
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: e76sUiY2kkCl9sZYVKupMLTdy2whyVV8u3GnvRTkkB8=
Subject key identifier: 65:F6:54:E4:23:96:79:AB:97:68:26:FE:3E:EE:FA:10:00:0A:C5:42
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02D5
Signing time: Tue 21 Jul 2026 02:25:47 +0000
Manifest this update: Tue 21 Jul 2026 02:25:46 +0000
Manifest next update: Tue 28 Jul 2026 02:25:46 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: OW6fJeGRM8wYcktvZr056o2jDM33IUNEr6Qn+FvIlbI=)
2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
3: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Jul 21 02:25:46 2026 GMT
Not After : Jul 28 02:25:46 2026 GMT
Subject: CN=6a5ed8ab-7add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:66:8f:61:f7:87:b3:b4:84:60:38:0c:81:
02:dc:b4:a3:86:86:39:f9:b9:08:c2:fe:b0:d2:41:
26:c0:5c:cd:b6:a9:68:14:bb:bb:01:ea:82:3f:e0:
9f:5a:17:27:40:29:b7:bf:76:b6:28:f1:37:52:b5:
cf:4e:53:29:e7:12:3b:7a:c2:12:f2:b9:0a:6c:eb:
ae:f6:47:fb:00:2f:59:69:eb:29:72:a3:a2:a7:fe:
2d:00:da:38:af:75:b9:2f:68:37:21:2d:66:07:8d:
b0:76:a5:5b:da:b3:f1:30:14:46:55:b1:38:2c:94:
56:34:25:65:3d:5f:9f:7d:b6:8e:6c:68:06:33:c2:
00:16:75:e7:e0:04:d9:c5:0f:75:c4:10:cc:a8:46:
4e:05:44:43:5c:60:70:b6:13:91:8a:a1:7c:45:09:
68:4d:80:70:0a:cf:93:d7:fc:e4:89:ab:d8:7e:6e:
31:7a:b0:ca:8f:1d:5a:16:f2:93:27:29:e2:ab:75:
c7:0f:2a:77:4b:d2:c4:35:58:4f:5e:5e:02:b5:24:
ed:fd:77:22:d0:2a:2a:ad:f1:3d:e9:96:37:f3:d9:
37:88:49:13:f0:24:ed:b8:b5:dc:6a:b0:37:39:fc:
17:3e:7c:63:76:c9:dd:7d:ff:03:72:0a:8b:86:56:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F6:54:E4:23:96:79:AB:97:68:26:FE:3E:EE:FA:10:00:0A:C5:42
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:47:4a:c0:e2:0f:3c:e8:56:d9:08:5e:a7:94:0f:9f:ed:1a:
8a:ad:1d:78:37:5f:8c:48:3d:1f:42:17:06:40:12:15:cb:83:
88:01:11:98:8b:c7:b1:0f:f8:24:08:b7:0d:c5:e9:6b:c5:3a:
9f:9e:d4:6c:cc:fd:1f:aa:3e:53:8c:c6:eb:b5:7e:0f:f2:ee:
43:36:1d:3f:6e:92:f3:2d:86:b9:b6:ad:0e:75:20:36:64:d2:
3b:6b:8a:f7:d3:7c:6c:b4:51:31:29:90:ad:44:62:fb:07:fb:
42:24:5c:8c:3a:35:14:20:12:92:31:4e:f5:d3:f2:9f:c5:98:
e2:50:3e:31:d1:df:95:ce:7c:6a:c6:2e:0e:80:0d:52:e6:e2:
87:94:4c:64:13:6e:10:16:61:df:6e:d6:1f:16:b6:c8:9e:a6:
9b:2c:d0:48:a3:6c:9d:a3:00:20:af:25:1b:f3:23:2c:86:63:
52:b5:1c:c5:a3:c9:ba:ed:6f:32:27:ea:bb:55:40:04:e4:f7:
cc:87:a3:d5:fb:4b:1b:3e:4e:f2:0b:34:b9:b0:72:0b:0c:f0:
0f:c9:3c:72:34:70:7d:39:88:dd:e8:84:ad:9a:f0:9b:56:85:
e9:08:e9:13:f9:5f:6f:39:35:9d:2e:e4:ab:ce:82:87:93:44:
10:8a:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:25:45 2026 by rpki-client