
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json)
Hash identifier: bpmPgRDWBcIKNuog9IMG60FCkwtnkfkK252hUpCAU94=
Subject key identifier: 34:FF:DC:BD:E5:C5:DD:B6:AE:AD:5C:E7:3E:90:C4:5F:57:8B:1F:47
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
Manifest number: 09A8
Signing time: Thu 16 Apr 2026 19:52:08 +0000
Manifest this update: Thu 16 Apr 2026 19:52:07 +0000
Manifest next update: Thu 23 Apr 2026 19:52:07 +0000
Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: eqdo+wFSI4XcNUKyKHquQuR+eFJobylXEHdqPL13MDE=)
2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Validity
Not Before: Apr 16 19:52:07 2026 GMT
Not After : Apr 23 19:52:07 2026 GMT
Subject: CN=69e13de8-6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:c7:90:d6:8a:02:07:a3:e7:48:03:d5:0c:
8f:1c:4d:71:88:23:f9:ac:4a:df:e3:6e:5f:44:12:
68:7d:e6:a4:2a:51:77:cb:a5:e6:bf:02:19:03:31:
c6:b1:40:3c:98:d4:07:f3:3a:c1:47:49:df:b7:61:
15:e8:88:b7:43:ab:2c:6a:22:27:45:11:e2:fc:d9:
ae:d8:3d:98:f9:85:ab:69:e8:1a:96:9d:7d:08:2e:
09:7f:8f:63:81:39:37:06:e3:07:0d:fd:26:52:92:
32:d3:e8:f1:ee:52:d7:64:39:d1:fa:c3:e6:f3:bb:
a1:35:8b:5d:7f:44:f7:ec:b5:0c:a5:6d:5a:c3:6e:
d3:98:85:e3:e4:8b:c9:9e:ce:53:99:48:e3:49:d4:
04:e3:70:50:a6:92:e8:60:f8:e6:88:56:aa:a4:43:
95:d9:21:76:48:e2:84:85:80:2c:d8:a7:2a:52:85:
af:53:1e:87:7e:cc:2d:51:f0:8b:e5:18:5b:2f:fa:
d6:4c:3a:20:3d:6c:ba:a2:15:2d:90:86:56:42:8a:
49:77:d2:52:20:f0:32:65:ed:e1:fe:5b:e6:1f:32:
71:f5:c8:41:ff:88:57:1e:c7:a0:3f:27:d0:6f:cc:
c3:b7:3d:30:5d:29:94:fa:e5:f4:62:6a:83:fe:a1:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FF:DC:BD:E5:C5:DD:B6:AE:AD:5C:E7:3E:90:C4:5F:57:8B:1F:47
X509v3 Authority Key Identifier:
keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:67:ad:c9:10:68:dd:9f:e5:68:8c:bf:cc:39:0d:65:30:
ba:89:d5:08:38:a1:bb:15:4a:4c:6a:b9:a0:00:53:d5:15:7f:
8e:94:89:c0:21:7c:8e:51:b1:37:c5:a5:ad:fd:f1:90:00:b8:
43:14:23:c1:63:66:2c:fc:c4:9e:f4:4a:52:7a:a8:cf:4d:c8:
39:a2:04:59:00:46:a8:79:87:b8:b9:c4:4f:2b:48:36:aa:ff:
3c:60:22:a9:e8:4f:cf:d5:a4:3b:3f:e3:82:c8:01:15:4b:d7:
e9:a0:bf:44:ae:d7:ac:c4:6d:af:35:da:41:58:41:b1:ec:66:
b2:02:8b:8c:d5:88:84:0b:33:6e:d8:73:88:2b:d0:48:37:08:
68:23:9e:91:d5:bb:d3:62:f9:3b:cd:30:fd:20:14:0a:8a:3c:
53:98:3f:07:6b:d0:a3:24:6c:0d:fe:2b:99:b2:81:c6:f3:76:
2a:10:16:56:c3:5c:7e:69:a5:84:9f:a6:44:47:42:09:94:51:
5f:d0:e2:fa:87:9c:cd:5e:0b:22:e3:e4:79:54:46:01:bf:0f:
48:97:e8:f6:9a:ef:e2:d3:4a:04:aa:25:94:9d:64:bc:37:d6:
ca:ad:1e:29:1c:4f:db:7f:fc:e7:f4:54:58:33:9a:61:2f:5e:
b3:c4:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:35 2026 by rpki-client