
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: ZWfPghny/zFnzl4KUS9efNsbSRSL0bp/kO/czhVsH/U=
Subject key identifier: 2A:37:E7:E5:17:AD:25:61:43:96:CC:9B:85:71:7B:D2:F7:3D:84:5D
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 0809
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 07EE
Signing time: Mon 22 Jun 2026 21:22:13 +0000
Manifest this update: Mon 22 Jun 2026 21:22:13 +0000
Manifest next update: Mon 29 Jun 2026 21:22:13 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: VNPiBKxMk6DBg3dadgyIgWBB56lwHAd/Or0y5M2cYAI=)
2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Jun 22 21:22:13 2026 GMT
Not After : Jun 29 21:22:13 2026 GMT
Subject: CN=6a39a785-8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:4a:10:b8:34:fb:7d:5a:fd:6e:97:53:2f:
7e:c9:0e:44:a1:7b:21:dc:03:9d:2f:b4:62:83:34:
b5:41:3e:50:4d:59:98:17:b8:46:80:97:e8:16:1d:
31:5e:08:f9:3e:86:62:67:1a:37:4c:69:d4:ed:8f:
36:0b:35:1a:a2:8d:9b:f7:5f:45:68:2a:4a:f9:a3:
79:42:e4:2a:a1:9a:7a:d2:6d:75:bb:07:30:5d:e3:
bb:b9:ec:fc:7b:65:e5:20:0a:39:a4:92:77:eb:1e:
79:51:fa:11:0b:39:76:12:96:a0:d9:52:e0:0f:f7:
2f:15:5b:83:b8:1e:21:ec:a7:a2:12:e9:1c:47:b6:
35:65:18:12:fc:fd:ef:4f:f5:6e:c9:9c:d7:6c:33:
63:96:76:14:3f:36:86:3a:53:9a:8a:a0:d9:73:60:
f3:ff:84:95:64:79:b7:ac:ae:b1:23:ac:80:7e:55:
ee:d1:8e:2c:52:8b:ed:3e:4b:7f:85:58:de:54:fd:
38:49:89:20:f7:0b:65:41:f2:af:dc:bc:23:e1:b4:
72:bf:85:a3:0e:a4:2a:7b:64:d4:f4:dc:20:23:d1:
bc:2f:78:5f:d8:91:98:da:9b:9e:68:b0:24:45:11:
0d:31:74:55:5e:3e:65:53:22:91:6f:d4:08:af:c5:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:E7:E5:17:AD:25:61:43:96:CC:9B:85:71:7B:D2:F7:3D:84:5D
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:bf:29:ae:cd:3e:80:22:b7:94:1c:e7:6b:6f:bc:f7:08:
ae:51:57:2c:25:e7:93:be:02:de:04:54:eb:80:08:60:2a:71:
0c:b4:bb:a4:c2:7b:04:d7:5a:56:a5:fd:c8:5d:7b:87:1a:c6:
c9:10:75:a7:33:3e:36:da:48:90:8e:94:8b:ae:76:b7:1c:5d:
6e:f9:6c:92:6e:7e:ae:10:c6:84:29:79:b9:72:8a:b9:50:39:
d1:9d:c0:c8:70:f2:68:36:ff:10:e2:5e:66:3d:50:4d:62:9e:
ef:69:5a:a7:ea:a0:b5:3d:b7:f9:e1:55:15:b1:0d:66:4f:f1:
12:a9:32:27:43:d2:d5:5a:52:12:95:bc:e2:10:f9:7f:06:46:
ce:a9:f7:30:3e:4e:d2:92:e6:a1:68:b8:98:c3:3d:c7:03:73:
3d:6b:7f:4c:39:ac:50:dd:f1:ba:27:93:49:9e:ec:62:ca:ef:
a6:4d:71:ee:c0:8c:31:a4:f3:e5:a0:1d:72:f9:48:47:ca:e0:
dc:49:2c:6f:9c:8e:1f:65:49:56:16:77:67:18:42:91:ee:50:
11:b3:9d:74:ff:3b:73:ac:99:89:67:de:5a:0b:6c:b3:9f:9a:
f6:51:e8:7c:64:97:5d:11:90:b9:fb:97:4a:8f:8d:cb:d5:18:
c5:2a:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:38 2026 by rpki-client