
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier: vawN+mkfja4ruUwFkBfnwnkeWXDQgupoUlB+iMOM5Oc=
Subject key identifier: 41:70:5F:05:22:7A:2E:DB:07:04:02:B2:2F:CE:D7:37:C3:9D:46:61
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number: 0250
Signing time: Sun 01 Mar 2026 23:10:43 +0000
Manifest this update: Sun 01 Mar 2026 23:10:42 +0000
Manifest next update: Sun 08 Mar 2026 23:10:42 +0000
Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 3A7y+jp/zM1PA9x8TGnheYyejOGialXqcxS+Ux7wLOQ=)
2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
Validity
Not Before: Mar 1 23:10:42 2026 GMT
Not After : Mar 8 23:10:42 2026 GMT
Subject: CN=69a4c773-48d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:23:cf:4a:6e:56:60:4b:2d:73:01:08:f2:
42:59:21:48:dd:ff:a2:97:3a:80:b8:16:6d:78:13:
a7:c7:47:e4:9c:22:8f:cf:f8:8d:42:c2:0b:fb:d9:
5c:2b:d5:78:a6:3a:1e:1c:de:42:b1:a2:3e:db:1b:
55:68:55:5d:a5:27:ea:4a:cf:72:65:0f:95:b8:b1:
85:7f:fb:46:be:62:b0:6f:5e:7e:98:b2:b8:bb:7a:
db:a1:c8:86:39:26:62:96:c4:ba:84:de:67:40:23:
80:48:e6:57:c3:06:d2:1c:01:cc:09:63:49:56:e4:
09:76:59:d7:7c:88:9f:6b:a7:33:cd:2d:8b:14:d7:
23:fb:f1:d8:6b:13:b5:39:c3:f3:3d:28:fa:5f:72:
3e:cd:9d:b9:59:66:fe:08:52:61:03:87:2c:8e:ef:
de:ad:b7:7a:6e:ff:ca:7e:f8:f0:31:66:7d:0c:55:
02:4c:bf:a2:3b:82:fc:bf:7d:bb:bc:ce:c0:1f:3f:
df:2f:d3:7d:90:08:6d:11:df:e9:df:16:b8:f1:e0:
8c:f3:bf:60:01:a1:6b:31:8f:04:ae:73:66:a6:e7:
2e:fb:8e:9b:c5:be:b4:14:8f:6c:39:d2:4a:59:06:
b4:aa:35:9c:ac:cd:be:d6:b5:5f:e4:94:18:30:5f:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:5F:05:22:7A:2E:DB:07:04:02:B2:2F:CE:D7:37:C3:9D:46:61
X509v3 Authority Key Identifier:
keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:0e:70:fe:b8:1e:84:c2:0a:21:60:b0:a6:22:a9:56:7b:
04:24:e3:f8:10:cd:d8:a1:10:e3:26:74:ba:3c:10:9d:e5:e1:
7d:97:e0:6a:66:8b:2b:df:36:a5:86:b3:ca:75:78:d2:38:be:
bd:c8:fc:ee:c6:21:41:85:80:75:f5:f2:a2:78:d5:5b:d2:e2:
7c:0f:59:87:80:bf:17:5d:b7:b2:f9:a9:fa:14:b9:5f:7d:cd:
e7:71:34:27:42:14:f1:d1:3e:13:e8:55:2b:03:16:c8:25:8f:
37:f7:48:e4:10:0e:a5:24:a1:c1:30:a6:d4:e4:80:13:45:fc:
4f:b0:b1:0e:76:23:8c:f8:e1:fa:bd:57:8b:c1:ec:e3:a5:e5:
52:96:1d:97:29:b3:c0:2b:c1:d0:30:06:5d:62:a8:29:0c:15:
f9:d7:97:80:ef:fc:3f:b1:28:eb:23:10:10:f6:39:19:c8:b9:
14:4d:8f:9d:63:3c:b2:94:11:e7:f1:b2:47:62:4c:c0:19:bb:
9b:df:a2:42:01:03:15:8b:68:70:17:7d:c4:a6:f4:3b:ee:3c:
3a:28:a5:53:7b:2b:5b:19:b7:9f:54:98:ef:b8:6a:dc:d3:93:
76:84:9f:82:6c:f1:f1:bd:82:3f:85:69:6c:46:04:79:8a:46:
39:f6:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:32 2026 by rpki-client