
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
File: _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json)
Hash identifier: NH9uFow29hBWiWsxPnjd+F0y6xm2LIKuiyYau0dXMeE=
Subject key identifier: A9:8C:24:C0:11:40:12:53:61:DD:86:D6:DB:2E:95:3D:D9:40:0A:9E
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
Manifest number: 73
Signing time: Sun 25 Oct 2026 08:18:27 +0000
Manifest this update: Sun 25 Oct 2026 08:18:26 +0000
Manifest next update: Sun 01 Nov 2026 08:18:26 +0000
Files and hashes: 1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: VkTzYsB4E7nluBMM/GY+YZoL3m7Hm5xlixsYDn3TcqE=)
2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Validity
Not Before: Oct 25 08:18:26 2026 GMT
Not After : Nov 1 08:18:26 2026 GMT
Subject: CN=6addbb52-62c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:0a:f2:e0:26:c2:5b:aa:69:dd:60:3f:12:
89:27:5e:da:f5:10:d2:96:5b:38:b1:75:3a:fb:c9:
13:17:86:e3:18:c7:10:70:ff:15:6a:30:15:51:46:
d0:d0:d1:2d:62:1a:db:72:1e:37:7e:8e:a7:e7:8f:
3a:bf:5b:16:d6:c3:84:6d:65:f4:5b:22:6a:fb:5f:
5c:4b:5e:53:6b:19:f0:08:46:22:c9:01:0c:f3:d2:
c8:c7:2e:b3:19:81:18:b6:12:51:2b:5e:36:fe:cc:
c9:44:2f:b3:83:28:93:0c:8a:47:2f:e1:ef:da:07:
56:80:8e:3e:94:9e:f9:96:a6:8d:cf:d6:92:2b:e9:
ef:2d:0a:fd:dc:00:9e:62:8b:5f:b0:89:b1:79:2a:
ca:0e:fb:02:8f:97:44:7d:29:5d:a4:98:f7:28:b0:
2f:ef:bf:f6:ff:1e:c2:0e:05:75:bb:81:ba:fa:5e:
2e:aa:07:1d:0b:0e:e0:99:f0:30:fa:32:ef:64:06:
0b:7c:ce:67:ec:82:7c:a0:41:23:db:02:25:f0:88:
b0:f4:20:b3:bb:51:d4:02:2b:b9:7a:b8:59:21:89:
02:3c:98:2c:67:c7:8a:da:ce:c0:c0:16:70:ba:7c:
2f:51:49:21:51:cd:c6:e4:4d:c6:82:30:58:37:93:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:24:C0:11:40:12:53:61:DD:86:D6:DB:2E:95:3D:D9:40:0A:9E
X509v3 Authority Key Identifier:
keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:73:26:a3:e9:a3:df:44:d2:4b:42:51:b9:e7:80:eb:66:
a7:a6:dd:e2:c3:7d:a6:a7:c6:98:7e:4d:53:94:f6:ef:61:e1:
6d:eb:3d:60:2f:74:44:24:89:1c:09:a1:c4:50:c6:48:d0:64:
4a:80:8d:68:32:27:63:a6:3c:b9:43:fd:9c:9f:55:8e:92:c6:
eb:c7:bc:08:d1:40:a4:7f:96:81:c4:99:71:cf:f5:5c:f1:b1:
e0:5d:26:26:eb:a8:7e:2e:a7:98:85:01:0a:04:bb:75:6d:13:
d9:ad:d8:02:d2:66:8f:c8:a5:76:4f:ed:e4:57:f2:70:6c:68:
23:09:38:2b:4c:a9:d8:ee:9b:7f:d7:e0:3f:a3:b0:0d:14:1a:
6d:f0:97:8f:6a:3f:f6:18:59:5f:79:3d:95:d2:a7:d1:ff:92:
e8:6b:db:0a:87:cb:2c:74:1d:ee:14:af:11:fc:f8:bd:7e:ea:
4c:30:af:cb:7a:e5:6e:74:32:f0:26:6b:f7:ec:90:15:86:7c:
62:77:08:ea:be:b5:12:28:f1:ff:1c:e6:d2:a9:99:34:4a:05:
ab:e1:04:c7:9b:ff:af:ac:b0:8b:e9:d8:7a:34:2b:25:14:92:
b6:16:e7:7a:2f:35:14:72:6f:60:76:08:e6:50:72:47:70:09:
e3:e0:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:52:20 2026 by rpki-client