
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier: 2qQn6DQ2BpEZ0kNR3eJbhRu4o3ZduqYDVI7weg0s13Q=
Subject key identifier: 66:B7:9E:E7:59:46:45:94:9E:C2:DC:A4:72:6F:39:C0:11:9B:D9:FC
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number: 0248
Signing time: Wed 07 Oct 2026 02:50:48 +0000
Manifest this update: Wed 07 Oct 2026 02:50:47 +0000
Manifest next update: Wed 14 Oct 2026 02:50:47 +0000
Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: z4ynPDMRqL2X9jEVVjNiDUxJXho+hL06zEfuJl/ohGE=)
2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: tuCN6O3U0PhqHjOU2y8CruvRTIpfP/U+Bw2TGt25+Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Validity
Not Before: Oct 7 02:50:47 2026 GMT
Not After : Oct 14 02:50:47 2026 GMT
Subject: CN=6ac5b388-6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:65:85:0b:55:a1:e1:21:0a:7f:aa:d5:e2:
fd:be:05:02:40:38:bf:6d:f9:4c:1c:28:1a:e2:8b:
76:21:88:06:34:52:20:a0:23:7d:41:a9:4f:0d:0e:
eb:45:42:a7:89:33:c2:0e:d1:eb:fa:7a:de:58:43:
01:2c:89:ff:4e:0f:c8:6e:76:00:b0:e5:c4:42:18:
92:88:6b:ac:67:e9:ca:eb:bb:4a:47:cf:eb:10:c9:
87:32:a1:be:9f:7d:32:92:ff:d2:9a:7d:8f:7f:15:
59:b0:31:88:8f:51:01:a5:8c:e5:55:40:ca:1e:fd:
2f:8b:ab:45:2b:6a:fb:7b:c5:31:c3:cd:bc:48:53:
bb:e2:a6:d8:36:f3:1c:e2:ff:4b:f5:22:25:ee:5f:
13:f8:25:9c:77:12:25:af:9e:a8:c3:4a:fc:d9:fc:
f0:d4:e0:80:05:08:42:8e:e1:14:76:0f:1b:e1:dd:
46:30:b1:b2:da:8e:21:8f:e7:72:38:93:fe:a0:1e:
e3:a3:d1:85:94:cf:ba:cd:cd:fb:9a:7a:a5:3c:19:
56:19:8e:87:82:16:05:b2:04:aa:01:96:96:5f:6b:
6f:46:4c:38:7d:94:4f:ed:fd:79:aa:b6:1b:d1:4f:
43:5f:06:0a:0c:99:92:07:64:a0:f0:28:67:82:9a:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:9E:E7:59:46:45:94:9E:C2:DC:A4:72:6F:39:C0:11:9B:D9:FC
X509v3 Authority Key Identifier:
keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:7d:fc:25:cd:23:86:58:34:7b:af:8e:44:81:7e:46:95:
a6:76:0e:0f:50:55:2e:47:fa:89:b9:e4:d5:e6:03:77:a0:44:
04:6b:77:4e:be:99:3f:3f:79:93:f4:7d:65:c6:77:15:00:36:
d4:04:8e:c8:97:a1:cb:04:de:d2:9b:55:6f:ef:e4:8d:f3:04:
16:83:61:5d:70:c0:d1:a5:2b:fa:ac:98:18:25:5b:69:95:a6:
f0:06:03:21:5d:6e:58:1c:3e:99:68:3f:28:5b:04:ca:b9:8e:
21:5c:d0:06:88:07:e0:9c:f6:07:e8:40:1f:37:05:5e:5e:0e:
b8:22:6c:ef:20:57:4a:73:4a:ce:3d:1a:52:c1:2e:d1:2a:ec:
00:ee:b3:72:71:1b:24:69:69:4d:b0:7c:93:4c:38:6b:56:49:
fb:6d:d8:19:d8:22:46:86:48:10:82:6b:03:01:7e:2b:c3:45:
f0:be:74:96:c7:76:ea:bc:61:3e:96:09:2b:89:ba:69:77:d0:
80:90:9c:d2:8b:dc:93:c1:04:e9:5a:89:aa:1b:7a:9c:39:e1:
b2:39:c2:9a:0b:98:cf:5f:cf:d0:dc:0d:80:fa:f6:02:89:b7:
61:9a:e3:1a:fe:cb:1b:bb:b0:7b:46:78:54:4d:b4:9f:d3:e4:
cf:75:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:47 2026 by rpki-client