
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json)
Hash identifier: OxoE7RfXQfPzBSc+Wzg8PylnPJ3kpzhLEYAyt89ErjM=
Subject key identifier: 8D:55:34:40:6B:42:82:34:90:6D:F8:F0:5D:63:8C:4A:5C:81:97:30
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
Manifest number: 64
Signing time: Sat 13 Jun 2026 06:37:12 +0000
Manifest this update: Sat 13 Jun 2026 06:37:11 +0000
Manifest next update: Sat 20 Jun 2026 06:37:11 +0000
Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: OznVnVMMvZH6cq5Mm7ugmRxQmj+JGB3OWi1tAtSJ+js=)
2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=)
3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Jun 13 06:37:11 2026 GMT
Not After : Jun 20 06:37:11 2026 GMT
Subject: CN=6a2cfa98-c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:10:b9:b9:ef:b8:a2:7f:de:88:3f:19:45:
b7:12:e4:39:e3:48:fa:9f:5a:95:72:6d:9f:1f:47:
3a:4a:58:ea:9b:66:5e:e9:96:c2:ff:04:f5:95:96:
fb:8a:aa:db:ab:23:1c:7a:78:50:6a:c2:92:b2:85:
58:34:7f:7d:44:fb:47:2b:a6:61:c2:f0:3b:52:cd:
76:d7:bc:bc:37:b9:2e:ab:7a:47:e6:b2:ba:ab:33:
54:32:e5:04:f7:27:9f:bd:73:9f:d3:ed:6e:73:a4:
4f:1f:87:d2:6e:b3:e2:be:d9:f2:5b:17:7e:48:b2:
a2:11:ff:fb:38:1d:bd:16:d5:4f:d5:a8:f9:e6:ad:
f6:d4:55:64:d8:10:14:33:1a:38:dd:4a:d0:69:d5:
c3:66:64:40:e0:42:cc:04:96:90:ea:e0:f5:2a:3a:
9e:30:ed:b9:12:3d:8f:9a:6e:71:d9:f9:11:e9:bd:
d4:26:42:d4:91:83:24:4b:e7:86:20:ad:3c:da:ec:
f3:30:15:a9:ee:c3:a4:70:b4:36:74:a9:9a:23:1f:
16:97:4d:cf:18:16:0e:00:e7:c0:fe:e1:ed:ff:53:
83:0e:c4:a4:b7:57:84:9e:87:a5:3d:ba:84:a1:38:
4f:f7:fa:ef:a2:ff:28:98:a1:c8:c5:83:a3:c0:c1:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:55:34:40:6B:42:82:34:90:6D:F8:F0:5D:63:8C:4A:5C:81:97:30
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f0:ce:de:33:02:cb:02:f8:f4:d5:b0:02:85:2d:30:80:f4:
58:9e:d4:80:4d:10:42:4e:ee:e9:2f:bc:11:3b:c4:dc:3c:0b:
85:7f:55:d8:1e:b5:f5:b8:d5:f3:6f:b6:dd:b0:68:96:4e:35:
24:19:bf:34:64:09:7a:6c:aa:3a:f4:03:c1:39:47:85:50:4e:
cf:65:37:7b:99:1f:a0:e3:da:e5:a4:4a:36:c4:a1:75:f6:d8:
53:e1:19:76:a9:dc:0c:af:c0:93:d7:84:2b:cf:40:52:30:80:
b3:d6:df:5a:5e:09:c7:b3:7d:c2:6c:c9:cf:e7:60:21:40:11:
bf:6d:a3:63:74:74:53:40:01:6c:d4:3f:84:b5:d1:b2:27:16:
5c:97:e3:f2:cb:1b:ea:aa:ee:90:f2:f8:6b:03:71:35:01:e1:
7b:ab:aa:18:fe:f3:40:32:45:3c:2c:f5:25:0b:db:ad:ca:20:
ff:64:46:c9:9d:c8:5d:90:33:c0:df:11:0b:ba:cf:35:be:4a:
c5:f0:12:e2:7a:0c:58:49:db:ea:2b:50:ee:77:bc:ce:0a:7b:
90:48:ed:79:8e:97:69:19:3d:2a:09:3b:a1:cf:a8:53:8b:f0:
96:11:f2:ee:57:c2:e8:30:2b:01:b5:d1:22:7d:0f:1b:55:1b:
6d:2e:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:51 2026 by rpki-client