
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json)
Hash identifier: 9RnGhinCJD2qi5ANE3mFH0fy9266JQcvIh4PE8FkqLA=
Subject key identifier: B5:68:E1:FE:5A:7A:CA:F5:1F:99:94:0E:FF:40:DE:F5:B3:C8:CB:9D
Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Certificate serial: 0EF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
Manifest number: 0EDE
Signing time: Sat 28 Feb 2026 17:47:16 +0000
Manifest this update: Sat 28 Feb 2026 17:47:16 +0000
Manifest next update: Sat 07 Mar 2026 17:47:16 +0000
Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: nvmHal77IcRrRrHsSBLrfzOOQJc+aTHXyCPzGD909nE=)
2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: SiSZPb6OU1yb02rlPI3Xfw0RamQv0tvW/lv+NHaB0e8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3825 (0xef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Validity
Not Before: Feb 28 17:47:16 2026 GMT
Not After : Mar 7 17:47:16 2026 GMT
Subject: CN=69a32a24-d9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:81:ac:e8:f9:83:7f:18:01:19:4b:ff:8c:
a6:3e:03:80:d4:ff:96:f5:c7:18:f5:1a:ca:6f:6c:
86:70:20:e8:4f:e1:a5:19:13:b2:6e:b7:ed:10:61:
ef:40:95:76:00:d9:7b:76:7e:d2:5f:68:77:49:3f:
0b:cb:4b:d7:b0:47:96:20:7f:b6:89:f6:46:f2:86:
5f:55:6e:13:36:0a:fd:c7:ab:dc:57:c4:e9:32:f8:
7a:98:2c:d6:73:70:6d:1e:c1:7c:43:67:2b:ba:9c:
9e:db:db:00:29:35:b5:97:10:ad:fb:03:86:ee:9e:
b5:a7:4b:b9:f0:7b:cd:6a:1d:71:46:43:f3:46:07:
e6:2a:76:1d:9e:80:6a:41:be:54:93:20:e4:0f:3d:
98:55:da:fa:62:94:7a:47:23:38:a4:a2:2b:52:83:
dd:e5:5e:95:d5:12:eb:98:0e:0b:e6:19:1b:fe:bc:
b5:65:f6:1a:0a:1a:b6:e0:b0:8f:92:99:3f:2b:c6:
3c:09:b4:a0:97:6e:8c:e6:9d:8b:49:45:cf:79:6b:
ac:21:18:67:fb:75:db:45:14:9a:2d:5d:85:07:21:
aa:ef:61:03:3e:5b:c3:15:2b:e0:c0:dd:d3:df:0a:
19:ba:f1:09:11:ba:ba:f5:94:92:66:16:8a:4a:8f:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:E1:FE:5A:7A:CA:F5:1F:99:94:0E:FF:40:DE:F5:B3:C8:CB:9D
X509v3 Authority Key Identifier:
keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b1:8b:18:ad:f4:03:2c:cb:89:60:98:e1:b5:f0:74:32:5e:
b2:81:84:7d:07:72:40:e3:40:14:9f:5a:25:c7:f3:3a:5e:2b:
a4:f8:49:9d:e8:64:6c:9d:42:a3:86:bf:96:3f:cc:9b:bf:12:
f4:aa:20:a5:39:ad:96:0f:c3:39:07:c0:47:73:61:45:44:d7:
5f:90:28:c1:5a:2a:c9:80:b4:d4:bd:72:90:81:28:f7:75:6a:
55:fb:6c:63:ed:7b:dc:6a:fb:72:0d:26:c6:ec:c1:2b:fd:41:
31:fa:97:ce:24:ae:d3:6a:25:ce:26:92:a6:da:cd:96:6d:77:
af:75:f7:33:56:52:57:c9:82:da:3c:99:78:f5:78:1c:c5:91:
42:a0:c1:c2:16:be:ea:ab:ee:a9:cf:f4:0d:d9:70:6e:cd:85:
ae:2c:ad:a4:2f:e3:35:e8:74:63:b7:ff:44:9e:3f:91:ce:02:
c3:7a:cf:70:d6:71:e6:33:9b:61:59:81:12:db:b0:c7:ce:87:
03:3f:80:e3:e3:3f:67:55:43:b7:a0:33:e6:14:47:9a:78:c5:
b6:95:13:5a:33:ea:ed:f1:92:d7:ff:81:92:68:18:92:df:99:
28:99:24:b4:d6:76:77:18:95:c6:85:a9:ae:7a:67:75:ae:81:
16:a7:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:31 2026 by rpki-client