
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json)
Hash identifier: POBu+98xY5slN7guBarjaLj9wcdW5kwlvlzvxdxpeWM=
Subject key identifier: 49:6A:A9:AE:72:47:65:5A:F3:7B:74:12:65:F1:60:CA:60:55:3F:0F
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
Manifest number: 02A7
Signing time: Sun 05 Apr 2026 01:13:13 +0000
Manifest this update: Sun 05 Apr 2026 01:13:12 +0000
Manifest next update: Sun 12 Apr 2026 01:13:12 +0000
Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: NokJEUZoyFB/W9Ev80VbC+NId43MQpyC95c/vVDah+8=)
2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: J9UUSEwKqauquMmKvfncZPjjMkXwX/cwJi3gEdCy2os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Validity
Not Before: Apr 5 01:13:12 2026 GMT
Not After : Apr 12 01:13:12 2026 GMT
Subject: CN=69d1b728-5a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:38:8b:3c:97:a5:9f:d0:ff:1b:92:0f:31:70:
a8:61:37:00:b2:2b:04:0d:42:28:2c:98:64:d1:48:
1c:27:77:0a:9f:60:46:a3:83:38:89:36:ec:5b:5d:
6a:19:b5:ad:9a:cc:56:0f:d7:b3:2e:19:2e:25:98:
9a:11:cc:4f:55:11:7d:8f:99:9d:83:87:ac:76:a6:
73:47:cf:7a:fe:fd:0f:f9:96:51:e2:45:2c:80:3d:
c2:b2:b5:e7:03:0a:da:86:ce:05:df:fd:ec:10:91:
98:85:20:5b:5b:37:56:a6:78:74:66:cc:2e:ec:d7:
7f:ed:cc:2f:40:79:1a:ce:ea:ca:02:6e:98:2a:70:
43:f3:86:aa:b1:91:90:9d:81:60:c2:e8:e1:02:89:
5e:1e:38:42:36:be:10:15:fd:4e:9f:e7:11:39:09:
58:d6:a8:d8:53:3f:09:05:3f:db:aa:9e:23:54:46:
3a:f0:f0:a0:bf:ff:67:3c:d7:dc:c6:bc:bc:c9:f4:
76:a4:e0:b7:e4:a6:c0:78:80:a3:18:9a:10:d1:26:
a5:9f:40:f6:07:4d:75:bf:a0:e7:ea:a7:ce:f9:7c:
ff:e7:32:44:d6:32:d1:f4:76:02:e4:bc:71:25:75:
49:73:a9:35:d8:6f:dc:12:e0:71:fd:52:55:b5:90:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:A9:AE:72:47:65:5A:F3:7B:74:12:65:F1:60:CA:60:55:3F:0F
X509v3 Authority Key Identifier:
keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:ad:58:c1:56:a8:91:9a:94:8f:ca:a7:82:72:45:1e:0b:
91:c7:1c:11:be:46:56:21:71:c4:92:f0:86:b3:95:45:23:17:
35:0c:59:03:06:ac:a9:85:89:8f:f2:7b:d4:67:74:98:bb:06:
a7:f5:ab:bf:7c:28:e5:f1:41:f1:a2:99:b1:b4:ab:39:58:72:
a4:3d:7c:21:27:4c:ea:9f:69:87:d1:7e:77:a5:3b:59:ac:82:
c2:aa:72:cd:e0:cb:e6:17:ec:b2:66:38:75:be:a0:13:c5:38:
b6:c5:be:0d:db:f2:16:74:2a:fa:60:cf:b5:ca:c5:3e:8e:47:
e1:0e:ba:e7:ec:c1:fd:06:5f:ee:a6:fb:3e:a9:31:79:30:65:
bf:3d:40:a5:00:8b:3b:c6:09:eb:51:15:53:83:69:58:e5:3e:
e2:fb:91:57:cf:5d:49:25:3e:35:e3:3d:07:33:6a:23:a5:b9:
45:7a:eb:b9:e7:73:9d:0c:5e:b5:17:49:b2:2f:cd:65:1f:5e:
5a:8e:87:d4:f6:59:f7:98:d7:43:f3:e6:6e:16:66:a0:3a:e8:
05:d0:51:00:ee:26:f1:54:2e:ea:4a:72:b9:09:89:5e:ef:88:
f5:a6:21:5e:9d:ad:27:fe:b2:fc:05:dd:fe:9b:04:96:02:8f:
62:f9:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:13 2026 by rpki-client