
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier: Tcv0a8nbclT9b8juX/tRLfmz2/B9Vk+oYYxqp80Ppwo=
Subject key identifier: 19:04:9B:07:85:5E:31:1D:23:92:69:63:56:F2:A4:0A:21:98:8C:A8
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number: 0236
Signing time: Mon 27 Jul 2026 04:10:08 +0000
Manifest this update: Mon 27 Jul 2026 04:10:07 +0000
Manifest next update: Mon 03 Aug 2026 04:10:07 +0000
Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: me90xmGv9U/lCEdP/s5Ty0p0QBKGT3vOWpkVyo165ac=)
2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: RajIIoa2jtzMqftiD8ZX3mgcm+klrqkDaDW5z72Gd2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Validity
Not Before: Jul 27 04:10:07 2026 GMT
Not After : Aug 3 04:10:07 2026 GMT
Subject: CN=6a66da20-c680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:e1:e4:fc:82:e0:7c:a0:60:2f:1f:c1:ab:
81:fd:d8:9b:26:7a:7d:f3:f2:d7:42:b4:76:c8:78:
45:6a:2f:4b:f1:33:27:84:b6:08:5c:67:ec:ef:da:
3a:13:d0:a3:75:f7:ef:c0:7a:bd:7e:9c:52:78:2e:
f5:4f:da:38:eb:a7:45:cc:1f:09:9e:98:fe:85:39:
67:f1:47:08:22:16:50:d4:c8:ab:6a:56:9d:cf:69:
8d:29:76:18:5f:35:d3:4a:88:0b:26:2e:3d:0f:d4:
5b:c5:aa:80:b7:19:03:d9:39:33:82:31:6d:26:4e:
29:0f:6c:02:19:d9:79:32:e3:c7:1d:f2:a3:e1:05:
da:ad:cb:11:c9:9c:8d:ae:94:1b:1b:9b:c4:ad:81:
b3:63:a1:45:8c:77:d2:82:59:f6:3c:78:81:d1:03:
d1:3b:a2:86:02:12:c1:7a:68:c0:3f:88:64:fd:1e:
d4:93:58:13:5a:2d:72:96:5e:64:41:8f:ac:f4:75:
6a:53:53:ca:68:82:b0:06:5f:84:a1:58:f9:4a:a6:
bd:25:c6:50:04:f9:bb:3f:21:7f:17:44:0a:67:14:
4f:61:2e:e0:bd:d5:fb:3a:ba:e0:72:c4:22:ce:b3:
88:dc:c9:c7:0b:b8:65:48:7f:27:12:31:45:d2:cd:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:9B:07:85:5E:31:1D:23:92:69:63:56:F2:A4:0A:21:98:8C:A8
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:a3:29:b8:65:eb:07:c7:8d:89:12:c7:72:23:7d:54:f7:
41:4d:13:9c:4b:85:a6:61:b9:71:b5:2c:46:51:f7:c6:8a:20:
b1:f9:33:ca:75:ba:89:3b:40:52:6c:66:eb:26:30:ec:4c:15:
e6:6e:74:b9:de:49:3a:cb:0f:5c:9e:5c:ae:f1:fc:96:f7:65:
e1:a2:46:3e:0c:32:d7:ab:c2:c8:95:aa:de:69:b7:6c:aa:1a:
4a:ef:54:8c:b6:ae:6a:49:80:6d:9e:d7:b5:ce:17:d5:56:bd:
c1:cd:0f:0b:75:90:a9:f0:42:e7:51:86:b8:8d:c3:f1:00:5a:
52:13:6b:c0:36:e2:52:5d:27:2a:25:42:33:18:33:3f:ae:38:
de:4f:6a:ea:c1:a0:a4:d9:d3:d7:64:a6:ef:0e:f5:4f:ab:a7:
f8:4b:a4:03:6a:e9:53:1b:c8:49:3d:e1:e9:73:8c:f9:67:c1:
5d:31:5c:8f:22:7f:37:38:88:53:96:2e:ee:59:de:f6:7d:f6:
21:0c:00:b2:3a:83:ee:ff:0e:70:bb:7a:33:e3:0b:fa:2c:ac:
2f:20:11:e2:08:9f:45:c6:f1:d9:65:5f:cc:49:50:7d:8a:5b:
1b:86:c1:3e:f9:a7:bf:26:c5:41:21:55:2e:a6:ac:59:82:75:
0a:a5:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:58 2026 by rpki-client