
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json)
Hash identifier: knJotcxTNepNwR493UPk2VTIiQ1bqfMYbAh2FfUlOI4=
Subject key identifier: 81:76:28:B4:5A:DB:4F:6D:07:F5:B3:23:03:6B:44:A1:BA:33:4A:C4
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial: 0306
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
Manifest number: 0300
Signing time: Sun 05 Apr 2026 00:59:44 +0000
Manifest this update: Sun 05 Apr 2026 00:59:43 +0000
Manifest next update: Sun 12 Apr 2026 00:59:43 +0000
Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: O/GwnudRRh19MueA7rSBrEpdIjb4ej8hR2auDwUI6qg=)
2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: A4A9jMqWgL+9QRsTUypO4zM5P7/vPG6Uzz7DRltbgMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Validity
Not Before: Apr 5 00:59:43 2026 GMT
Not After : Apr 12 00:59:43 2026 GMT
Subject: CN=69d1b3ff-38e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:b4:a6:67:b9:21:50:ba:9f:8b:e5:e3:09:
a1:37:eb:bf:68:98:5f:51:32:b5:2e:77:69:e3:bc:
2b:f9:e7:d7:0a:50:85:d2:7a:19:8e:63:bb:1c:36:
23:99:6c:79:89:61:0b:1f:a1:b8:81:84:41:cb:62:
05:f4:ef:10:6e:65:19:9f:2d:7d:83:d1:1c:27:60:
aa:45:1b:26:fa:5a:71:8d:16:37:b9:57:50:54:57:
c5:53:87:96:53:f0:3b:86:f1:cf:7c:35:d7:43:e0:
14:54:cc:62:16:3e:d0:a8:c4:9e:26:5d:c3:e9:36:
47:3a:49:8f:ab:6f:f2:a6:c1:0d:e7:fb:08:0a:3b:
df:4d:e3:8e:bb:77:f9:34:51:91:f1:77:50:12:e9:
e3:0d:4e:5a:19:29:5a:d7:3a:94:57:8a:0f:b9:df:
a8:4c:7d:57:4c:eb:69:ce:2c:52:32:e2:f4:04:08:
15:51:86:fa:5d:a1:79:40:59:4c:15:cf:be:7e:25:
45:b7:a9:96:b2:5b:23:b9:19:c2:d0:1b:9a:a1:fd:
ed:cb:3f:22:ad:79:1e:52:4f:ea:fb:7e:3a:48:35:
1e:e8:62:8d:84:37:bf:e0:71:0e:03:f3:bb:4a:c2:
0a:b0:b8:d0:7e:f8:18:15:e7:30:4f:3d:e1:71:1c:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:28:B4:5A:DB:4F:6D:07:F5:B3:23:03:6B:44:A1:BA:33:4A:C4
X509v3 Authority Key Identifier:
keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:3e:d8:22:a4:e7:98:25:e5:d6:c4:29:5f:f3:7d:de:7b:
1f:a6:7c:89:34:28:5b:fa:a7:74:57:2f:24:76:a1:ec:c3:4c:
61:a7:67:b3:6d:0f:f2:2c:fa:c7:7f:49:ff:f1:ad:9e:eb:31:
34:fb:b0:3f:22:c5:a9:25:c7:6c:8a:b8:1f:48:47:3c:c2:d3:
e0:6c:c2:f0:c6:31:dd:46:e4:4e:c5:90:30:e6:9b:80:77:71:
a9:74:24:57:03:cf:e1:c3:71:4b:39:d1:41:8a:1a:8f:7a:a3:
b0:22:92:b5:5e:49:5d:ba:35:5b:ec:de:41:f2:58:1d:19:5e:
44:2a:41:9c:86:69:a5:0e:cd:b0:0f:74:0a:c2:58:03:aa:eb:
89:f9:f8:67:e9:1a:48:f0:ae:16:21:39:47:d3:09:92:06:c1:
14:23:e6:d4:9b:9d:e5:5c:89:ab:c3:01:b4:15:a2:b9:f0:41:
17:64:04:c1:d6:69:c8:08:9e:65:e6:6a:07:87:d1:45:95:ff:
d0:0d:fa:df:fb:cd:e2:bd:58:be:44:01:d9:b2:e6:66:42:ab:
33:e7:e1:13:30:35:c3:7a:b5:47:01:c7:7d:7c:ba:4a:a9:42:
2c:b1:91:4a:a1:a6:8f:39:d7:03:24:d4:cb:3f:af:d5:37:6c:
1c:69:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:35:32 2026 by rpki-client