
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier: YpeXJf5cEZB6w0yb3OXn2/9rDdHf+f3PVLAh5kinJ7g=
Subject key identifier: 37:2D:CE:AA:84:D2:08:04:B7:00:6B:0A:7D:85:4E:4A:F2:3E:2A:98
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial: 3576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number: 3568
Signing time: Thu 16 Jul 2026 15:16:19 +0000
Manifest this update: Thu 16 Jul 2026 15:16:18 +0000
Manifest next update: Thu 23 Jul 2026 15:16:18 +0000
Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: GdD7pweyduYql/+b5VzD+FWl9GSQMjiZrNvgpnNWvWU=)
2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Validity
Not Before: Jul 16 15:16:18 2026 GMT
Not After : Jul 23 15:16:18 2026 GMT
Subject: CN=6a58f5c3-9f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:e2:db:d1:d1:0d:ea:14:a5:7a:ed:3b:9d:
05:dc:c5:70:d8:a5:05:12:87:28:49:cb:e0:80:a1:
92:ca:e7:c3:00:39:1a:af:5a:0c:2c:97:e1:e3:b0:
5f:d0:9f:bf:85:db:36:a4:ee:33:c3:8f:b8:8e:48:
5a:83:da:f9:e5:a1:96:6d:78:16:95:27:72:8d:85:
c2:0d:40:ea:4e:f7:5b:84:d5:8a:01:d8:56:92:47:
e3:5c:09:41:ae:7c:23:07:d1:b2:bd:6a:2c:6a:f5:
05:45:a6:3f:2f:18:95:16:ea:fa:6a:89:d5:cd:23:
b9:7e:80:9c:95:3e:4c:97:fb:bf:5d:77:68:6e:b7:
7b:50:a9:66:e5:22:7b:8a:f4:6f:d1:b7:91:50:1e:
d4:db:f9:49:91:4b:1f:13:b0:ed:6a:99:53:29:58:
af:0d:29:4b:43:ee:46:76:73:97:b3:18:35:c5:44:
fe:48:cd:b9:6f:7b:f7:e9:5d:cc:cf:93:ed:63:b7:
a7:9d:13:15:26:e5:ef:fe:44:1d:d1:bd:44:6d:2d:
56:b8:86:82:69:db:d7:a4:16:fe:f4:e2:41:51:b5:
35:df:19:e8:71:af:9e:6b:a7:0d:04:fa:0d:57:e9:
f1:3f:87:0d:4a:77:5f:d1:e9:4c:2c:20:21:7f:84:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:CE:AA:84:D2:08:04:B7:00:6B:0A:7D:85:4E:4A:F2:3E:2A:98
X509v3 Authority Key Identifier:
keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:62:ac:00:6f:a7:88:a2:4d:f8:4f:89:82:db:ff:39:19:b7:
81:12:e2:cf:f0:a2:ea:4d:21:16:fa:5f:85:74:8d:8e:da:34:
64:7b:73:ea:44:ad:da:0e:92:69:ee:e1:21:64:79:81:a3:10:
d0:0f:53:60:e9:0c:ac:1d:70:c5:82:58:94:b1:25:ad:18:39:
43:29:b6:17:8a:67:b2:73:71:3a:ec:7f:f8:b9:65:bb:00:1c:
f0:9f:63:ae:40:06:75:6b:03:cb:db:fb:c3:e6:98:c2:f2:2c:
8a:6b:74:b2:c4:30:25:ff:36:9a:a3:0f:59:f6:25:ab:96:2a:
0e:cd:24:50:4a:92:06:11:15:3d:bc:0d:91:57:bd:4c:f0:10:
60:72:4b:3a:59:0c:4c:34:c3:ad:b2:3c:4f:1c:82:b0:e0:dc:
89:f2:fd:70:ba:46:be:20:8d:6d:af:92:39:45:a7:28:8a:48:
20:91:fa:3b:58:4b:0c:be:ac:b5:23:91:e9:c5:fa:a3:55:a5:
10:cb:e5:62:29:eb:6b:fd:6c:ae:4c:18:8a:0a:a6:16:97:e0:
7b:5c:b6:5b:7a:6f:b8:34:a8:79:bf:7a:02:19:35:61:57:5e:
0d:69:fd:f1:65:44:78:51:20:b3:31:ca:9f:d6:a2:b3:cc:0e:
d2:26:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:27:43 2026 by rpki-client