
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: MzASJwKL47gNg7ZpeYJEix6M2BpzWT16wSTRGWK2coo=
Subject key identifier: 82:9D:40:30:33:2F:8D:E1:C3:73:87:20:A5:A9:E0:CA:57:35:89:0B
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 0217
Signing time: Sat 13 Jun 2026 02:52:18 +0000
Manifest this update: Sat 13 Jun 2026 02:52:17 +0000
Manifest next update: Sat 20 Jun 2026 02:52:17 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: yV1zEB3Avc6oGIPQNhZ9U58nd87r3MK1DQw1Rv+DXP0=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: irHoEjr1GIUaKPYFmyQpkRMEIYv26BomyciGLejer2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Jun 13 02:52:17 2026 GMT
Not After : Jun 20 02:52:17 2026 GMT
Subject: CN=6a2cc5e2-a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:65:cb:3f:4d:df:0e:68:8d:1c:cf:6e:ef:
45:f1:15:5b:f7:db:d8:b4:2d:b0:7e:4b:f8:2d:bb:
8d:c0:6b:94:c7:cc:a9:b8:6e:c2:1e:7b:9f:b6:20:
f4:8d:9e:7f:39:8d:e2:bc:ff:c2:f9:3e:f3:9c:76:
47:4a:aa:7f:0f:36:5e:31:b4:db:93:b7:cc:22:52:
19:39:72:52:28:0d:ba:fa:b6:a3:fc:de:20:b1:23:
63:1f:f2:66:e2:86:e6:55:de:c3:d4:29:23:c1:bd:
02:20:9a:a1:9a:a0:ac:1b:7a:18:b7:27:4a:32:cc:
15:22:05:3e:ca:d0:ad:da:23:b6:06:4d:a3:d8:97:
0d:ad:4f:4b:71:11:4c:f2:78:e5:97:6e:46:08:92:
e3:f6:78:21:14:d9:a2:13:ea:2c:26:f2:55:69:fb:
f6:97:83:33:ae:74:42:3c:c3:ac:52:47:c2:81:c2:
55:07:9b:53:b9:f8:26:d2:53:d2:7e:67:78:eb:d2:
98:31:06:c6:33:8e:de:01:4a:0f:bc:fa:f3:07:ab:
4b:4c:4e:1e:3f:ef:ab:3b:5d:5d:da:3f:73:01:c7:
29:fe:ed:61:74:3e:76:4a:f8:78:6e:03:af:98:99:
3d:c3:fd:cc:16:f9:4a:8c:02:ee:95:b9:c6:c9:d4:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:40:30:33:2F:8D:E1:C3:73:87:20:A5:A9:E0:CA:57:35:89:0B
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ac:7a:1e:2e:05:1d:71:a3:02:14:9a:27:05:26:68:8a:61:
8c:4c:d1:13:ec:05:f6:ee:5b:d5:c9:a4:c6:4d:87:1b:c1:0d:
12:12:76:8b:f3:9e:6a:7f:3c:b4:b1:d1:8e:0c:9f:92:a6:0c:
e7:15:d9:cc:27:56:3c:84:20:cf:63:b3:44:46:d4:92:f4:3d:
24:57:fd:4d:50:0d:d8:cf:3d:47:41:22:37:06:7d:71:65:1a:
43:b1:df:25:cc:2c:99:ef:0e:80:da:11:0e:bc:f4:a4:98:33:
a9:4b:88:b8:fa:70:48:bb:61:26:74:72:98:2d:b1:bd:62:a9:
30:c7:cc:fc:74:9d:ef:cc:b8:a5:aa:f0:cf:93:d5:fb:aa:cf:
80:5a:39:3b:2a:74:b3:21:a2:b2:43:d1:74:e5:9d:68:56:02:
77:ec:e1:0e:4a:6f:06:44:7c:9f:3a:11:88:b4:2b:5d:93:46:
7d:a8:f4:6d:31:eb:aa:15:b3:d8:ba:d9:e8:3a:2f:cd:ea:74:
4d:76:c5:50:ff:21:ca:1d:5b:77:40:8c:52:18:25:6b:0d:44:
5f:63:83:83:87:93:e8:68:f0:06:95:75:0a:e2:60:95:3f:bf:
5f:27:02:e7:0a:24:e3:d7:5b:f6:6e:11:ed:d0:3c:72:dc:a9:
55:19:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:32 2026 by rpki-client