
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier: zp+7A2zqVnVO0Apu6zwLv4ANo7nZQHqqeuHy3iEdH1M=
Subject key identifier: 58:3B:AC:00:A1:2C:96:FE:02:DF:FC:2F:75:A7:0A:AC:D2:94:B1:45
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number: 1C
Signing time: Fri 05 Jun 2026 09:20:00 +0000
Manifest this update: Fri 05 Jun 2026 09:20:00 +0000
Manifest next update: Fri 12 Jun 2026 09:20:00 +0000
Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: yWK0RQJaWROw4MG51KbZLg6FqQ51b8pLGaTFz2JlUHU=)
2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Validity
Not Before: Jun 5 09:20:00 2026 GMT
Not After : Jun 12 09:20:00 2026 GMT
Subject: CN=6a2294c0-6e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:d1:fa:f5:64:40:56:80:21:42:8e:24:9e:
d6:2e:92:31:09:a7:5f:67:e2:66:0e:b2:d7:27:de:
b3:d8:37:f4:7b:f3:6d:16:8f:0d:c9:25:7b:7b:c9:
66:26:84:ba:15:2d:dd:d6:8a:9a:05:fb:c0:11:52:
c0:09:d5:b5:3e:7a:32:fa:7f:c6:bf:40:02:eb:0f:
4b:1a:7d:1e:e9:35:ac:6c:13:ac:16:aa:c1:5f:6e:
a5:41:ee:e3:3f:16:4a:15:0d:9e:ed:77:3c:e8:50:
4a:ce:71:0c:41:51:02:81:67:61:06:4e:dc:62:6a:
87:39:5e:9e:72:4a:06:3b:15:31:9e:60:71:9d:76:
c9:76:8d:24:18:5e:3a:85:4b:bc:a8:5e:c6:3f:81:
19:02:3c:75:b8:7b:0e:fd:eb:7e:61:b3:33:98:9e:
ba:b4:38:2b:92:dd:bf:89:ee:d7:0b:ce:d0:ea:14:
72:04:ad:e2:d4:be:5c:ce:7b:ee:cd:6e:e7:8f:47:
28:d0:3f:51:02:26:6e:79:53:11:ec:f4:59:7b:f8:
97:29:f2:9e:5e:c4:3e:92:1f:36:83:0f:b0:61:2f:
33:4e:71:65:c5:a2:62:79:64:1d:dc:90:ee:9d:d9:
bc:df:63:92:43:13:b6:a6:56:93:ea:67:31:26:d7:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:AC:00:A1:2C:96:FE:02:DF:FC:2F:75:A7:0A:AC:D2:94:B1:45
X509v3 Authority Key Identifier:
keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:90:1d:f2:39:da:b1:fd:fc:d5:90:d2:9e:e5:f7:d4:1e:45:
ba:4e:04:98:a1:0f:7c:17:b1:92:de:2d:5a:a4:0d:1d:31:fb:
14:4c:09:ab:6f:ee:f8:b7:47:b9:7f:cd:58:c5:1f:55:6b:27:
9f:3e:55:5f:78:38:97:78:03:d4:3c:84:9a:01:1d:f1:c1:b6:
38:86:3e:fd:58:32:05:34:b7:69:63:65:58:1a:b6:b9:bf:75:
7e:a0:a6:12:53:26:d5:3b:9f:38:e0:12:16:c4:57:73:e2:40:
2d:e6:1e:57:c8:6f:d2:3c:fe:29:b4:89:ab:8a:37:ec:84:95:
d2:6b:ac:de:02:4a:ca:f5:2d:18:7e:58:ad:45:86:e4:3a:36:
29:60:b1:f7:90:d0:0a:03:41:6f:80:b2:55:db:ac:b8:4a:ab:
dc:32:70:18:76:f6:23:69:f0:76:e1:19:f5:9b:6a:80:6d:48:
0f:9b:6d:85:59:be:f7:4b:69:34:4b:08:f6:dc:f9:92:58:56:
57:34:e8:d3:97:64:33:9c:d6:b2:c9:c7:e1:eb:97:26:bd:de:
31:bf:28:12:ff:3e:23:ea:99:50:7b:85:e9:f4:c3:37:cb:2c:
5a:f3:86:10:e7:62:3f:d6:0e:b5:f5:37:64:06:e2:8a:2c:a3:
f2:a7:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:19 2026 by rpki-client