
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: geg0TdPtTl7+8HyNN49daGYK36KLzk9FO24cwAD5g8w=
Subject key identifier: E2:DC:3B:D8:E0:3F:33:A3:83:B0:30:C7:75:48:BB:6A:13:77:5D:CF
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 0629
Signing time: Thu 16 Apr 2026 22:45:29 +0000
Manifest this update: Thu 16 Apr 2026 22:45:28 +0000
Manifest next update: Thu 23 Apr 2026 22:45:28 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: YbaINRLX+vPXsRFvq0rLVhkdYaApuviCsjSKHtgfDNM=)
2: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: FFO72rwWU9BzKR75I8zk3drp+LjLt3Z/rvU6gC8z1bA=)
3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: y4CGx16/3V1geEd8YpOnY1Ax9Tc9Ft8JKLmKIA1hKMk=)
4: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: CStqzXUy8vvWPF0tBQF0cSbfKZxgfhEf08S0/i8RStc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Apr 16 22:45:28 2026 GMT
Not After : Apr 23 22:45:28 2026 GMT
Subject: CN=69e16689-4380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:76:69:97:22:40:10:a9:82:b5:4c:b2:4b:
b0:f7:55:aa:ae:42:40:dc:5e:3b:ea:4e:e8:f5:dd:
2e:33:9e:b3:a3:6d:88:5c:c4:0d:e4:16:77:2b:d3:
94:0a:96:af:10:64:c8:5b:56:32:2f:ba:13:e2:97:
3f:24:37:df:be:c3:4f:73:7c:de:18:e4:8d:d2:2d:
3e:a9:74:f0:41:f1:ee:9e:3c:54:83:b1:68:df:58:
47:5f:62:13:65:b5:c6:e2:3b:d1:56:7d:0a:3e:5d:
30:9d:75:1d:f6:7e:c0:db:4a:3a:11:4a:66:02:4c:
6f:d2:90:a8:5d:2f:c3:12:f9:6d:a9:2a:71:b8:7e:
99:88:11:4f:4f:5c:4f:be:96:2b:f9:8f:5e:2b:a0:
0a:3b:1a:12:95:ba:d5:f5:e6:79:23:e6:08:8d:a9:
e1:bb:48:eb:0d:63:cb:f5:90:38:88:3b:53:9a:6f:
d5:de:56:54:e5:01:9d:76:fd:6e:5c:d2:62:50:23:
28:c3:54:1d:6e:79:a4:b6:20:0a:a1:cd:f5:80:60:
71:c4:ba:61:fb:f8:b9:30:65:ae:83:f2:f6:86:ed:
87:cf:cf:b8:c9:21:27:b1:8d:cd:15:80:da:bf:13:
3f:81:93:5d:ad:c4:90:a5:cb:97:9d:d7:17:de:2b:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:3B:D8:E0:3F:33:A3:83:B0:30:C7:75:48:BB:6A:13:77:5D:CF
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:21:4d:c3:78:0e:4d:5b:a8:bc:f1:4e:65:83:7c:69:f5:
3c:bb:98:e8:2f:4e:9a:03:3a:0c:e7:8a:48:3e:39:8d:43:d8:
54:ba:46:9b:34:5b:77:6f:0d:ce:be:45:7f:5c:fe:90:63:3c:
d7:22:54:ec:90:28:e5:0d:82:91:a3:09:8b:2f:9c:aa:3e:96:
6c:48:4f:c6:b7:12:90:08:d9:1a:c7:85:39:b0:db:a7:2d:02:
92:a6:ed:01:95:d7:a9:39:ff:cf:31:2e:e5:db:5e:16:37:db:
1f:cc:87:c5:8e:40:86:8f:87:e5:b5:66:37:48:ce:be:e5:8e:
e0:ad:c8:32:42:e0:06:f8:f0:82:0a:d7:9e:cd:28:6c:9d:cb:
cd:36:a7:67:fa:03:dd:60:c2:79:2e:b2:45:34:6a:07:dd:ac:
b1:1b:00:f4:52:d6:9e:11:15:29:15:63:e3:fe:9f:3d:a7:28:
25:8b:88:90:40:e4:a9:30:ad:d3:6b:bd:fb:b6:33:b6:78:65:
af:5f:ba:fa:39:fd:be:98:b7:5b:12:4a:da:3b:4a:e1:b7:9f:
8e:3e:10:bc:cd:ad:e5:7f:55:a7:78:3d:da:aa:26:ae:42:63:
7e:7a:eb:02:b3:7a:03:93:b7:5d:2d:b5:03:1d:a4:78:3a:3b:
f6:24:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:42 2026 by rpki-client