
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier: nxARyyiu5nuXRXaooHQ6dhsKqkILObKuEoQhNxY/+KQ=
Subject key identifier: 3F:F6:A3:20:65:45:40:DB:44:FD:20:1D:B2:15:C7:BC:0D:CD:98:9F
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number: 0262
Signing time: Sun 05 Apr 2026 01:50:24 +0000
Manifest this update: Sun 05 Apr 2026 01:50:23 +0000
Manifest next update: Sun 12 Apr 2026 01:50:23 +0000
Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: WWE/NmJkA7npKyiHpKMPk0j/o/hg2Icr/gGjagS6e90=)
2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
Validity
Not Before: Apr 5 01:50:23 2026 GMT
Not After : Apr 12 01:50:23 2026 GMT
Subject: CN=69d1bfe0-2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:38:89:80:8b:e9:ce:f7:a2:0a:f4:50:cf:
6d:40:da:24:3b:bc:6b:6c:c7:11:99:3f:45:9c:6a:
21:30:6a:25:4e:c2:aa:be:59:41:50:b1:10:00:f1:
3e:de:e8:90:e0:77:dd:12:c0:a4:05:b5:bb:2e:8c:
16:cd:3a:fd:f9:25:ac:22:7e:a0:52:d1:1f:cb:7b:
7c:7c:b6:4f:57:fa:df:e7:86:3e:01:a2:f6:54:4f:
23:70:24:b5:78:e6:48:b0:e1:1d:23:85:2f:01:bd:
f1:42:a8:a3:4b:b9:83:47:f3:5d:01:a0:ad:bc:d2:
bf:98:b7:ff:02:ea:ff:f4:44:d5:39:61:02:eb:a0:
27:33:69:35:01:2a:ba:10:9f:e3:3b:a9:83:fc:a6:
dd:c9:08:11:fc:99:a5:2c:05:67:6c:68:c4:e6:eb:
82:38:3f:82:71:fd:9c:88:1c:f6:90:b1:3a:26:74:
b4:77:8e:8d:49:00:4b:a4:47:7c:85:f5:14:01:fc:
57:65:59:d3:61:26:15:bb:c5:dd:5a:ce:a0:d5:c2:
e9:99:75:b4:00:14:26:a8:92:e3:d1:e0:0d:28:73:
a0:c8:a0:7d:b4:b3:60:3b:22:05:15:e1:1d:19:4a:
3a:c1:06:73:96:ff:9a:d0:72:9c:ef:91:37:ad:f5:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:A3:20:65:45:40:DB:44:FD:20:1D:B2:15:C7:BC:0D:CD:98:9F
X509v3 Authority Key Identifier:
keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:36:4b:e2:07:5f:1a:2c:bf:ae:da:81:e4:38:22:8a:3f:8c:
87:a8:d9:a5:28:35:9b:23:9e:64:4a:e9:da:24:df:1e:2a:50:
36:32:5d:5f:d0:a4:bc:9b:6d:e3:8e:a6:80:c1:39:44:b9:ef:
35:4d:a3:16:eb:77:bd:a9:18:2f:39:1e:57:d6:2a:ce:0d:92:
8f:73:0a:e3:f5:89:7e:de:31:c0:0e:14:a5:0c:29:5d:fe:23:
69:31:28:07:90:a1:88:f6:8f:8d:fb:08:f9:f9:43:dc:87:fa:
58:36:56:51:37:6e:10:c3:36:a7:1f:56:bc:34:4e:5d:ef:75:
74:1c:f1:02:38:b7:64:5d:a4:e1:bb:1d:47:62:ec:b0:dc:b4:
d4:a5:3c:8d:b3:c3:6f:da:19:ed:a5:a9:de:7e:09:f8:4f:9d:
1f:4d:cf:f8:fc:3a:10:2a:c3:91:a1:b1:0b:1d:77:8d:d4:32:
8d:5e:22:d7:50:7e:62:d8:68:09:b0:ff:4e:1b:c2:ec:30:d7:
4a:0c:9c:f5:45:38:14:9f:f8:15:06:17:fa:44:52:ec:19:b9:
fd:3c:77:2d:43:8f:8e:39:fe:eb:98:04:48:b6:15:a1:05:4f:
c9:0e:cf:6d:69:cd:8e:b5:c2:ab:48:4c:99:37:90:03:74:ef:
1d:7e:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client