1g0ryU/ik=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: ILGE9oCYbvmTK9dEj+SlWWsbGyBGUaH9PcGwXKfR5nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Aug 19 03:05:07 2026 GMT
Not After : Aug 26 03:05:07 2026 GMT
Subject: CN=6a851d64-03ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:6f:ff:a0:b8:20:7c:35:82:fb:5a:28:7f:
1f:14:aa:1c:b2:ed:f8:9b:3b:c5:1a:71:1b:7c:2f:
50:89:f0:66:71:2a:e2:07:27:4a:3c:d7:fa:55:79:
69:25:71:fa:f2:50:fe:ef:21:a9:aa:13:aa:86:e8:
a7:4e:75:32:4d:b5:f2:36:43:1a:f7:21:10:9e:91:
c5:54:a9:b6:8b:bb:64:ae:0a:58:38:4d:44:99:ce:
6b:b8:4d:15:ea:e2:47:23:ee:6f:8c:2c:97:a2:73:
e1:58:03:9a:96:be:b5:5b:fd:8f:cc:6f:a0:ba:53:
d6:ec:56:a0:00:44:c6:3f:03:d9:76:25:cc:72:26:
72:a0:80:f2:dc:86:81:62:33:26:1b:74:33:dd:c4:
5a:32:a3:2a:1f:73:de:ed:df:08:d5:d7:85:20:3f:
05:41:ca:23:44:4f:08:fa:3b:9e:41:c1:39:3a:cf:
92:4a:16:ec:08:ed:65:fa:ec:5b:9b:06:43:0d:6d:
4b:27:fd:23:3a:e8:85:04:74:b8:cf:9f:1c:6b:c0:
94:4f:a2:a5:0a:f2:aa:ee:2c:9f:32:6d:88:3c:02:
06:6c:41:eb:e1:ea:ad:bb:8b:e0:54:15:72:2a:0d:
69:1e:57:f1:a5:1f:14:67:56:0b:ce:23:57:da:35:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:C0:3B:57:AC:0E:2F:42:DE:C9:A6:8E:C2:C2:20:78:22:EC:B6
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:14:10:03:7b:e5:f4:7f:f4:a2:29:62:c0:0f:88:af:76:
3e:47:bd:f8:bc:94:e9:e5:cd:12:c9:8f:4e:b2:ca:c4:fd:f3:
de:7c:d3:80:f3:05:60:6a:f9:2c:be:cd:5f:78:f9:0b:28:37:
79:fd:c4:12:6f:78:b9:d2:f7:2a:4c:e8:04:61:1c:d0:36:67:
a2:4e:da:cf:20:27:fd:41:e8:d9:63:a7:0c:7e:6c:64:7a:d8:
c2:b0:e1:7f:b1:25:f0:4b:db:23:7d:ad:3a:f6:6b:84:c3:5c:
07:be:1c:99:35:72:f9:c2:c5:f9:74:1f:1b:ea:63:1f:8a:94:
24:e7:42:4d:cf:db:6c:94:92:ec:b4:16:77:5f:af:90:11:2c:
8e:2a:d4:ab:3d:a1:83:d2:14:8b:24:b9:34:3a:23:d6:45:fe:
89:c2:39:98:2e:c2:c3:a9:a4:71:01:ab:d2:e0:01:59:92:f7:
37:13:f8:4b:d3:68:2a:3a:e7:33:91:e7:6b:65:02:db:d6:fd:
21:c6:2f:f1:a2:c0:31:7c:db:bd:73:52:d5:a1:64:a6:a2:ce:
51:ab:a8:a8:1e:06:e8:5e:5f:64:b1:60:fc:f0:bc:a6:10:3d:
d4:cd:ae:eb:f8:dc:61:21:d9:07:70:94:74:49:16:b7:f3:90:
ec:0b:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:20 2026 by rpki-client