
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier: 2E5NO+Fh6bX5MvmeVGGlpRFAFGihTBWyN8VFJncw6Aw=
Subject key identifier: 7D:64:09:60:3B:7F:25:2E:B0:D1:20:E4:6F:0B:BC:15:BE:4D:7E:CF
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial: 07F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number: 07EA
Signing time: Sun 26 Jul 2026 22:00:01 +0000
Manifest this update: Sun 26 Jul 2026 22:00:00 +0000
Manifest next update: Sun 02 Aug 2026 22:00:00 +0000
Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: UTt+P69+sglLEVI+TcVFbINmzYApKt3EEQOwtdlP6/0=)
2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: XmHPjbOfHoD1pV3ANoGj1UOp5hoQSRI4UyhfbzC32OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Validity
Not Before: Jul 26 22:00:00 2026 GMT
Not After : Aug 2 22:00:00 2026 GMT
Subject: CN=6a668361-1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:bd:30:1c:17:bb:e4:d0:3e:ec:5f:0f:0e:
36:56:ba:12:e1:72:cd:7c:c0:5a:b6:eb:a3:13:4b:
bf:ee:96:a0:de:9c:a8:b3:25:4a:2d:01:d1:fc:e9:
ba:b2:eb:aa:43:c3:da:cc:be:2d:70:c1:4d:70:5d:
b4:4e:48:d3:88:ad:02:44:91:54:39:c3:03:2b:ab:
00:ca:ba:6b:d9:58:74:14:f1:38:44:be:bf:05:c0:
b0:8b:6f:c7:31:89:53:af:8e:0a:2b:41:03:e4:98:
1b:60:56:d0:1e:93:5a:11:56:e0:98:fb:21:04:c9:
b2:46:ba:df:9f:4d:89:02:d8:f7:c9:5c:24:6d:cc:
29:da:04:44:d7:8b:60:29:66:94:11:de:58:2f:57:
99:c7:13:8d:cf:6b:dc:dd:06:81:16:a1:58:80:08:
6b:da:61:76:ae:58:45:44:fe:72:96:27:62:e9:34:
52:d8:ad:08:71:d4:45:f5:de:b9:a1:30:8e:18:2f:
e4:bd:8c:f4:12:91:c1:a8:89:73:d6:17:cb:50:aa:
3e:c9:04:da:5c:93:78:e5:65:9f:ed:b4:50:cb:41:
21:25:63:14:58:8f:0d:8c:85:cf:53:06:90:c6:60:
a3:1c:56:da:d4:2c:9e:af:e1:ec:5c:09:dd:f7:81:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:09:60:3B:7F:25:2E:B0:D1:20:E4:6F:0B:BC:15:BE:4D:7E:CF
X509v3 Authority Key Identifier:
keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:94:fb:43:97:e1:dd:39:5d:da:65:ee:a3:f0:a6:e8:55:6f:
b9:43:53:82:03:70:49:ba:83:25:17:9b:d1:ce:ef:de:68:fb:
fc:f9:70:35:63:f0:97:1c:f6:9f:97:d3:7b:20:4b:57:26:8c:
ec:9a:48:0d:52:df:1c:43:df:8e:6d:84:f3:50:a1:22:64:c9:
ac:fa:cd:42:3a:36:68:24:c1:5e:1f:17:99:c3:f6:bf:33:c5:
b0:f4:3c:2e:bf:16:60:b3:a8:a9:95:45:f6:55:f7:9c:d0:0d:
ea:29:34:a4:9a:9d:b2:2b:42:3b:12:73:32:e0:4c:e3:69:ab:
83:4d:6f:1a:4a:8f:19:70:53:05:77:c0:e5:60:c0:35:b1:ee:
ea:a9:23:6e:f1:68:89:19:88:d6:fb:f5:8a:ab:61:4d:af:60:
7e:c7:79:cd:1c:03:01:04:aa:73:66:5c:66:cb:19:21:27:f0:
1c:30:52:af:86:78:70:e0:52:be:b9:c8:ae:25:0e:b3:50:3c:
63:25:ac:ff:ed:69:25:33:ac:f8:0c:5c:9a:45:c3:29:22:ac:
86:cf:34:fa:66:12:34:52:07:03:e3:98:8a:10:d1:f8:7a:21:
c4:79:cd:ea:2c:b1:95:07:6f:69:d9:9b:e0:f9:e7:1a:81:35:
9b:f6:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:13 2026 by rpki-client