
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json)
Hash identifier: TnCaT5EAA8z9n4wNeKWBcBD9a5euiMh1vlRVfDExp/s=
Subject key identifier: D9:91:F1:03:6B:41:5B:FB:6A:DB:0C:BD:F8:DC:FC:E8:12:E5:69:03
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
Manifest number: 089B
Signing time: Tue 18 Aug 2026 20:57:09 +0000
Manifest this update: Tue 18 Aug 2026 20:57:08 +0000
Manifest next update: Tue 25 Aug 2026 20:57:08 +0000
Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: NUSMXw0vFathe71P0lamHCPdn5BvGbOBDFg4TgZ5fTg=)
2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Validity
Not Before: Aug 18 20:57:08 2026 GMT
Not After : Aug 25 20:57:08 2026 GMT
Subject: CN=6a84c725-bb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:dd:d1:7c:c5:46:cb:d8:df:60:2d:8e:80:
8d:6f:75:3b:b9:03:f4:67:35:19:1a:52:4d:36:87:
dc:b5:83:41:0c:0f:f9:de:d5:24:5d:08:11:58:da:
44:1d:21:f4:33:01:8b:ea:4f:28:71:77:bc:45:14:
47:44:23:99:48:d1:54:a2:92:e5:47:cf:14:60:f6:
e6:bf:14:f3:2c:1a:e1:14:42:89:74:38:39:9c:19:
fe:49:3b:67:c2:03:a1:d7:7e:2e:af:1b:c8:c5:28:
8f:a4:a3:66:52:cc:2b:c2:1a:84:e3:6f:b7:42:34:
24:60:d4:a2:41:7b:b7:28:e0:35:2f:96:a6:90:45:
b9:11:f3:97:cd:aa:3c:28:8b:1b:b8:37:5b:00:f3:
1b:37:3c:20:36:b5:b4:0c:33:db:21:25:41:ab:89:
90:a7:bc:38:e9:4c:22:ec:52:fa:98:3f:84:23:7a:
41:b7:a9:21:e3:75:29:47:9f:ba:45:aa:2c:59:78:
c1:9a:68:bd:a2:2a:e4:ee:1a:61:81:a9:c9:b4:e6:
c6:c6:69:42:84:93:8b:65:47:0c:e8:8c:6b:50:d8:
ce:1d:a6:0e:b3:26:14:2e:22:b2:67:4f:82:41:6c:
53:43:c4:0d:48:00:ff:30:98:f1:e8:f5:64:50:e8:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:F1:03:6B:41:5B:FB:6A:DB:0C:BD:F8:DC:FC:E8:12:E5:69:03
X509v3 Authority Key Identifier:
keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:a6:9a:72:42:24:31:46:33:65:23:1a:11:51:41:56:52:
54:da:1b:d2:85:b9:55:b3:38:0f:21:56:3d:ef:fd:9e:0b:be:
db:8f:57:c3:d9:9e:75:20:4e:cd:fb:c1:0b:5c:a5:48:41:e2:
95:5b:64:46:a0:42:05:d6:6a:b1:46:a6:db:99:4b:bd:b1:2e:
e2:cf:5c:7a:38:ae:33:29:61:c6:54:11:9a:68:37:cb:e1:8b:
93:cb:af:8d:6a:8c:ce:e3:00:25:fd:81:a9:71:e6:7d:32:e7:
10:3c:78:92:84:69:72:33:58:ca:08:a1:03:89:d5:e4:dd:d5:
af:07:b5:1c:78:43:5c:cf:7f:cf:78:0f:ce:57:0b:67:00:07:
69:bc:69:b4:95:86:f8:fb:89:73:8a:67:7f:f8:d3:6b:37:fd:
43:1f:98:15:fe:60:02:eb:83:44:38:3a:a4:e9:b9:01:26:ab:
c3:9f:c2:f1:5e:39:ae:ae:5f:29:3f:d5:67:91:80:ce:16:8d:
e5:ae:56:3d:eb:d9:8d:44:f8:98:0b:3e:a5:46:11:00:0c:e4:
fa:5b:62:b9:f4:cf:58:ba:e9:93:9c:68:d1:dd:7c:b3:46:52:
71:cd:41:0a:ca:a2:35:05:49:d6:73:92:c7:53:1c:ce:9a:da:
d1:fe:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:50 2026 by rpki-client