
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: 747MWk6yMTXo47fEmgLsLHfZT5SvlkmwtlnpABWpDk4=
Subject key identifier: F6:B7:D8:88:A2:D5:B0:13:7A:D9:68:2E:E8:4E:B3:15:A7:61:2C:F9
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 020C
Signing time: Thu 21 May 2026 03:00:48 +0000
Manifest this update: Thu 21 May 2026 03:00:47 +0000
Manifest next update: Thu 28 May 2026 03:00:47 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: E33wDHLAEqVXoRZFDkd6djkmU557g1uhiGcIM4In/dw=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: irHoEjr1GIUaKPYFmyQpkRMEIYv26BomyciGLejer2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: May 21 03:00:47 2026 GMT
Not After : May 28 03:00:47 2026 GMT
Subject: CN=6a0e755f-6920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:42:da:09:5d:36:69:05:51:c9:1b:60:fc:
46:bb:10:24:c1:6a:db:4a:11:78:fb:95:38:60:37:
01:e5:50:bd:93:88:21:a4:f7:7a:de:cc:0e:67:ec:
fb:a7:e2:c2:63:15:2c:c7:75:1a:46:95:76:b9:0b:
69:37:18:51:1d:e1:13:73:bd:20:4e:2d:03:87:37:
d7:44:25:9f:9e:38:1f:aa:2c:b8:f0:9d:8d:ac:28:
56:45:d2:8f:ac:c1:af:ee:98:c1:b8:67:83:3b:2a:
c6:79:c7:46:23:06:a2:0e:41:b1:f0:fd:af:04:de:
d1:93:ad:7f:51:6f:fb:63:17:8c:fc:71:cf:15:81:
f8:f3:c7:82:e1:1d:99:ad:03:73:2a:91:05:32:0b:
93:8c:cf:13:2d:86:da:aa:79:95:d6:9c:97:e1:f1:
e7:ea:ed:9c:d2:dd:cf:15:11:68:1f:03:0c:98:c4:
38:3b:62:04:0c:44:8b:e3:0f:e6:25:ce:70:32:e5:
c5:fc:53:33:7e:4b:e4:e8:ee:12:44:87:27:0d:f9:
29:e8:ee:d0:e0:80:23:3e:18:2e:9e:be:56:50:41:
cc:15:b8:7e:a8:d1:34:fa:38:97:f6:f5:2f:5a:34:
88:01:ef:7a:df:23:1c:20:e2:ba:af:a7:ad:6f:b5:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:D8:88:A2:D5:B0:13:7A:D9:68:2E:E8:4E:B3:15:A7:61:2C:F9
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:33:37:4a:aa:4f:36:9f:8e:f6:32:d1:63:2e:6a:53:e3:37:
06:09:a3:0a:fb:53:ca:9c:d4:63:03:d7:18:24:6a:0c:15:af:
c9:35:70:6f:7e:bd:b6:9a:5b:6d:8f:e4:1b:23:10:57:e0:31:
ae:ac:3d:7b:01:df:24:5f:9b:14:cd:46:db:ec:8b:42:f5:7f:
46:fb:3c:24:6e:15:e3:bc:8d:d3:49:1d:5f:ff:f0:e0:2d:73:
ac:32:37:f0:65:62:a1:fc:e8:18:a5:ad:0b:f3:82:51:52:48:
d6:30:79:70:f9:01:8a:28:37:b5:2b:7b:19:bb:87:b7:44:ed:
ec:85:b6:62:9c:6d:7c:b5:fd:07:fa:67:c7:05:a2:45:0d:7b:
86:24:da:1e:2c:c7:05:1a:62:3e:00:85:2b:28:37:fa:08:3d:
c4:8b:4e:76:3e:c2:13:03:57:7a:04:31:7a:b1:60:f2:de:73:
df:31:46:d9:48:c7:8d:68:45:4e:b9:0d:d6:77:46:3b:51:39:
de:a3:25:e2:1a:3d:17:5b:16:9d:63:5c:db:46:82:56:00:32:
17:58:cb:bd:08:5b:1e:c2:54:fc:07:3d:be:f7:ea:c5:0d:bb:
7f:6a:72:d8:b4:ed:9f:97:dc:98:39:59:d9:9c:a9:33:11:be:
ad:e1:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:07 2026 by rpki-client