
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: sdqXyLk1J904hcstKulvn4sgCwZOIowxKWmvjbF0k+I=
Subject key identifier: F5:0B:85:BD:B7:6F:4F:3F:A3:44:1B:8B:6E:73:69:22:C4:62:49:71
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 067B
Signing time: Sun 20 Sep 2026 22:28:32 +0000
Manifest this update: Sun 20 Sep 2026 22:28:32 +0000
Manifest next update: Sun 27 Sep 2026 22:28:32 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: 0OBXYik/yZswcD0ljkgmOROm0zhpXwdYEqzOceg4MfA=)
2: 33392DE2059011F1A8DF17AA3E3D8C67.roa (hash: q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=)
3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=)
4: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (hash: smzhzupHrKLINvK/TUbRvcJq4YEGD40s9iChZgILW3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Sep 20 22:28:32 2026 GMT
Not After : Sep 27 22:28:32 2026 GMT
Subject: CN=6ab05e10-9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:e6:0c:ee:ca:ea:d3:12:a7:6d:01:54:18:
a5:49:b4:59:d5:9b:7a:8a:73:d0:d5:5f:3b:61:38:
4f:7e:0b:e7:83:e8:a5:54:d9:cb:ab:21:06:14:be:
b6:c6:9b:85:93:a3:75:5d:c6:6d:9e:15:67:81:d8:
ef:e7:21:1c:e9:8d:bf:47:63:fe:df:2d:1f:9a:39:
3f:28:0c:29:62:07:a1:7b:9d:6e:16:1b:fe:3f:53:
2e:5e:1f:2f:52:08:61:47:41:25:27:ed:7e:5b:02:
8b:9e:56:05:27:68:ee:da:39:a2:07:2d:44:5f:6d:
8d:41:08:89:b2:80:71:49:bb:21:2e:40:f7:e9:cc:
f6:e5:12:31:86:04:3b:33:6d:0e:74:b9:4e:85:e7:
4f:f9:1e:2c:43:bb:73:64:8f:51:b9:e4:b6:74:7d:
fe:ac:2f:e6:ed:23:78:43:fc:88:cb:ed:7d:a6:55:
03:7a:2c:96:d9:ea:22:6f:b0:d9:67:b3:92:ad:c4:
d9:31:ea:2f:ed:d2:82:bf:55:50:d6:c7:8f:f7:0e:
df:07:b1:2d:7d:cb:64:fa:79:60:a1:4d:ac:d2:ef:
14:5d:96:36:b4:c4:c6:e5:7e:de:f8:1e:30:b7:d3:
61:c6:06:3d:a3:0d:be:58:11:44:3a:0d:9e:fc:42:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0B:85:BD:B7:6F:4F:3F:A3:44:1B:8B:6E:73:69:22:C4:62:49:71
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:16:54:d2:c2:79:c3:3f:c9:42:8c:09:28:61:99:f0:50:94:
2f:55:09:7c:c2:af:68:6e:d9:9e:c6:14:4f:77:f8:98:31:b9:
90:b3:f3:9b:6d:eb:58:92:1e:76:43:75:99:77:70:aa:de:ed:
b6:52:b7:b4:80:c7:ed:85:10:86:f1:f3:8c:95:4c:06:33:c4:
84:fc:e2:79:c1:1b:e4:98:30:94:1f:56:f5:3f:e2:ef:38:ca:
87:71:4c:06:98:1f:b5:76:e1:a2:61:f4:30:d9:3e:86:9d:2c:
08:f1:80:12:02:cb:cd:bd:44:fc:02:b8:d1:af:c3:4d:24:10:
a4:d1:bb:9e:96:04:ec:cc:38:17:74:cd:66:c1:95:55:b7:15:
b1:4c:69:eb:77:13:ff:61:42:82:b9:d0:b3:1e:3e:8e:d9:cb:
bc:6b:8d:4d:67:e0:a8:4e:6d:10:42:63:9c:2e:aa:83:98:6b:
83:e2:6a:18:63:3d:26:51:db:d9:2c:08:38:7b:37:43:e4:18:
9b:ad:b7:f9:96:d4:a2:64:4d:7b:17:61:f5:be:3f:f1:f9:94:
45:29:3c:d8:cf:8b:4c:9a:37:93:1b:9f:83:45:74:a9:f2:f5:
f4:2c:9f:18:d8:95:72:46:e2:d0:95:f6:eb:f7:0e:0d:b4:51:
01:09:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:19:58 2026 by rpki-client