
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: +HmNgNuMpjkMgpLGdDQsOrpJ5yx1nQvaZc8T5nQfob8=
Subject key identifier: 33:5F:BC:4D:8F:8F:97:F6:16:FC:12:E9:D9:46:D3:C2:39:8F:6B:0F
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 0309
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02ED
Signing time: Sat 05 Sep 2026 01:00:35 +0000
Manifest this update: Sat 05 Sep 2026 01:00:34 +0000
Manifest next update: Sat 12 Sep 2026 01:00:34 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: CcxQBRjkmHFx9+1o0a1/s5Oe9UjHvJAlqBB8fz/ga/Y=)
2: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Sep 5 01:00:34 2026 GMT
Not After : Sep 12 01:00:34 2026 GMT
Subject: CN=6a9b69b3-7d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:7c:c9:a9:d8:c4:c6:2e:3e:9f:0c:26:42:
8a:35:92:15:bf:ac:17:d8:c8:98:04:ca:76:04:ed:
fa:59:ad:10:74:0d:97:6b:f3:ad:84:f1:87:cd:ca:
41:2a:20:40:6e:af:6f:ef:0e:3e:e6:5a:88:57:75:
34:5e:a6:33:37:0c:4b:64:3a:dc:00:6e:73:66:c0:
05:b3:c1:d6:f9:e9:56:3a:4d:1f:ac:3b:9a:4b:a0:
ce:75:5e:52:1f:83:74:79:4e:a1:d0:7c:0f:3a:87:
9c:c1:9d:d4:aa:f4:f8:8b:07:9e:e7:8f:2a:88:b9:
df:8c:7d:d9:df:58:e6:e9:35:9f:5d:7a:91:eb:de:
d8:25:bc:7f:45:be:46:73:c1:96:a4:0b:a8:d6:2e:
fc:6a:ee:23:82:93:0b:06:86:69:d0:3d:c4:b8:d5:
e5:ba:e8:6a:03:ce:6e:db:cd:d4:35:d6:74:36:ca:
ad:cc:24:39:1a:45:bb:91:cb:4d:9e:e8:f3:07:62:
b6:42:e8:bc:48:62:e4:ae:99:dd:5e:d4:b1:32:cc:
63:48:9e:5a:23:7a:12:ce:5e:39:d1:54:c1:9b:0a:
2b:3f:45:e1:c6:4e:21:9b:ef:bc:e7:79:23:0d:72:
8d:66:d8:bc:ad:98:3c:11:bb:ee:1b:4c:50:ae:42:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:BC:4D:8F:8F:97:F6:16:FC:12:E9:D9:46:D3:C2:39:8F:6B:0F
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:5b:6e:ef:5a:4f:54:6f:28:01:d0:43:45:d2:2d:ce:52:
12:5c:c7:94:6e:b3:8d:61:82:56:fc:b5:b6:67:0b:48:04:df:
eb:3a:22:e3:1f:58:e5:87:a6:02:00:62:e4:45:42:7d:69:4d:
33:90:50:57:63:8d:71:17:46:1b:e8:01:70:17:3a:b2:59:35:
65:ce:44:0c:74:01:17:f7:29:af:b1:bb:7c:86:98:f1:53:d9:
86:3c:3c:f7:1b:c3:14:1c:28:7b:f0:d1:41:fd:a3:95:79:18:
81:ea:b4:92:38:b8:40:61:e3:9f:bd:0f:e9:97:11:86:bd:6e:
68:c3:70:8c:09:17:8c:3a:d3:e4:f8:7b:1f:4a:7b:54:b3:9e:
18:4d:02:f7:81:10:34:81:10:e0:5b:19:d6:a8:9e:96:c8:88:
fe:96:93:63:5d:01:78:9f:4d:d3:24:30:3c:6c:23:1b:a4:96:
94:c4:2c:70:fa:94:90:82:1a:6c:cb:20:d5:9f:13:46:a8:94:
dc:77:54:81:1e:5e:98:a0:71:63:bd:c1:a4:55:dd:78:c8:0c:
e1:eb:70:c5:b8:88:7a:0c:c3:74:29:4c:a1:a2:e7:21:81:2d:
a7:23:7c:19:d9:94:98:3f:66:da:5d:92:65:a0:14:5e:0d:cd:
e1:14:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:34 2026 by rpki-client