
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: e2GZaKd8PiSb4Z7d9DO3nndZ9SA56dllzDVESu9c1Hg=
Subject key identifier: 23:AD:02:5C:C0:D7:14:58:C1:90:FE:70:D9:FC:C2:30:D3:C7:97:CF
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0CA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0C9B
Signing time: Sat 04 Apr 2026 18:22:34 +0000
Manifest this update: Sat 04 Apr 2026 18:22:33 +0000
Manifest next update: Sat 11 Apr 2026 18:22:33 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: zYtyT7p2DxITdiS3/K+XOTMDGGoZlXGH9zB4FYaEks4=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: 3KMGe5qUUyYX05XayDx8IgLDNPx7Xx1E+icm0sK1QNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Validity
Not Before: Apr 4 18:22:33 2026 GMT
Not After : Apr 11 18:22:33 2026 GMT
Subject: CN=69d156e9-f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:7b:cb:4a:3b:6c:1b:e8:61:6e:58:fa:35:
be:19:f9:fb:77:a2:ed:2d:a4:5e:d9:30:ca:8a:80:
0d:e6:9e:2b:b9:58:54:06:a0:34:da:a8:8b:41:7a:
a0:3b:cf:d9:9e:1d:a3:1a:20:cc:ca:31:a1:bb:2b:
fe:c6:33:93:40:db:5b:77:2e:d1:fd:5f:5c:47:bc:
38:7e:b2:61:e7:e3:d9:77:b9:73:83:87:46:34:86:
9b:f1:09:16:b3:0e:6c:58:17:6c:e0:d8:bd:9b:9f:
f4:c4:ad:d7:9a:14:06:66:86:1c:43:b9:23:39:f0:
77:af:9a:ce:33:6d:bd:91:be:ae:60:07:0d:a2:1c:
78:6f:43:5b:f9:c0:cf:0e:6c:74:14:a2:b3:7e:30:
49:fa:47:59:ca:18:02:04:6c:1b:7c:e2:92:90:1a:
d4:19:bf:09:9e:9b:eb:ef:69:48:1a:8a:fd:2b:e1:
f7:64:ed:7c:c3:e7:05:b3:17:1e:0b:1f:f3:78:c2:
f1:4e:7e:f5:9d:04:f0:f4:1b:bc:d7:fb:47:7c:f5:
95:d9:a7:56:92:33:4b:45:a5:f7:7f:fb:24:2e:5f:
0c:6f:9f:38:4c:59:7d:42:16:86:60:35:22:2a:d8:
38:a9:51:f9:23:27:9a:6a:17:06:10:df:85:da:49:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:02:5C:C0:D7:14:58:C1:90:FE:70:D9:FC:C2:30:D3:C7:97:CF
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:3f:a1:7b:e3:d4:dc:c3:6b:fb:51:3d:74:9e:55:b9:d4:
c3:9c:82:fe:f4:35:f7:f6:9a:17:85:45:cc:f2:a0:91:1b:7b:
9d:60:98:8e:af:27:ed:53:40:8a:a9:f8:ed:e3:e6:1b:2e:a1:
e2:81:57:ca:73:ca:7a:a8:f5:e6:31:f7:cd:4e:20:48:e4:eb:
26:74:6a:d6:00:67:33:e0:d0:aa:82:1d:f0:e3:d8:af:33:01:
d8:cc:d2:d5:56:17:70:89:76:fd:50:67:07:d3:e8:94:3d:03:
36:2f:ee:05:d2:6f:99:ab:73:c2:3e:d8:41:82:97:3a:90:f8:
d4:40:70:2f:f1:ca:87:24:6a:d7:21:da:c0:1a:f6:5f:29:f1:
9e:ca:fb:c8:b0:cf:2c:b1:94:0a:e8:d7:0b:1f:bd:34:50:bb:
8a:46:45:28:ef:7f:13:c0:9c:f5:63:e8:bf:f3:3c:cb:28:4d:
56:69:6f:a9:4b:33:7c:f6:94:91:4b:95:f7:60:69:df:10:93:
7f:a2:22:83:4c:ea:5a:2e:cc:c3:cf:97:82:01:d8:dc:4f:f0:
10:ee:9f:7d:21:12:9c:86:88:90:39:48:88:29:44:24:d9:ae:
51:37:71:e3:c7:d0:0e:ce:e5:fd:06:06:f6:fb:5c:b2:af:77:
f1:84:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:43 2026 by rpki-client