
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier: VT5LMe2G+CgiiU4KOqFO9KdW6+U9KFw+Lo+xzMriOao=
Subject key identifier: 79:8F:6B:59:60:C8:9C:4B:F7:F3:51:A4:1F:CA:8E:2D:73:3A:5F:E4
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial: 02FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number: 02F5
Signing time: Sun 05 Apr 2026 01:02:51 +0000
Manifest this update: Sun 05 Apr 2026 01:02:50 +0000
Manifest next update: Sun 12 Apr 2026 01:02:50 +0000
Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: M4RzDwkSYBSVz6A1F5FZwZ9+Ea73COTxB6RasRBM9po=)
2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Validity
Not Before: Apr 5 01:02:50 2026 GMT
Not After : Apr 12 01:02:50 2026 GMT
Subject: CN=69d1b4ba-2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:3c:b1:22:a1:63:05:03:fa:3c:b6:de:a1:
56:bc:a0:64:37:4a:d0:ff:d2:e1:f5:29:a2:66:2c:
cc:38:29:68:fe:16:40:7e:29:e2:3d:60:77:7a:c8:
7e:85:1f:a3:23:26:f7:ae:31:58:61:8d:fc:ec:c9:
9e:31:39:ae:cd:e1:46:46:c3:75:a2:da:99:37:5e:
ca:ff:c7:61:23:a1:f9:88:1e:a4:62:a5:e6:ef:fb:
d1:c7:47:b9:7e:b6:6b:ce:0f:43:7f:36:a0:30:23:
7a:9e:c7:e1:44:30:d9:3b:2d:40:27:69:a1:e7:eb:
e2:b5:82:c3:11:02:9a:4e:04:15:f3:d9:d8:67:62:
e9:41:ea:3c:51:9a:19:a5:07:a7:86:5b:f8:23:c7:
6b:1e:be:7c:93:69:f8:0f:5d:b7:b2:f6:41:c6:ac:
e9:3f:4a:d7:03:94:b7:58:f7:2d:3b:c5:58:c3:64:
7e:c8:cb:5e:6e:b0:cd:ba:30:ba:18:63:33:78:2c:
90:e3:1b:24:3a:51:26:3d:8a:1f:1d:15:30:1b:d0:
5e:fc:07:ff:5f:bc:9b:86:26:67:3f:20:6a:c8:c1:
8f:d6:88:d4:5a:d6:55:f0:30:d4:4e:bd:1a:05:16:
59:ed:a8:4e:ae:fb:90:d1:68:21:e3:fc:11:b1:99:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:6B:59:60:C8:9C:4B:F7:F3:51:A4:1F:CA:8E:2D:73:3A:5F:E4
X509v3 Authority Key Identifier:
keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:48:77:a0:2b:2f:dc:57:03:6e:2b:80:84:ba:b3:89:02:
80:2d:f3:eb:ad:90:b1:66:57:53:89:a5:dd:26:d9:83:3b:c9:
c2:af:17:98:dc:6b:06:e4:1c:71:51:c6:9a:12:85:0b:cc:b3:
b0:47:b3:3c:47:33:98:bc:cd:f2:76:83:42:af:9f:6a:73:9e:
d5:d9:05:be:be:a6:89:25:b6:f4:d0:9f:70:a2:4a:22:19:95:
f3:d4:ef:44:fd:e9:86:c4:46:13:5a:7a:05:e2:b3:f1:7e:f5:
68:3b:c2:9b:61:22:11:20:22:ba:1e:fd:57:e9:dd:1b:1b:d1:
5b:0b:a5:21:a9:a6:fe:b5:b5:24:bd:96:84:57:b9:00:89:3b:
a7:55:f4:b3:71:b7:40:9a:cf:c7:15:e1:b9:c3:b2:54:95:fd:
6c:61:e5:48:d7:b1:d5:00:2f:41:f5:8f:b5:fe:03:7d:aa:14:
c9:17:21:21:69:bd:7c:97:fb:1a:e8:a9:f4:60:85:f2:f6:90:
60:57:86:b8:0c:58:13:e2:c3:76:3a:a8:70:a5:38:58:c9:d8:
91:34:d0:05:45:d0:1e:15:58:6a:4b:30:ee:de:03:58:2e:6f:
f2:80:4e:c5:67:dd:ed:ca:d9:51:c1:14:87:1d:5b:80:28:3d:
ab:f0:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:03 2026 by rpki-client