
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json)
Hash identifier: k9Kz701kt9x2jPo/mZtu192shcOZVHbVwFuIgj/XZV0=
Subject key identifier: 16:63:82:E7:AD:21:5E:5C:DC:AF:02:B1:B7:E8:49:86:F6:73:D0:8C
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
Manifest number: 010C
Signing time: Sun 05 Apr 2026 05:25:51 +0000
Manifest this update: Sun 05 Apr 2026 05:25:50 +0000
Manifest next update: Sun 12 Apr 2026 05:25:50 +0000
Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: iaMkSk3Ol8+B5h99IOdS1cdiT+guf2g5wmZC2fhEIiA=)
2: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=)
3: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Validity
Not Before: Apr 5 05:25:50 2026 GMT
Not After : Apr 12 05:25:50 2026 GMT
Subject: CN=69d1f25f-c443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:1b:17:f4:3d:7b:86:c1:39:4a:34:83:f3:
b3:81:76:c1:89:a7:50:0e:57:fb:67:ed:91:3d:ac:
99:fc:c1:f6:50:89:1c:db:aa:69:c8:4c:e4:24:f1:
2d:11:f2:cf:93:63:be:91:bf:7b:1c:2b:38:74:6f:
26:32:6d:99:78:50:00:fa:63:9f:2b:ab:99:e4:5b:
4e:36:6c:78:f1:e7:81:82:14:4a:c7:c4:ce:8d:e1:
d8:f1:e1:b2:75:36:f9:c1:bf:2d:50:3e:54:2f:90:
48:a1:36:62:57:a6:a2:0d:f5:74:7a:ce:4f:10:42:
68:c5:97:a1:06:69:b2:bd:fb:af:9e:8d:a3:a7:da:
7f:ea:08:d7:68:1e:2d:5b:c1:6b:9f:19:d2:08:ee:
ad:d5:0f:36:0c:9e:32:d6:b0:93:4f:0c:ec:f3:fb:
24:25:f3:de:ae:d2:7c:99:f6:c5:7c:a0:85:c8:38:
b1:38:b6:fc:c4:24:be:18:e6:3b:8f:17:61:13:f0:
fd:fa:68:ce:2d:3c:a3:e2:8d:88:93:fe:f0:ac:9e:
0d:77:84:53:ea:8e:19:21:32:e1:7b:b0:54:8e:29:
46:f9:57:10:8c:2b:3f:ae:b2:24:3e:8d:9d:44:11:
82:df:de:46:9b:1b:3f:37:6f:3a:f9:6f:f6:c8:d1:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:82:E7:AD:21:5E:5C:DC:AF:02:B1:B7:E8:49:86:F6:73:D0:8C
X509v3 Authority Key Identifier:
keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:c7:b5:fe:11:65:8c:84:ab:ad:46:cd:21:81:34:5f:51:
b3:f1:80:11:f8:b1:e7:44:cd:7b:fe:6c:5b:0f:c4:fa:21:95:
13:fe:b3:60:16:bb:e9:fc:5c:74:a0:12:f0:7c:d0:93:5e:7c:
5f:57:a2:77:a8:54:ed:d1:e1:15:1c:be:49:c8:97:7d:06:36:
61:0d:35:c9:a7:ca:94:ce:c1:5f:c1:28:e6:10:c0:f2:fd:74:
22:27:3e:da:27:4a:64:22:0a:29:84:23:83:49:18:52:be:a4:
f2:fe:a8:00:03:e4:9d:fd:1b:82:64:ff:e3:32:30:f4:4f:80:
5d:85:ff:91:91:46:ab:b5:96:d6:f8:35:06:c7:7f:75:60:62:
00:54:32:9c:20:7a:8a:90:a1:d2:50:98:af:38:cc:a2:b1:da:
1d:1c:dd:6d:4f:57:40:13:7a:51:f2:44:1e:cb:80:4a:36:e5:
ef:31:43:cf:be:3f:07:5a:41:2c:94:5c:3f:9e:50:33:1b:c8:
41:83:35:a9:bc:01:83:a3:22:ff:7a:08:1f:ff:e8:c2:8e:a6:
43:56:f6:04:3c:69:b9:f7:12:b3:af:31:d9:c8:e6:d0:80:4e:
0a:23:8b:19:e8:86:bd:34:f9:96:fb:0b:4a:50:bb:80:28:67:
a0:de:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:03 2026 by rpki-client