
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json)
Hash identifier: 4tlXFrxTcZsVsvCo0iBFTuBKQve/FuocUuHNRcFGSTE=
Subject key identifier: 10:68:35:59:6C:2B:4C:CE:58:E6:53:6E:81:6B:68:F8:2A:B5:0C:9E
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
Manifest number: 086D
Signing time: Wed 20 May 2026 20:45:09 +0000
Manifest this update: Wed 20 May 2026 20:45:08 +0000
Manifest next update: Wed 27 May 2026 20:45:08 +0000
Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: JB7Eupv72G2GWU9LrEQujhyFCCvvzRBqIBN60ShYU60=)
2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Validity
Not Before: May 20 20:45:08 2026 GMT
Not After : May 27 20:45:08 2026 GMT
Subject: CN=6a0e1d55-c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:af:ce:37:b9:df:78:45:89:5a:20:8f:d8:
66:47:9c:6b:08:87:36:45:96:35:cb:e0:3a:91:e1:
13:32:12:78:94:f0:39:d4:9a:3f:8b:37:28:4f:98:
75:84:ea:51:37:a1:cf:da:f8:95:f0:1f:ba:69:a2:
80:97:7d:dc:a7:bd:ee:81:1e:3b:c6:da:5c:55:43:
3f:20:7d:4f:b0:4c:9e:8d:cd:9f:ee:c7:ce:e2:51:
1a:bb:d0:9f:0b:70:01:e1:0b:d0:7b:d5:30:d2:fa:
97:b0:09:01:4c:01:d6:88:f7:44:ed:c7:a7:f0:b3:
34:40:b2:93:36:c9:de:08:8f:a9:93:20:63:f8:5a:
67:aa:ff:d4:9d:2e:f5:3d:5f:42:e6:bc:94:0d:90:
77:30:9c:d6:1a:f1:ef:d3:62:ad:70:51:a1:31:87:
b8:bd:90:59:19:bf:df:86:a7:8a:b7:dc:f6:fc:75:
95:05:be:2d:19:62:0c:fa:83:4c:d8:ca:7b:d1:23:
27:d1:fd:fd:23:f9:eb:3f:53:76:8e:fc:b5:23:37:
d8:96:59:0f:47:88:82:1c:86:15:f8:49:f3:f9:dd:
32:61:26:81:40:b1:83:da:41:78:40:9a:c7:68:66:
7d:aa:5c:df:8f:2e:b4:2a:02:1d:0b:4d:ad:1a:d0:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:35:59:6C:2B:4C:CE:58:E6:53:6E:81:6B:68:F8:2A:B5:0C:9E
X509v3 Authority Key Identifier:
keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:14:81:d1:fa:99:6e:7c:eb:79:52:bd:38:c1:2a:1f:8f:
76:56:aa:d0:d2:4a:9d:e9:9d:ca:48:97:e4:e6:36:25:cb:4f:
02:a4:53:3d:20:03:ac:19:7a:6e:e9:53:d1:7d:3a:57:aa:fa:
ce:c1:60:68:e7:15:22:08:ec:db:83:1f:c9:67:20:3a:fa:49:
92:e6:17:31:c6:06:27:e3:0c:2c:bc:a4:ea:ad:eb:7c:11:9f:
10:7f:02:7a:c8:54:3e:df:b5:3d:4b:c1:39:8e:99:ee:cd:2d:
a2:f5:5c:2f:ec:19:f2:b0:42:a3:05:22:2f:d7:77:b5:99:91:
e6:70:88:be:a5:4f:9d:f4:71:c4:48:ed:b5:d6:28:b3:4d:b8:
4c:31:2b:42:b5:5f:7e:12:b9:53:fa:b8:3d:a3:dc:9c:0e:64:
ab:25:2c:9d:b2:9b:a3:2f:6e:b3:f5:c2:bd:8d:6f:15:63:15:
f7:60:98:6d:ff:99:b8:67:41:73:e8:ee:f7:e5:44:96:44:7c:
dd:46:40:70:43:75:0f:1a:0e:95:d6:8d:22:72:04:88:09:77:
c4:77:46:9c:88:24:e4:4f:9e:0b:95:58:ca:4c:61:c9:00:d2:
8c:6c:13:11:f0:f6:e9:8d:c5:b1:a0:77:04:55:71:a1:7e:7b:
39:96:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:12 2026 by rpki-client