
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier: 3hzp4Y1JvWHE47xc0RynwAXaaMetS/gXUXbi6Q5lknU=
Subject key identifier: 10:A0:D5:8E:6C:46:60:70:CA:EF:4C:96:00:C5:3D:4A:B1:A5:3A:00
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number: 020D
Signing time: Tue 05 May 2026 03:00:39 +0000
Manifest this update: Tue 05 May 2026 03:00:38 +0000
Manifest next update: Tue 12 May 2026 03:00:38 +0000
Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: QnAx+vk6nza9QL7wejwXBEKrewKqUB7VAtcHbVJ6hA0=)
2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: RajIIoa2jtzMqftiD8ZX3mgcm+klrqkDaDW5z72Gd2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Validity
Not Before: May 5 03:00:38 2026 GMT
Not After : May 12 03:00:38 2026 GMT
Subject: CN=69f95d57-fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:01:59:54:b0:a1:b7:f2:60:ec:38:d2:f0:
a9:56:99:ef:e6:d6:86:cb:b4:d5:55:ce:e4:56:33:
d5:16:1a:e4:84:ff:4a:63:15:4b:f3:89:71:c9:04:
d0:33:54:cf:ab:99:c2:c7:c4:60:1f:04:e1:43:f3:
d2:16:a5:bd:43:3e:38:b0:50:f9:a1:f8:3e:5a:06:
65:6c:38:a7:ec:50:26:46:12:6f:aa:14:52:86:71:
98:ee:82:d2:3d:d7:f9:21:8a:c3:40:ae:a3:cb:f1:
59:43:90:20:87:8a:47:9f:e3:e5:57:46:bc:f6:d4:
81:e2:43:ae:5b:16:29:13:73:c5:a1:17:7c:20:38:
ae:42:82:88:82:36:85:f8:30:57:d8:8d:01:17:d6:
43:1c:a1:96:54:9c:52:38:29:c5:09:53:d0:ef:be:
b3:1c:f6:8e:29:ef:0c:1c:af:2d:c1:59:ff:e9:a3:
4a:12:78:f5:c8:3b:bf:b1:67:1b:16:0f:85:0f:89:
c6:13:62:c5:22:af:51:b6:ec:dd:0c:62:c1:ce:98:
c1:26:17:4d:1f:d8:41:44:4c:c3:52:3c:a8:dd:e5:
85:b8:b3:4a:21:88:8d:64:dd:59:55:3a:19:03:b0:
30:98:43:9f:2f:11:e1:a7:83:f8:73:1f:64:76:ad:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:D5:8E:6C:46:60:70:CA:EF:4C:96:00:C5:3D:4A:B1:A5:3A:00
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:6d:fd:d3:ad:55:4d:c2:4e:60:81:38:d6:55:94:95:d3:
f6:93:63:92:85:db:5d:f1:a8:3a:58:3c:98:3a:e6:01:f4:4d:
01:ad:8e:2b:00:95:89:c2:28:05:a4:bd:f2:fc:39:d3:85:e7:
f2:ea:b4:99:fb:ad:57:33:44:e3:68:ec:b1:19:1f:94:17:09:
d5:b2:fa:e4:fb:69:90:89:0a:ed:21:3a:5d:7d:9c:c0:6c:b5:
88:28:da:d1:80:59:c4:c5:50:a7:a6:bc:26:25:39:8a:da:41:
e4:1b:2f:6c:57:48:ac:47:57:8d:8a:4c:4e:55:19:b8:ae:79:
df:c0:77:2f:5d:f8:cb:72:81:ef:3f:15:34:f3:05:4c:04:a6:
09:ed:ad:fd:93:8c:b2:d7:64:3d:b6:45:58:37:e2:e0:b1:c4:
01:28:ce:ed:20:01:ca:9e:a9:bc:b6:44:6d:5c:c0:74:11:fb:
4f:44:14:39:d6:c2:04:0d:4b:3a:2f:c0:76:db:f1:4f:72:b1:
d5:ea:62:17:6d:0f:6a:40:42:ea:2e:64:6b:9b:eb:4a:47:bb:
fd:3f:1b:76:b5:56:0d:4e:6b:4b:73:60:0e:c0:c7:03:1d:1a:
02:39:aa:89:d2:ca:f2:b9:d3:78:30:dc:22:62:f3:b0:06:0a:
f1:9d:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:11:13 2026 by rpki-client