
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: au8X08dODOg9biDQV8gnzZOwool+GM49unAJsYnd0Qg=
Subject key identifier: 43:FC:B2:65:63:91:6C:75:BC:EF:1B:61:EF:50:0D:CA:42:D8:B9:A1
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 01FB
Signing time: Fri 17 Apr 2026 02:53:01 +0000
Manifest this update: Fri 17 Apr 2026 02:53:00 +0000
Manifest next update: Fri 24 Apr 2026 02:53:00 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: 1+NqXQgm+UQuWG2NBnZZr5FjtwuPHOoGu0lGLkDHbqs=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: irHoEjr1GIUaKPYFmyQpkRMEIYv26BomyciGLejer2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Apr 17 02:53:00 2026 GMT
Not After : Apr 24 02:53:00 2026 GMT
Subject: CN=69e1a08d-fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:3f:e0:99:d5:08:71:75:66:58:8b:0e:80:
ce:01:79:e4:59:31:b2:69:ff:29:fc:99:94:25:8a:
1a:3b:83:82:ff:f1:57:f7:25:3d:3c:63:69:84:23:
27:55:7d:42:48:40:f6:d1:55:19:7e:3d:20:72:3c:
0f:13:9b:70:58:74:0f:73:2d:60:d2:f1:df:5f:30:
41:cd:06:05:63:2f:93:29:7a:4f:d2:4f:4c:52:f2:
13:35:22:60:52:8e:66:9e:88:4c:5e:be:cb:72:41:
72:7b:85:ea:2f:7c:aa:6d:b8:97:1a:42:05:25:54:
92:c1:35:28:b3:a2:14:3f:a1:31:ec:c6:ff:9b:94:
40:42:fc:fa:c7:09:5c:44:99:89:d3:51:bc:54:7c:
dd:cf:67:8c:88:7d:73:15:f1:1a:3c:39:80:e6:61:
80:24:55:fe:79:a2:a2:91:70:5f:9a:69:00:f9:e9:
47:c8:86:09:56:d0:0f:9f:bf:a1:f8:7a:03:ab:66:
7c:71:ee:1d:2f:83:e0:82:66:35:fb:62:9d:8c:dc:
db:36:ab:b3:7a:5a:0a:d2:f5:a2:80:9b:88:5c:79:
63:fc:27:a8:cf:f8:5e:12:e5:5f:a2:fd:8e:18:a1:
98:f1:e7:fa:a7:9e:03:33:08:a5:49:5c:1c:19:ce:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:B2:65:63:91:6C:75:BC:EF:1B:61:EF:50:0D:CA:42:D8:B9:A1
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:6a:7a:56:e2:23:f1:2c:71:9c:b2:ff:b0:5c:9a:96:03:
69:79:e7:57:08:94:f7:85:5a:4c:2d:8f:24:c9:7b:a2:26:4f:
48:71:d5:e5:21:cd:e1:c6:3c:44:4e:b0:f2:ad:bd:cf:f0:20:
a8:ca:f4:57:c2:66:a3:6c:11:f5:b1:b4:69:89:3c:72:af:04:
5c:1d:c9:3f:6e:44:2e:01:62:df:67:4d:bb:a6:79:b0:e8:46:
bd:b4:50:b3:2f:9e:c8:70:8f:43:66:6c:1d:e3:80:fe:3a:3c:
e5:61:b1:bf:82:23:46:b8:33:37:d4:7e:f2:e9:c9:27:ae:c7:
a1:64:3e:0b:b2:4f:ad:75:cb:bb:43:cb:7a:85:2d:a1:89:02:
89:dc:32:85:85:ab:3f:30:eb:70:18:38:f9:d8:a2:65:49:f6:
6c:d0:94:06:52:7a:56:cb:ff:d7:be:aa:e1:67:f2:56:17:93:
0e:75:fc:98:29:2c:2b:a5:40:f5:15:9a:60:3e:52:da:db:5b:
ce:27:59:6f:87:ef:47:8d:ef:e7:64:9d:21:2a:b4:3a:1e:84:
7f:c8:07:7d:c0:35:a7:b5:eb:71:8e:ea:a8:cb:7d:33:55:0b:
9e:68:26:88:70:5f:a9:3a:cc:87:7e:27:03:ea:4d:44:c0:6a:
bc:e1:e6:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD
NUJBN0MwNDEwHhcNMjYwNDE3MDI1MzAwWhcNMjYwNDI0MDI1MzAwWjAYMRYwFAYD
VQQDEw02OWUxYTA4ZC1mYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6A/4JnVCHF1ZliLDoDOAXnkWTGyaf8p/JmUJYoaO4OC//FX9yU9PGNphCMn
VX1CSED20VUZfj0gcjwPE5twWHQPcy1g0vHfXzBBzQYFYy+TKXpP0k9MUvITNSJg
Uo5mnohMXr7LckFye4XqL3yqbbiXGkIFJVSSwTUos6IUP6Ex7Mb/m5RAQvz6xwlc
RJmJ01G8VHzdz2eMiH1zFfEaPDmA5mGAJFX+eaKikXBfmmkA+elHyIYJVtAPn7+h
+HoDq2Z8ce4dL4PggmY1+2KdjNzbNquzeloK0vWigJuIXHlj/Ceoz/heEuVfov2O
GKGY8ef6p54DMwilSVwcGc4s/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP8smVj
kWx1vO8bYe9QDcpC2LmhMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx
RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz
SGRrdkFoQnY3bG5GdW53RUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGVVqelbiI/EscZyy/7BcmpYDaXnnVwiU94VaTC2PJMl7oiZPSHHV5SHN4cY8
RE6w8q29z/AgqMr0V8Jmo2wR9bG0aYk8cq8EXB3JP25ELgFi32dNu6Z5sOhGvbRQ
sy+eyHCPQ2ZsHeOA/jo85WGxv4IjRrgzN9R+8unJJ67HoWQ+C7JPrXXLu0PLeoUt
oYkCidwyhYWrPzDrcBg4+diiZUn2bNCUBlJ6Vsv/176q4WfyVheTDnX8mCksK6VA
9RWaYD5S2ttbzidZb4fvR43v52SdISq0Oh6Ef8gHfcA1p7XrcY7qqMt9M1ULnmgm
iHBfqTrMh34nA+pNRMBqvOHmkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:47 2026 by rpki-client