
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json)
Hash identifier: U6/JSFEsdGnA9k6cQ6XE003K75QBwCYW5+w0Y3GW+W4=
Subject key identifier: 0C:70:30:97:CD:4A:72:90:81:67:B2:5C:7C:B4:0C:91:8C:41:95:FD
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
Manifest number: 05CE
Signing time: Mon 02 Mar 2026 01:00:28 +0000
Manifest this update: Mon 02 Mar 2026 01:00:26 +0000
Manifest next update: Mon 09 Mar 2026 01:00:26 +0000
Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: +aWRVedbWQvtqbl6jx6T/WCzAoM6hwxJxXtiXT8CzqM=)
2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 4nv58WeFwiY1zxyiWfVWrgEuksWPrYq1We1YAcf12uM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Validity
Not Before: Mar 2 01:00:26 2026 GMT
Not After : Mar 9 01:00:26 2026 GMT
Subject: CN=69a4e12b-40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bc:cc:89:32:98:bf:8b:50:34:b8:a0:f3:bf:
98:c8:9a:6f:d6:32:99:98:6d:b1:ce:5e:6a:d8:28:
1b:eb:17:0b:d1:48:ff:49:b5:ed:61:97:9f:5f:65:
fb:56:ca:d5:d9:4e:f2:d3:93:92:20:55:11:aa:64:
e7:f0:de:8e:fa:92:78:e5:25:01:5f:b9:8a:8e:ef:
a1:3b:22:1c:b6:63:43:c5:65:3b:32:f6:f7:ce:93:
97:58:c0:3f:85:7e:30:dd:6b:e2:6c:39:dd:08:dc:
39:68:0a:76:a8:82:11:f4:31:af:e3:c2:5e:9a:cc:
d1:d5:cd:c6:e0:1f:f2:79:77:6c:ca:1a:b9:37:6f:
8a:64:48:42:90:c0:6e:e4:2e:99:55:3c:a8:0a:6b:
44:13:2d:e0:0b:8d:d5:eb:b2:d1:e5:2a:b8:1b:02:
05:28:dd:09:81:76:c4:e6:0f:a0:cb:8d:a9:df:84:
f2:11:01:0b:16:81:c9:62:ac:bc:1e:69:90:c3:53:
b8:62:2d:4d:d0:9b:78:e8:1d:3d:23:72:49:eb:7a:
d4:58:cb:4b:88:e8:93:93:11:58:a3:98:40:4b:d1:
8e:85:79:8f:92:d4:23:35:90:ea:b9:47:bf:d7:d0:
bc:60:38:fc:af:9c:a6:f1:9d:f5:b2:ec:e5:16:81:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:30:97:CD:4A:72:90:81:67:B2:5C:7C:B4:0C:91:8C:41:95:FD
X509v3 Authority Key Identifier:
keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:68:b3:b1:c5:8d:0e:34:aa:2d:02:74:62:e6:ec:1a:af:ab:
a2:e7:92:e2:75:53:96:1a:3f:7a:a8:34:42:b5:13:56:ed:f1:
52:bb:cc:b0:4b:78:bf:aa:82:2c:c4:d0:75:b1:7d:ea:85:27:
53:6f:8b:db:c3:f2:34:59:90:bd:e8:c1:93:fe:04:84:b8:68:
8b:89:88:18:aa:c7:f9:68:32:c4:5b:e1:2d:75:fe:26:8f:e6:
d3:0b:91:1d:27:71:d7:37:70:12:90:31:12:56:c8:31:17:30:
00:ca:a8:81:f8:17:33:82:3c:70:81:3f:a4:78:ce:19:ba:c8:
2e:c7:9f:20:0b:4f:bc:74:e2:8b:05:b2:0a:ae:64:d1:7c:f7:
da:20:16:ec:c6:cb:3d:9c:ef:26:2f:68:36:5f:69:7b:3e:ec:
4b:db:f9:db:54:c2:3b:d7:1a:46:75:a2:c8:5f:8e:a3:ec:c2:
8f:57:d7:9c:4e:43:60:73:39:f2:de:af:ea:e1:39:84:aa:1f:
d5:41:6e:f3:3e:46:1c:51:e9:46:f5:08:43:61:da:29:95:54:
0f:53:4d:4e:f1:68:99:46:d7:90:c5:d6:0c:4d:fe:19:e9:23:
a0:08:a8:a6:e1:36:08:83:61:51:c1:04:30:39:ea:47:50:a2:
e9:64:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:46 2026 by rpki-client