
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier: P2DaED3bfEGY+tR2XKOpJtjYKJ4L2AdpYJflgbjIRc8=
Subject key identifier: 2B:36:F5:58:22:97:63:43:C8:EF:17:76:59:22:06:D8:15:12:C7:83
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number: 0221
Signing time: Mon 27 Jul 2026 04:18:10 +0000
Manifest this update: Mon 27 Jul 2026 04:18:09 +0000
Manifest next update: Mon 03 Aug 2026 04:18:09 +0000
Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: wyU+6xVtB0eY95LGyJnV3oVuEMFvvYc7V9G8sohffDk=)
2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: 6/5fQKVgdzi8J2+DuKLmp0N2nLhrO/0HTpuAZFS2K3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Validity
Not Before: Jul 27 04:18:09 2026 GMT
Not After : Aug 3 04:18:09 2026 GMT
Subject: CN=6a66dc02-f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:20:ee:48:8e:c0:e7:e4:3b:b7:7b:a7:a3:
5c:cc:e6:55:5c:38:17:01:24:de:bb:d7:59:1b:47:
0a:88:e5:4f:28:5d:b6:70:b7:ce:f5:ac:3a:05:ce:
88:ab:02:a1:39:cb:bd:7b:18:dc:4e:af:65:74:a8:
9b:e8:53:61:d4:29:2f:39:25:05:98:a3:48:57:bf:
db:1a:05:75:b6:15:c4:06:80:e3:93:67:16:04:4a:
78:27:15:ea:5b:6d:7e:38:a2:ca:30:6b:fa:46:55:
60:42:91:8d:12:13:64:ab:60:43:f1:3d:1a:22:bf:
0d:af:99:90:fd:38:f0:c4:f4:27:5e:35:e3:62:6f:
d6:58:f2:4d:bf:8d:8b:2b:0d:8e:89:8d:09:fd:b3:
5d:84:77:88:fc:3b:bb:b8:75:1a:9f:96:9f:02:ae:
b1:cd:ec:eb:06:f1:05:e6:49:6b:07:7d:17:99:32:
b8:10:3c:9b:ab:8b:25:64:a1:da:11:d2:a1:c0:36:
74:22:37:be:94:89:6f:f0:bf:ad:7f:7a:2d:c6:85:
a2:0c:6e:1a:ab:c8:f0:54:e9:1c:72:a6:c0:57:e4:
70:8e:22:4e:f7:e5:c0:25:7b:9d:a9:e3:db:bc:29:
72:ad:41:f0:9a:3a:98:fd:ad:f3:96:67:47:50:1d:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:F5:58:22:97:63:43:C8:EF:17:76:59:22:06:D8:15:12:C7:83
X509v3 Authority Key Identifier:
keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:75:2e:e2:16:3d:5a:cd:2e:e9:ac:68:c3:06:ec:cb:85:4f:
b2:ab:b8:fd:cb:01:4a:67:ca:47:6f:72:f5:de:5f:79:93:74:
ac:ec:37:34:aa:fe:76:28:8a:dc:f3:1f:de:21:29:b7:ab:2e:
c7:57:7a:59:d2:84:1c:37:a3:72:2c:9f:b4:d1:af:bc:cd:64:
5e:b8:75:35:72:e4:eb:08:15:d6:6e:b5:f3:f5:e0:5f:d5:14:
37:64:a9:78:6b:86:f2:93:c5:83:11:02:e4:fc:8e:43:60:83:
2c:30:4a:48:d5:88:0c:72:c3:ab:f5:2c:64:ab:36:6c:e6:67:
1c:d7:66:93:7b:87:dc:e0:a2:e3:7a:d1:b9:52:f5:83:8a:c7:
28:63:e0:8b:76:3c:30:3b:8f:4c:02:80:f3:f2:78:dc:cd:01:
50:82:96:c1:2e:76:c6:cd:86:5f:77:2b:1f:99:24:00:ed:7d:
7c:00:36:3e:2a:a7:00:94:08:e7:84:ae:35:ee:46:b4:b4:3e:
5d:d3:d5:66:67:dd:0e:4f:a0:67:5b:c3:ed:c0:c7:55:86:c2:
9e:a4:e8:3c:fb:f9:9d:95:e8:d5:85:69:64:d7:51:b6:a4:c3:
b3:96:0a:48:4d:ce:d0:ed:c7:75:c6:3e:06:d3:97:70:11:04:
40:3f:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:59 2026 by rpki-client