
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier: 3tBLfMcxf1HVX2sdTuqTnV131AJInoIxyaWjTmCRBtc=
Subject key identifier: 30:FA:6F:D0:4D:86:B7:C4:B9:BF:A3:C6:CF:D7:5E:94:56:42:FD:09
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number: 3590
Signing time: Sun 04 Oct 2026 14:17:20 +0000
Manifest this update: Sun 04 Oct 2026 14:17:20 +0000
Manifest next update: Sun 11 Oct 2026 14:17:20 +0000
Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: +tlfKsGpLa0cmVYiTn+xcisa50fooKeXnJVwsBulFKI=)
2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: UVjNs6Ee7f+G00eKucHkD5VRAwAYtWeaPm0YXsnnb+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
Validity
Not Before: Oct 4 14:17:20 2026 GMT
Not After : Oct 11 14:17:20 2026 GMT
Subject: CN=6ac25ff0-9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:1e:68:bd:c1:3c:1b:58:49:a4:a1:a6:3d:
64:41:c6:62:36:66:b8:79:d7:71:b3:f7:d4:10:5c:
32:7a:0c:aa:b1:41:33:44:f9:15:e6:a9:89:9c:d4:
5f:ee:60:40:f9:f9:86:d2:b3:8f:6e:44:49:6a:83:
f5:a5:c2:19:bc:4d:df:58:36:a0:df:90:fc:9c:41:
d0:18:a8:b4:d8:22:a1:ee:04:48:e8:0c:70:71:22:
b3:21:89:ab:d8:e1:f1:b4:68:7a:c7:c6:56:d8:f5:
13:97:cd:3a:66:31:b8:f2:05:af:8c:4b:51:a9:f2:
6e:9b:63:14:ef:25:fa:3e:dc:60:20:70:04:24:69:
3f:75:33:b3:1a:98:20:b0:fa:b9:6b:94:e5:38:dd:
de:ba:26:13:71:db:7a:6e:a6:8b:09:c1:ef:38:ef:
a5:30:16:9a:0f:14:c9:5c:50:66:20:ba:97:e3:67:
91:a0:36:54:80:6a:68:d3:1f:7d:35:1e:1b:21:d4:
85:16:7e:3c:0f:77:11:43:9c:ca:fc:70:c2:33:80:
25:ef:79:73:7b:f7:24:d4:13:50:c5:10:33:d5:f2:
07:13:66:79:39:91:1a:48:97:1d:26:06:d4:24:6f:
f7:f7:02:1d:56:38:aa:03:22:44:18:d8:e5:90:19:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:6F:D0:4D:86:B7:C4:B9:BF:A3:C6:CF:D7:5E:94:56:42:FD:09
X509v3 Authority Key Identifier:
keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:53:77:f3:79:26:61:d6:56:bf:2f:47:43:f8:91:2b:f9:
7b:8d:b5:2f:f8:58:b8:2d:86:95:5e:e1:29:6a:0a:bd:16:0b:
3f:c5:cb:f9:9d:24:98:55:3a:0b:20:90:90:e9:06:b5:94:fd:
c0:07:b0:da:78:47:f2:87:28:35:f3:18:e3:30:07:de:f0:5b:
ad:c7:40:a4:14:b5:d6:94:66:27:b4:da:70:d5:7b:98:b3:50:
3d:b1:e5:64:88:75:32:44:35:91:15:42:d9:2d:9a:fd:69:a3:
05:b3:cd:e6:e8:63:34:b0:61:82:b9:86:0d:6d:16:e5:9a:ea:
f9:dc:f7:9d:ea:41:73:fc:e1:2c:1b:8d:40:33:31:71:69:93:
c4:3f:fa:8a:40:2e:fb:c1:a0:83:da:f5:06:60:d5:47:45:41:
39:fa:38:4c:6d:75:a1:d6:42:82:9e:9e:b5:32:72:93:63:00:
80:2b:17:7e:ae:ef:c0:00:09:d7:60:b3:47:30:09:53:0d:63:
7a:0a:49:5d:89:58:53:3d:29:55:39:9e:c2:59:88:25:9e:1f:
b6:98:c2:d0:86:2c:44:a7:29:25:20:0e:e6:c0:5d:ec:3b:72:
f3:92:37:84:73:82:1c:5c:7f:fe:01:df:e6:12:71:ae:c8:84:
d4:04:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:06:41 2026 by rpki-client