
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier: dje+4bJbbtSnJ61coyicLnMiasjVJ3/swo32jL1iH6U=
Subject key identifier: 94:D8:BA:03:F4:BD:0D:6F:57:CB:EF:06:39:24:00:2C:45:87:40:EC
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0C70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number: 0C5C
Signing time: Wed 20 May 2026 18:44:55 +0000
Manifest this update: Wed 20 May 2026 18:44:55 +0000
Manifest next update: Wed 27 May 2026 18:44:55 +0000
Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: R/DDUYC3HbXa4d31lVp9UZOrQBPZMt4gyTW5CFKSJGM=)
2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Validity
Not Before: May 20 18:44:55 2026 GMT
Not After : May 27 18:44:55 2026 GMT
Subject: CN=6a0e0127-1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:0b:9c:40:6a:c9:19:ee:5e:99:18:93:71:
73:7d:1a:5f:8c:51:a2:a3:87:d4:48:ae:06:e9:17:
2c:1b:09:fd:00:d4:e4:ed:a3:d7:d1:aa:de:fa:62:
51:a2:bb:06:0f:d7:56:18:27:f4:77:cf:93:83:f7:
5a:51:bd:f5:24:8b:1f:66:a1:f7:3f:d3:bf:64:9c:
1b:7f:fc:72:af:1f:80:dc:89:b1:2f:e5:b7:aa:34:
a0:07:99:0b:55:61:ce:57:56:e0:2d:55:4e:38:97:
04:74:be:4b:43:23:7e:80:b5:22:81:1b:fe:fe:7a:
29:cb:51:79:4d:d3:f2:70:e5:9b:9c:f0:f9:68:1a:
6f:d6:7a:f7:7f:e9:a2:da:38:a7:0d:7a:ee:15:f2:
3d:f0:49:8f:0d:12:fb:4d:c7:58:95:f6:4f:94:c7:
b8:f5:fd:b6:2d:df:29:ac:5e:50:ff:87:b0:a3:c9:
90:4e:90:1c:57:04:c6:f3:ab:9f:52:5b:f1:fe:87:
c1:59:35:aa:86:22:db:c4:b9:05:fe:2d:d1:99:43:
fd:de:a0:ad:6b:56:ab:2f:f4:d9:ba:7e:17:c8:d9:
b5:66:93:7a:50:19:68:0c:57:35:4d:45:be:4f:ca:
24:9d:0e:6e:3b:a8:06:8f:3f:f7:6e:95:a2:78:44:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:BA:03:F4:BD:0D:6F:57:CB:EF:06:39:24:00:2C:45:87:40:EC
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9b:ba:b8:cd:e2:a9:54:8d:ae:fd:f6:3e:0a:fb:ff:bd:24:
52:69:0b:b8:df:11:7c:82:72:b4:fe:32:0c:9c:1d:a4:bf:00:
43:8b:fd:2e:0d:08:a7:05:68:c0:9e:65:7f:8d:2a:c8:c5:1c:
84:2e:b3:0d:f5:5d:b8:eb:2a:e0:69:dd:b6:a7:94:f7:16:71:
0d:1a:16:47:d5:fb:e4:75:2b:48:89:09:ee:6c:0b:b6:d9:dd:
4d:59:48:1a:3d:0e:d5:05:9e:02:05:f7:40:ef:72:48:95:f3:
02:e7:b6:ec:8d:6a:e2:01:ef:80:54:63:25:92:db:99:b7:74:
2a:61:d2:10:8b:6e:60:7c:bb:4a:9e:a0:b4:e4:c5:0e:53:c6:
8b:52:0a:97:d0:0e:7d:0d:d0:6a:19:cb:cd:11:6c:6c:bf:17:
b5:a2:8d:17:e9:ee:a8:83:0f:ba:32:0c:2c:37:85:e3:47:1f:
6e:52:01:4a:8c:d4:99:6d:47:ec:93:aa:d1:d7:1b:da:3e:09:
0a:6c:69:9a:0d:40:07:ba:d5:5d:eb:67:95:66:05:93:cf:7b:
f6:14:5f:87:72:cf:f8:a6:f7:7f:0d:91:fa:7a:bc:80:a2:54:
81:25:c0:41:2e:99:8f:bc:24:d7:17:b6:1e:1e:fe:d4:e9:7d:
99:73:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:14:18 2026 by rpki-client