
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: 4MVIHrTAPGLM3c/2JgQDymwI1GQqEfjJX+l+qV0YAGw=
Subject key identifier: E9:CD:36:80:99:AF:C6:89:54:2D:11:84:78:DB:59:C7:3F:9C:04:88
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02A0
Signing time: Sun 05 Apr 2026 01:22:51 +0000
Manifest this update: Sun 05 Apr 2026 01:22:50 +0000
Manifest next update: Sun 12 Apr 2026 01:22:50 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: 75modVeDMNgJj0bjFqq2XT7Whl+psowGcaV5xb8rsLE=)
2: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Apr 5 01:22:50 2026 GMT
Not After : Apr 12 01:22:50 2026 GMT
Subject: CN=69d1b96a-5030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:7a:c5:32:f3:ed:ea:89:69:1c:7f:13:dc:
1b:20:95:21:9f:47:ba:04:e4:46:0b:c0:7f:a6:72:
b2:08:6c:ad:53:f9:8b:c0:91:c2:88:48:11:2e:8b:
a9:db:35:e5:97:fa:52:59:ed:95:26:b8:ac:15:fb:
1c:1b:d8:a8:c2:15:36:e7:f8:20:4a:b0:f6:2f:ce:
cb:68:29:82:7e:45:74:28:e7:05:ec:ea:d6:24:aa:
df:6b:2d:30:85:1c:22:c5:55:04:90:2a:7c:f9:a6:
5b:b2:d5:a5:9a:58:7e:d0:92:be:47:f4:f7:98:da:
4e:c4:9d:cf:0f:87:56:82:ee:d9:d8:68:27:d0:5e:
58:12:a3:0b:f5:bb:17:8e:7f:67:81:e8:4e:20:75:
f3:ed:5e:68:53:d6:32:7c:71:5a:68:53:42:b1:f9:
40:78:15:e8:ef:1d:bc:5f:e4:53:15:48:2d:8d:d7:
5b:12:d5:6f:90:4e:e5:4a:78:30:29:27:1e:cd:18:
a0:f3:2b:26:91:71:e5:37:5c:11:ca:8b:87:31:65:
1d:ad:6b:df:9a:2e:cd:f3:6f:f5:2c:0a:14:7f:c9:
df:0d:ca:f6:4f:17:dc:d2:01:c1:16:0e:6b:96:3d:
0a:01:9b:28:b9:31:71:fb:25:bf:90:ef:81:b1:01:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:36:80:99:AF:C6:89:54:2D:11:84:78:DB:59:C7:3F:9C:04:88
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:c4:19:98:db:61:28:3f:6f:be:d7:4b:c9:c9:2c:a7:5e:
ab:6b:01:24:e6:ff:97:7b:40:e3:c8:7d:68:f7:ff:2b:85:c3:
5f:c5:7a:d8:59:53:b6:ce:72:73:ef:37:97:f5:31:fb:86:76:
be:3c:36:25:b2:b2:82:ec:c4:79:6a:84:fe:01:66:d8:b0:a2:
3d:02:55:58:ec:b0:1a:80:6b:5b:e0:9b:9c:c2:71:43:7c:30:
dc:11:3b:a7:41:cd:bf:d5:ed:6c:90:35:43:ef:94:00:31:5a:
8f:06:4a:5e:c3:47:4e:94:2c:1d:c9:d4:b2:17:40:22:d8:03:
ea:96:cc:1a:fc:94:f5:a0:49:aa:74:37:78:bd:b0:7d:18:77:
2c:90:36:fb:89:a9:db:f4:da:76:6e:c0:40:65:20:0d:ff:d5:
27:da:f9:30:0a:3f:89:34:28:12:42:3f:d0:04:f6:c8:5b:0a:
4a:bc:f9:73:5b:ef:80:ac:b4:8d:10:05:28:50:68:db:47:40:
f0:8e:40:dc:ae:3d:da:06:d1:4d:8f:5a:08:fe:1c:7e:df:7f:
7c:cb:c3:fd:ca:c0:ca:87:f7:6d:23:ae:2a:b5:a1:9c:8d:85:
12:10:2c:23:c1:71:cd:b9:85:ae:b9:53:d9:95:a9:90:c3:aa:
2e:53:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:20:29 2026 by rpki-client