
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier: kvJpjQPiUEvGcBWVBicy5pZOW6HkVIOjXcr0UIoTSsI=
Subject key identifier: AB:A2:69:0F:A5:B8:D5:25:3A:C8:4D:86:39:15:8A:65:F5:B9:EF:50
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number: 01C4
Signing time: Thu 21 May 2026 03:50:51 +0000
Manifest this update: Thu 21 May 2026 03:50:51 +0000
Manifest next update: Thu 28 May 2026 03:50:51 +0000
Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: m77s26c7J4kywKwes4/jTCcMHETSStxfb1oC6WL2/Io=)
2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: 8ztK9WaHhwxCqfAPSsy7g03jnTlBHy5ygH9vBUeQxBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Validity
Not Before: May 21 03:50:51 2026 GMT
Not After : May 28 03:50:51 2026 GMT
Subject: CN=6a0e811b-dcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:be:4f:b6:06:07:b8:2f:40:e5:09:11:62:
63:0e:d5:e7:97:95:d1:09:24:29:54:0d:a5:18:b4:
d9:69:d9:aa:60:f7:46:2f:a1:ef:c0:58:71:be:d6:
c9:86:eb:00:b3:a3:c7:05:be:1e:6c:f8:b2:00:f9:
bc:1b:a8:60:f4:c0:72:8b:53:63:9a:a5:d8:59:bb:
cf:66:e2:21:00:e5:75:aa:86:93:f7:91:37:b7:52:
64:eb:a2:a3:1d:fb:10:0f:c9:42:6f:76:e0:5d:33:
10:08:e6:de:ed:68:69:cf:14:1f:ef:a0:2d:75:62:
c6:d1:ca:8c:a2:89:73:05:cd:b1:9e:26:1c:4d:5d:
95:93:22:0c:d5:2a:13:59:eb:d0:30:9e:99:84:dd:
b3:b0:a1:7c:5f:dd:0d:38:ae:fb:81:6e:72:8e:19:
c6:91:2e:68:81:27:0f:69:d8:e8:6f:90:9d:87:8a:
da:ff:a7:47:95:de:0a:a6:78:b0:88:6b:cb:e5:a1:
fd:87:f4:e2:2e:1e:41:bc:cf:fa:0a:96:29:c4:4f:
55:b0:16:d7:34:55:9d:d4:a1:34:cf:e0:e9:a3:f4:
22:e3:1c:e3:73:70:42:53:e5:33:72:42:81:70:b5:
60:c5:d5:8b:0c:a0:5c:6c:bf:31:be:89:fc:29:0b:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:69:0F:A5:B8:D5:25:3A:C8:4D:86:39:15:8A:65:F5:B9:EF:50
X509v3 Authority Key Identifier:
keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:74:42:28:6f:c9:a8:25:79:1a:d4:19:89:53:5f:08:22:
7e:ae:0c:0b:f7:a1:03:69:ef:1c:6d:b3:c2:5d:b8:b8:dc:51:
9c:98:35:5e:1d:13:2f:b6:f8:97:30:f8:33:96:ba:cf:ba:cc:
64:8e:80:f4:8f:74:09:70:fa:e2:33:de:f2:f1:a8:a6:71:7f:
ee:25:e7:34:ae:e8:2a:16:82:9f:e2:4d:aa:a9:bd:b7:22:fe:
e6:cf:19:e5:8b:1a:b2:3a:38:c1:ab:1f:4e:f0:5e:ba:0c:65:
65:68:26:18:50:d8:e9:20:f6:38:e7:d6:97:58:b4:73:07:34:
56:8c:42:55:02:51:db:5d:cb:4c:fb:ae:6f:ce:85:f7:b2:b6:
1f:e9:2c:d1:72:14:b5:10:0f:64:1b:94:c8:54:36:66:95:9a:
94:22:2c:10:ed:e1:a7:33:41:e3:8a:4c:19:ef:20:8d:8f:2e:
7b:1e:aa:d9:ad:96:fa:7f:03:10:66:49:e0:ff:ef:5a:65:0e:
2c:90:ef:fc:0b:ec:0c:37:0b:7b:56:25:69:8f:db:ce:28:c2:
44:11:1f:a8:3f:e3:bc:75:31:5f:4c:69:4c:96:a8:db:3c:7c:
70:51:fa:6b:ea:52:00:23:ab:71:f5:fc:ed:6a:6a:a1:45:eb:
92:f2:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:12 2026 by rpki-client