
$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier: bclce2p1TEfSvtf8vK/MtVCDdUhk/rWCUh21+xk3ugg=
Subject key identifier: CE:2C:AA:BE:F7:96:ED:54:1B:1D:99:7E:5C:90:43:3E:78:26:66:22
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial: 076A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number: 075B
Signing time: Sat 28 Feb 2026 22:12:05 +0000
Manifest this update: Sat 28 Feb 2026 22:12:05 +0000
Manifest next update: Sat 07 Mar 2026 22:12:05 +0000
Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: WSwCPPF/vIL6oatD661fnqR5zzqL2suIGvyD9olTSoc=)
2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: rvBho3b+NrGH1nit2LzY+cS43JYXHGfNXtq+Ct5CaD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Validity
Not Before: Feb 28 22:12:05 2026 GMT
Not After : Mar 7 22:12:05 2026 GMT
Subject: CN=69a36835-ffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:40:39:97:8e:d3:5a:a7:26:62:af:ea:60:
df:f4:c1:8f:70:5a:e2:b3:21:8c:e0:67:b5:03:ae:
72:3a:eb:c6:af:e7:73:6c:ea:f6:eb:cd:ba:2b:a8:
ce:de:37:3d:d1:d4:d3:fd:0c:3a:3c:e8:e0:48:0e:
6b:6d:57:23:d9:b8:03:8e:70:f6:df:fb:f8:9b:b4:
9c:80:f6:71:50:cc:e6:f8:1e:c3:e0:f5:9e:e0:a5:
ff:f6:b5:82:04:53:69:d9:b7:54:83:b3:73:0f:5c:
45:12:5c:27:d6:d8:09:3a:ca:4c:c4:88:83:c4:92:
d3:b7:bd:f1:42:3b:be:78:b3:d0:39:43:df:89:87:
8b:76:9b:00:e1:ad:a7:f8:31:0d:9d:e8:ff:87:39:
6f:72:68:d5:46:00:fe:34:1c:b9:6b:37:c7:7b:2c:
5c:fd:b2:71:5b:0e:fd:d7:8f:f2:c6:77:05:3d:00:
ec:05:6a:3b:9d:d5:f0:f1:fb:6d:71:68:93:24:c6:
68:37:67:16:e0:8f:08:22:ce:7e:37:4a:68:ca:62:
7c:c1:e3:4a:12:a4:46:b0:e6:54:89:2a:e4:5f:19:
10:52:db:96:14:05:2b:91:fe:84:38:56:58:1e:a1:
b2:a3:cb:31:9e:69:41:60:c7:09:70:3d:86:93:94:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:AA:BE:F7:96:ED:54:1B:1D:99:7E:5C:90:43:3E:78:26:66:22
X509v3 Authority Key Identifier:
keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:e4:60:d3:06:40:0c:17:03:00:df:bd:38:88:e2:5a:26:
cf:cb:95:b1:c5:42:b3:fc:f3:9f:64:da:b7:50:e1:1d:30:ce:
03:75:f2:d0:f3:e6:49:c3:8b:d3:bb:4c:a5:94:40:74:ae:5c:
6e:cd:32:64:ee:4a:e0:a9:24:0e:29:6f:42:39:dc:c0:86:63:
de:91:fd:f6:22:e7:0d:e2:14:b4:75:b1:48:8b:6d:95:07:de:
98:5e:ce:53:a8:50:6e:43:f7:61:92:a0:93:92:dc:b6:49:58:
c2:b2:34:bd:0e:4e:5b:0a:b8:bc:a5:4a:7e:78:b8:cc:3b:bf:
d6:b0:9b:7b:82:2a:8c:f6:84:3e:7c:65:82:04:e7:8c:ad:49:
ae:d3:d9:c5:85:72:ae:6b:29:6a:a3:63:5d:44:85:0c:41:95:
e9:e5:7b:c6:5a:1b:de:70:bc:46:22:42:fb:ea:cb:db:10:13:
68:29:4d:f6:39:fe:55:58:5a:06:72:f4:aa:87:ac:30:4a:14:
cd:34:39:2c:5b:42:9c:8b:8e:7d:05:ed:a1:64:bc:22:f7:6c:
69:c6:1c:00:14:ec:b0:01:03:e9:98:88:bb:6b:7c:8b:04:a4:
91:cd:d6:9e:65:28:9c:c1:a3:14:46:b9:58:c5:3d:7d:f4:3d:
4d:d9:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:38 2026 by rpki-client