
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier: 0zL9x8CKMeKARHGBHU+KOAGJOFJGBMnzhScyxWyIb9Y=
Subject key identifier: 3C:AB:6F:2B:3E:5B:C5:01:F2:4A:19:C1:47:D3:9E:AB:A4:4F:52:6A
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial: 07A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number: 079D
Signing time: Sun 01 Mar 2026 22:24:29 +0000
Manifest this update: Sun 01 Mar 2026 22:24:28 +0000
Manifest next update: Sun 08 Mar 2026 22:24:28 +0000
Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: EcZaWzMb48MxBvfptVXfWgxCnhMskE06HtLG+AxG8ts=)
2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: 9KtZPuEFaySBfCkE/NQSz20UG0qNsgPpWhyyVzH5fGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Validity
Not Before: Mar 1 22:24:28 2026 GMT
Not After : Mar 8 22:24:28 2026 GMT
Subject: CN=69a4bc9d-c638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:11:4b:5e:fd:ff:95:46:32:88:ca:55:11:
c5:8c:69:99:6a:0f:af:44:de:a9:e5:82:47:c3:86:
ef:68:e5:72:f9:52:ff:5d:f7:d4:0d:56:ee:29:25:
91:1a:7f:8d:d0:1a:09:c2:af:f9:b6:13:3d:ff:08:
0b:d0:eb:66:ae:8b:40:48:f6:97:c0:86:89:6c:73:
84:36:87:3a:85:60:a5:fd:76:e5:87:6b:4c:1a:a8:
47:3f:b2:8a:8d:66:18:2a:ec:42:0a:14:ab:7c:09:
d9:e1:b0:db:6e:1e:6d:6a:88:65:ff:ac:84:9c:30:
4d:2f:d0:28:6e:da:8d:af:af:38:5d:db:d4:3f:65:
9d:9d:17:a6:7f:6e:96:63:cd:4a:e5:6a:6f:23:6f:
35:a2:40:95:31:f4:a1:76:86:d9:8b:c5:0d:75:49:
2a:7a:95:9a:0e:90:dc:e0:0f:8f:bc:09:82:ec:41:
8b:99:c6:30:08:b4:a1:a4:2f:59:61:89:0a:e9:f5:
df:e7:19:c4:1a:97:36:17:c7:ab:4d:63:2b:ff:00:
83:2e:24:49:ef:65:3f:42:af:03:08:c4:4c:29:00:
e8:3c:4e:5a:6c:fb:61:39:1f:c3:10:ba:5d:b1:9d:
ce:bd:45:44:c6:3f:76:31:cb:86:d9:3d:e8:c8:6b:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:6F:2B:3E:5B:C5:01:F2:4A:19:C1:47:D3:9E:AB:A4:4F:52:6A
X509v3 Authority Key Identifier:
keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:23:c8:52:2d:0b:15:68:63:36:74:c7:25:55:a9:92:a9:
81:c9:31:c7:6b:0d:98:90:00:01:f7:03:ba:fd:de:02:02:a0:
f9:b6:70:09:74:13:d4:2c:b3:6c:e5:df:70:02:70:59:23:e4:
78:06:f2:e3:24:43:1e:53:2c:22:fc:36:81:5f:40:39:08:b0:
3e:c4:d7:4c:62:d7:01:23:87:30:98:d2:06:11:07:53:3a:c7:
88:35:68:99:ef:74:99:44:ab:1c:0b:f6:e0:e4:aa:0e:07:20:
68:fe:7b:a9:f5:a1:71:64:93:1d:db:0c:20:39:3d:22:26:91:
d0:ed:23:a6:b8:50:d6:a9:ea:b7:e2:b4:ea:b4:54:3a:ad:11:
74:af:b6:2c:2e:a3:20:be:9b:0e:b6:a7:44:49:63:73:78:e0:
a3:aa:c2:81:a8:6f:1f:1b:2c:41:61:52:91:89:07:bc:45:b4:
32:2a:b1:0a:cd:0e:4e:e8:43:c5:74:0e:78:24:c4:c2:c6:2d:
d6:e0:4e:8d:53:ff:12:15:14:f8:ae:04:5f:91:84:fa:9b:95:
dd:e0:f4:ae:3e:c5:9a:10:b3:b0:0b:5e:e3:ae:40:e2:47:ac:
c2:ef:f0:e2:27:2e:f8:5f:9f:e3:6e:49:f9:2c:80:dc:26:50:
b6:14:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:42 2026 by rpki-client