
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier: k+7nsfp8uY68/MXPGXGfYk0DT2osQmqcrmiuoRCNaRs=
Subject key identifier: D3:57:D8:BE:00:AF:64:67:AA:57:CB:2E:C0:60:DC:2A:E1:F5:97:60
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number: 02F5
Signing time: Mon 21 Sep 2026 01:06:05 +0000
Manifest this update: Mon 21 Sep 2026 01:06:05 +0000
Manifest next update: Mon 28 Sep 2026 01:06:05 +0000
Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: p09cx+YtqZOT5S+/eJSxQuGJE/5w3PHRD56VSxE8h2o=)
2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
3: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Sep 21 01:06:05 2026 GMT
Not After : Sep 28 01:06:05 2026 GMT
Subject: CN=6ab082fd-70bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:9d:a9:15:b1:67:33:75:14:3c:7e:4d:1b:
33:af:bd:ca:21:2b:7a:55:a1:07:89:a8:d3:6c:61:
72:f7:1e:a9:14:07:e4:cd:cd:fe:29:04:7a:6f:93:
d4:d0:da:01:cc:65:32:e1:22:ec:da:ff:5f:e6:71:
54:74:f7:59:0c:f9:f7:44:c1:1f:a0:6d:a2:f2:5d:
2f:24:6d:ab:18:6b:5c:50:58:d5:e0:00:68:26:23:
ab:48:1b:7c:b6:da:48:0f:f4:fb:78:29:8e:ff:28:
66:18:80:23:43:ab:7d:32:eb:98:9e:f0:24:d1:da:
fc:c0:1d:e0:23:26:6a:26:b9:a6:f8:46:5b:09:33:
95:cf:81:13:9f:b7:45:b7:5c:c5:7e:9e:0f:1a:ce:
33:11:e3:cb:91:81:41:0c:c7:10:52:54:62:28:70:
76:c2:d4:27:03:44:80:8d:77:27:55:e5:4e:61:8a:
19:d5:7c:ff:95:c0:09:43:99:61:89:37:53:8c:4e:
72:49:a8:78:1b:0b:d3:45:b3:55:be:d5:53:a3:c4:
91:91:54:79:1b:81:ec:cc:98:5d:14:7c:15:8f:6e:
ea:46:8f:a8:fb:be:e9:b0:0f:8a:a0:33:0c:af:6f:
d4:5b:48:df:2a:a1:fd:c5:57:de:75:c7:02:bc:93:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:D8:BE:00:AF:64:67:AA:57:CB:2E:C0:60:DC:2A:E1:F5:97:60
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:cb:c7:38:d5:af:f0:68:19:75:5c:28:c0:f3:2a:37:95:
cb:ce:aa:c7:f5:da:0e:d6:e0:4c:14:58:d7:5f:3d:98:db:28:
75:f8:fc:f8:f4:02:07:a4:e1:72:dd:ae:39:fa:0b:34:a6:6d:
de:04:19:63:e2:e0:89:93:62:9b:ba:ff:9b:5b:24:12:6c:83:
ab:08:06:09:bd:1d:69:10:0d:0c:7f:9e:06:0d:4f:3a:f5:28:
2a:09:95:8b:24:02:86:7f:cb:be:09:98:25:dc:c6:b3:1a:24:
92:b8:29:18:0f:f1:f7:33:ab:8f:1d:8c:6a:2a:35:0f:ac:b8:
9e:39:32:30:2d:56:cb:29:24:f5:e2:8b:56:47:d9:6d:cb:99:
4c:35:58:3e:13:61:1c:13:0c:8f:ab:c7:87:2a:2b:7f:17:89:
8b:8a:83:bd:c9:a9:4b:3e:8d:dd:37:de:76:6d:39:00:3d:9a:
aa:fe:16:34:52:fb:81:d3:ab:7f:94:23:06:e8:b6:6f:64:1e:
24:08:b2:4a:97:9f:d9:9f:b2:27:a3:b9:de:f8:67:de:b4:6e:
84:df:80:52:b9:05:c5:35:14:4b:5d:47:69:30:27:2b:37:32:
7d:2c:25:a9:63:ed:79:4f:81:1a:a9:7e:72:e4:aa:ec:dc:bc:
1b:8c:23:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4
OURBNkI3RTUwHhcNMjYwOTIxMDEwNjA1WhcNMjYwOTI4MDEwNjA1WjAYMRYwFAYD
VQQDEw02YWIwODJmZC03MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3kGdqRWxZzN1FDx+TRszr73KISt6VaEHiajTbGFy9x6pFAfkzc3+KQR6b5PU
0NoBzGUy4SLs2v9f5nFUdPdZDPn3RMEfoG2i8l0vJG2rGGtcUFjV4ABoJiOrSBt8
ttpID/T7eCmO/yhmGIAjQ6t9MuuYnvAk0dr8wB3gIyZqJrmm+EZbCTOVz4ETn7dF
t1zFfp4PGs4zEePLkYFBDMcQUlRiKHB2wtQnA0SAjXcnVeVOYYoZ1Xz/lcAJQ5lh
iTdTjE5ySah4GwvTRbNVvtVTo8SRkVR5G4HszJhdFHwVj27qRo+o+77psA+KoDMM
r2/UW0jfKqH9xVfedccCvJPy1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNX2L4A
r2RnqlfLLsBg3Crh9ZdgMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2
QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i
MlBPV1l1SUFURWFKMm10LVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZibLxzjVr/BoGXVcKMDzKjeVy86qx/XaDtbgTBRY1189mNsodfj8+PQCB6Th
ct2uOfoLNKZt3gQZY+LgiZNim7r/m1skEmyDqwgGCb0daRANDH+eBg1POvUoKgmV
iyQChn/LvgmYJdzGsxokkrgpGA/x9zOrjx2Maio1D6y4njkyMC1Wyykk9eKLVkfZ
bcuZTDVYPhNhHBMMj6vHhyorfxeJi4qDvcmpSz6N3Tfedm05AD2aqv4WNFL7gdOr
f5QjBui2b2QeJAiySpef2Z+yJ6O53vhn3rRuhN+AUrkFxTUUS11HaTAnKzcyfSwl
qWPteU+BGql+cuSq7Ny8G4wjgQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:46 2026 by rpki-client