
$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier: OM3GwirtDKF1PPuE7M1FjQonYCWYlobIMQ/P6xS6cjo=
Subject key identifier: 1C:F7:82:CD:A4:EE:E1:46:B9:29:4D:6B:29:82:48:AD:BC:1E:E5:7B
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number: 076E
Signing time: Thu 02 Apr 2026 21:35:34 +0000
Manifest this update: Thu 02 Apr 2026 21:35:33 +0000
Manifest next update: Thu 09 Apr 2026 21:35:33 +0000
Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: 05iLsWE2e6Rw8t2SbciKOGhyCnt7J2+MnsPyfPc5F5w=)
2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: Ex32OuK8cYYdQNaH5Et0DlGn+H8d2IBO5mMVFj93THg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Apr 2026 21:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Validity
Not Before: Apr 2 21:35:33 2026 GMT
Not After : Apr 9 21:35:33 2026 GMT
Subject: CN=69cee126-85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:24:ed:05:63:a6:9b:1c:3c:ec:e9:5b:9f:
ad:62:31:e7:81:fc:2d:c8:26:56:f5:7b:61:7a:26:
81:c3:18:be:a5:25:cb:14:85:a5:ff:66:e8:ac:5b:
b8:00:f3:82:97:64:dc:bb:3c:bd:cf:b9:93:48:6b:
05:87:7e:1b:9e:4c:f9:29:d1:b1:b5:cb:6d:ff:d4:
bc:fc:b2:71:7c:a2:a1:48:5c:82:de:64:60:4a:2b:
f3:2f:ae:3b:09:4a:8f:5b:a9:d3:6b:2b:da:25:7f:
a6:76:0c:85:1d:8b:35:06:03:ce:d7:c9:3d:fe:c5:
d8:d1:e3:bd:26:d9:94:09:c2:4f:00:9d:09:31:70:
0e:7b:7f:32:2b:44:7b:91:74:b3:9c:83:bc:25:54:
d3:ca:b2:51:06:9f:15:50:1a:63:71:40:8d:b1:cb:
1b:30:5d:c4:1a:e9:eb:07:a5:df:18:ca:48:36:de:
04:80:1a:a9:8b:42:df:ec:f9:4a:55:92:0e:9c:96:
0f:e2:46:18:9c:c6:0c:c7:9e:c2:9c:fc:ed:7d:9d:
25:f1:07:ce:81:53:81:18:3f:cd:d7:27:79:3a:31:
0a:3b:82:b3:8b:d6:75:31:e7:70:37:67:a4:be:ef:
25:1a:8d:8a:03:9f:e3:2c:dd:00:b2:ed:69:7e:cd:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:82:CD:A4:EE:E1:46:B9:29:4D:6B:29:82:48:AD:BC:1E:E5:7B
X509v3 Authority Key Identifier:
keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7c:cd:c1:f0:c3:c7:9b:1d:60:34:c7:90:e8:d1:11:fc:7d:
ea:d4:f6:13:06:0b:e4:86:2c:68:f9:16:c7:a2:1d:93:99:8b:
af:64:e8:1d:f5:b0:bf:2a:ac:49:0a:0d:13:8f:d4:fb:f2:db:
66:93:6d:36:aa:e3:cd:58:79:af:55:30:ff:a5:81:08:4f:78:
44:89:54:94:67:d3:b0:14:91:b2:5c:58:f8:28:55:5a:c4:77:
28:58:a7:fc:69:12:17:77:32:d1:27:9d:ef:ac:cb:35:9d:9b:
70:3a:6a:cb:d1:dc:5d:0e:9e:c4:c4:6f:34:95:7e:39:3b:14:
f7:c7:62:38:29:f3:2f:d2:5b:06:4d:8a:ac:4a:37:4e:0a:f5:
cb:e8:d4:cc:ef:73:32:0d:d3:22:d5:b2:de:1a:2b:b3:49:4d:
02:1c:7d:06:74:78:73:0d:85:93:0b:28:78:83:39:f1:bf:ca:
ec:b4:3f:1a:7c:8c:fe:3b:48:ea:ea:5c:3e:50:05:e8:0d:23:
75:46:f8:ae:06:1c:47:b9:ae:1b:0e:23:22:72:ad:bd:a5:89:
16:43:4b:21:7a:46:5a:bb:4d:a1:d2:e1:1d:91:72:70:18:63:
39:be:15:e2:35:05:6b:e0:28:77:7e:ca:16:49:e8:b5:6f:ec:
4f:66:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 13:03:44 2026 by rpki-client