
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier: vU9sd7rdZhEtgrwNBdsKiqoWeoV+jBzu9m73SrFcckU=
Subject key identifier: DA:2E:51:97:7E:AE:A3:0F:FD:EB:A7:5A:D3:45:51:FB:C8:55:D2:D0
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number: 033A
Signing time: Wed 19 Aug 2026 01:24:34 +0000
Manifest this update: Wed 19 Aug 2026 01:24:33 +0000
Manifest next update: Wed 26 Aug 2026 01:24:33 +0000
Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: cmWPlZU/5BvHEUf8pZXkDsrN0krTnB7tdvq+dm2TPvA=)
2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Validity
Not Before: Aug 19 01:24:33 2026 GMT
Not After : Aug 26 01:24:33 2026 GMT
Subject: CN=6a8505d2-6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:96:19:76:1a:9d:bf:74:16:ac:49:ca:21:
22:66:f2:e3:db:1e:8e:2e:6d:b3:e9:8f:e1:17:54:
70:f8:05:da:ac:87:d4:7e:2d:9a:04:19:1c:00:30:
9c:e1:41:d2:ae:6e:6f:dd:c3:ce:21:24:da:54:83:
03:1c:28:51:1b:73:47:42:63:7e:29:5c:ce:3c:39:
23:6c:25:b8:33:61:79:78:8d:d6:2b:45:c2:96:2a:
0b:14:bf:6f:40:08:97:94:ea:80:7b:f7:a8:e4:b5:
14:fa:77:4d:81:51:11:c7:8e:94:a2:3f:c8:50:0f:
62:f7:2a:13:70:22:52:a7:47:49:27:ec:9d:65:13:
4d:2d:e3:67:fa:ee:32:f1:dd:cc:e8:fa:4f:5b:04:
c1:18:25:41:73:f5:02:40:19:52:ad:57:cf:38:34:
67:e7:16:a3:6a:4f:65:84:2d:bf:c7:a7:40:fb:1e:
40:12:4f:35:1d:ec:49:67:83:92:c2:54:61:ab:f3:
54:4b:18:01:8d:e4:42:f7:7c:bf:29:4c:29:72:fc:
81:02:70:4e:67:0e:90:bf:b5:3f:17:24:03:db:c1:
07:25:0c:90:60:da:6e:ca:bc:fc:4f:6b:94:48:2e:
97:59:63:88:e0:3a:b1:40:19:21:08:43:99:5b:0e:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:51:97:7E:AE:A3:0F:FD:EB:A7:5A:D3:45:51:FB:C8:55:D2:D0
X509v3 Authority Key Identifier:
keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:ba:7f:8f:67:8c:da:c7:86:95:d4:7e:ef:24:3a:a4:bc:
b7:f6:a4:72:cf:55:6a:83:8e:1b:c9:9c:be:cc:8e:c3:96:64:
37:29:ca:45:28:a9:95:fd:30:7d:66:51:54:42:97:67:08:3d:
c9:6c:7b:b7:09:7e:91:b7:e9:49:32:f6:92:a8:75:d3:1b:75:
d9:1c:0d:ef:35:99:e7:8b:03:07:e2:7a:f4:56:f1:e8:6c:30:
bd:7e:07:86:72:c2:28:06:49:6f:40:ad:53:f1:f2:c5:2c:0e:
e9:36:b7:85:b9:e8:08:55:28:44:3e:b6:15:c8:e5:e5:7a:6f:
4a:ae:a6:d1:24:46:be:60:67:91:78:2e:c6:43:04:1a:3b:e3:
20:d3:37:4c:62:77:84:d3:b6:a7:c0:41:62:c2:0b:28:33:7b:
21:b0:24:31:d2:6d:e4:e3:53:75:08:6f:28:02:53:f8:c1:1b:
99:bd:4c:49:aa:9c:55:39:45:e3:e9:20:ab:86:f0:d2:84:90:
e9:2c:90:4f:50:9e:c2:1f:2a:61:ec:38:13:39:2d:91:8a:01:
3b:fa:54:3a:9f:0d:9f:37:43:cc:6d:75:74:a4:0d:c5:c9:81:
51:f3:5f:9d:a9:e4:82:c3:95:cf:6a:86:34:62:95:3e:75:3f:
3c:78:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:44 2026 by rpki-client