
$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier: T0iHmCd89IhomufVCdI13Yl9fXT/cyiJ7zOhOZ2ycQw=
Subject key identifier: D6:1C:A7:AF:91:6B:D6:8E:5D:19:B1:FF:13:2E:F4:E5:83:80:BC:4C
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number: 02FC
Signing time: Mon 27 Apr 2026 01:23:04 +0000
Manifest this update: Mon 27 Apr 2026 01:23:03 +0000
Manifest next update: Mon 04 May 2026 01:23:03 +0000
Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: IjBMyBOPJPgamwHY94PS5T2NdrWDVwJbtvTuHf4/Zo0=)
2: 40FAF0C8090A11F191B4F9FF353D8C67.roa (hash: tSEq0mWoGPibwDQ4pSkCNY7zhK1jNgm3b9+3eCbUq8Y=)
3: 1AC505BE090B11F1A5787D1E363D8C67.roa (hash: 6dvfhysIbcVTCkyj0ZkmbXr/UmJBK+KvtS/v29xveLo=)
4: 912370B6D9EE11F0944D00527AD3641D.roa (hash: 5pFojy8NGtNG0ljxoxG1BE0VoZH5eOFMgSsGp6wv8ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Apr 27 01:23:03 2026 GMT
Not After : May 4 01:23:03 2026 GMT
Subject: CN=69eeba78-f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:b9:74:a3:a2:04:7c:6a:45:4e:03:ab:7e:
8b:88:a5:80:7b:60:5e:0e:c3:dd:10:9e:05:8a:ee:
b9:af:09:7e:72:bd:50:41:4c:bf:33:19:42:82:0a:
67:c2:16:83:4d:02:9e:53:ce:80:06:a8:53:17:39:
6d:ff:17:a8:40:5a:64:3a:58:98:ee:3e:b0:df:68:
9c:62:d9:70:95:78:cf:6a:3a:80:09:01:d1:b7:92:
cc:e6:ee:35:3c:e9:62:71:05:a3:59:5a:56:ec:86:
70:1c:ba:56:7e:5d:e3:fe:1c:1c:93:c9:a0:46:1e:
55:ac:62:22:25:a2:7e:2c:44:cd:3c:34:f2:fb:7d:
ae:8f:98:c5:55:c4:a1:87:00:bf:2b:aa:3f:fa:43:
ac:1c:71:b6:96:99:13:79:0d:70:94:ae:ba:b5:cb:
34:b5:0a:1e:94:c9:41:e6:96:d0:fa:a5:4a:80:df:
f6:01:6a:24:7f:84:c2:33:80:88:b8:ec:35:9f:c9:
cc:e8:01:ab:be:77:4a:15:91:66:a7:5a:be:ad:ae:
88:b0:ce:68:17:5c:04:a4:c2:ca:3e:1e:ca:82:6b:
09:ee:38:2b:a3:d7:cb:e9:b5:d9:a9:de:af:c1:2c:
f0:6b:61:ea:0d:e9:2b:53:21:5d:80:cc:c6:de:1a:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:A7:AF:91:6B:D6:8E:5D:19:B1:FF:13:2E:F4:E5:83:80:BC:4C
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:34:a9:f2:61:b2:dd:20:eb:a6:a5:0b:79:3d:ca:90:fc:
4b:4c:91:48:9a:02:5b:b0:2e:20:a6:e5:8d:13:d7:b4:16:00:
88:69:49:c3:37:8e:cb:c0:5e:75:e9:af:27:fe:34:e9:e7:2e:
85:10:e9:3c:9c:62:b8:9a:20:77:0f:84:d8:01:14:19:47:78:
0f:91:d2:33:a8:c2:77:86:78:d8:87:b0:09:4d:3b:b4:87:cc:
d0:ab:0e:41:2a:02:22:81:6b:19:f3:c5:9f:b6:4e:01:7b:3d:
b0:2c:34:7e:21:12:e0:c0:80:51:c6:66:74:2f:53:1a:6b:fa:
01:3a:49:e9:a3:10:5b:52:c4:43:fc:9f:ec:fc:79:73:80:50:
3d:fc:92:59:9d:b4:3b:b7:dd:ed:ea:2f:79:8c:f5:bf:f0:d3:
07:56:a8:a5:68:fe:ce:99:f7:e9:a0:c3:35:43:01:19:1a:48:
8f:83:f2:cb:54:c5:ea:2b:18:b5:d4:f7:8e:07:b6:c2:6c:5b:
1b:c6:5c:01:e5:1f:18:15:00:c0:91:31:0e:ce:b7:f4:51:23:
68:6e:9e:20:56:37:54:70:2f:13:68:5c:41:0b:89:80:29:d9:
55:76:f8:67:38:3f:b5:95:34:f0:d3:91:28:28:49:ce:c0:7c:
16:7e:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:42:32 2026 by rpki-client