
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json)
Hash identifier: jT1Fukxz0UmBSQm6wShmmIQ3iVmH8HwP+gTliy3yZ1c=
Subject key identifier: 27:5A:5F:E5:56:A3:6F:A3:2A:AF:37:32:E5:C2:8F:F7:72:7B:BE:E9
Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
Manifest number: 01C6
Signing time: Sun 05 Apr 2026 03:21:05 +0000
Manifest this update: Sun 05 Apr 2026 03:21:04 +0000
Manifest next update: Sun 12 Apr 2026 03:21:04 +0000
Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: gqT/L/5m8maN+KqgY54Xn43zAbDGrxU134ygUvPT63k=)
2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: bPTiYTxBxLwgfGF9jUdmUbDxjsKoq1F4YRnN4H89Q34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Validity
Not Before: Apr 5 03:21:04 2026 GMT
Not After : Apr 12 03:21:04 2026 GMT
Subject: CN=69d1d520-0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:95:34:a7:d2:21:74:56:72:e6:47:7b:df:
3d:5f:57:11:fe:35:53:89:67:a5:20:46:46:db:48:
3c:fe:2e:81:96:73:fb:f9:75:e4:2c:64:89:19:31:
f4:56:23:8b:56:dc:9c:21:98:b9:35:76:bd:f4:c8:
68:d1:42:a2:97:a5:60:10:57:01:f1:f2:44:76:67:
f3:49:00:4a:d6:a4:ea:13:9d:4f:e2:99:e5:1d:e4:
13:5b:ef:cd:3b:89:f3:e3:56:e0:96:c5:cc:1d:7d:
ac:dc:ac:c0:0f:ce:fd:f8:42:63:26:c9:c9:63:89:
9a:0c:f6:af:bc:4a:0d:6d:ae:a7:e0:df:6d:6e:eb:
f6:ff:24:21:ed:a8:cf:e9:1b:fb:b3:49:a6:36:0f:
6f:72:91:94:35:6e:b4:97:98:c3:5a:5b:e6:d2:eb:
d2:85:be:be:e7:04:1a:43:8a:41:0c:f1:4d:fc:e5:
06:3a:de:f6:72:06:63:fb:f2:bd:28:f3:d2:32:f3:
e4:6a:58:9c:a5:82:11:2d:c4:0c:d6:c3:36:4a:ed:
8b:60:27:72:3b:c0:06:ea:f1:36:19:5b:60:dd:49:
f4:08:51:9a:1c:05:64:49:73:2e:ce:ea:05:46:69:
2c:b9:6c:02:6d:8d:1f:c9:e9:30:c6:3c:98:da:bb:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:5F:E5:56:A3:6F:A3:2A:AF:37:32:E5:C2:8F:F7:72:7B:BE:E9
X509v3 Authority Key Identifier:
keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e8:10:e8:43:d5:b6:e0:5f:ab:b4:3d:99:26:a5:e1:44:d0:
d0:09:a5:8a:41:43:5a:2b:44:39:5f:ca:e4:5c:18:b9:74:71:
9b:73:f0:7f:8f:99:3f:94:09:25:ba:ed:1f:a8:48:fa:05:e7:
1a:74:08:1e:1a:c5:e0:6e:aa:dd:e9:7e:b7:82:34:4d:62:a6:
c4:20:fa:6b:b5:0e:66:46:3b:fe:ab:ec:9d:94:71:fc:b4:4e:
91:2e:4e:de:78:d4:2e:4f:76:17:1b:99:32:b4:e8:a3:14:0b:
da:3f:a4:b3:78:dc:4b:7a:2f:63:ca:dd:a4:fc:11:e7:24:ee:
bb:6e:5f:ec:56:4f:c2:89:aa:89:fe:c4:61:da:ab:ff:b1:1f:
6a:43:95:5b:39:2a:65:5e:3b:c0:af:db:09:f1:88:5f:c5:90:
06:c1:ed:6e:1f:e8:34:17:f9:e7:f7:34:23:e4:16:4a:d2:b5:
95:d4:4f:11:2f:91:7c:fb:a2:29:b7:70:d9:81:1d:4b:1b:86:
43:6c:18:67:2e:50:48:d3:e0:a4:5d:73:ba:00:1a:ff:54:bc:
b1:2c:cd:b3:b6:e1:75:a1:4c:7a:f4:ef:e2:63:36:83:4f:4c:
e6:6a:d1:45:a1:a3:08:36:df:58:0c:78:87:0a:fb:b2:66:ac:
3a:f7:f7:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz
NTE5M0Y3NzIwHhcNMjYwNDA1MDMyMTA0WhcNMjYwNDEyMDMyMTA0WjAYMRYwFAYD
VQQDEw02OWQxZDUyMC0wNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNSVNKfSIXRWcuZHe989X1cR/jVTiWelIEZG20g8/i6BlnP7+XXkLGSJGTH0
ViOLVtycIZi5NXa99Mho0UKil6VgEFcB8fJEdmfzSQBK1qTqE51P4pnlHeQTW+/N
O4nz41bglsXMHX2s3KzAD879+EJjJsnJY4maDPavvEoNba6n4N9tbuv2/yQh7ajP
6Rv7s0mmNg9vcpGUNW60l5jDWlvm0uvShb6+5wQaQ4pBDPFN/OUGOt72cgZj+/K9
KPPSMvPkalicpYIRLcQM1sM2Su2LYCdyO8AG6vE2GVtg3Un0CFGaHAVkSXMuzuoF
RmksuWwCbY0fyekwxjyY2rvZlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdaX+VW
o2+jKq83MuXCj/dye77pMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5
QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi
NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJegQ6EPVtuBfq7Q9mSal4UTQ0AmlikFDWitEOV/K5FwYuXRxm3Pwf4+ZP5QJ
JbrtH6hI+gXnGnQIHhrF4G6q3el+t4I0TWKmxCD6a7UOZkY7/qvsnZRx/LROkS5O
3njULk92FxuZMrTooxQL2j+ks3jcS3ovY8rdpPwR5yTuu25f7FZPwomqif7EYdqr
/7EfakOVWzkqZV47wK/bCfGIX8WQBsHtbh/oNBf55/c0I+QWStK1ldRPES+RfPui
Kbdw2YEdSxuGQ2wYZy5QSNPgpF1zugAa/1S8sSzNs7bhdaFMevTv4mM2g09M5mrR
RaGjCDbfWAx4hwr7smasOvf3IA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client