
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier: mHbMwOFOsZEqlRz0bZNrNPFrJCdGsL3isxXjy6BLwbA=
Subject key identifier: 2C:DC:22:46:C2:39:26:07:9B:AE:90:9F:47:09:94:C6:49:E9:86:A6
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0CB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number: 0CA4
Signing time: Thu 16 Apr 2026 18:26:02 +0000
Manifest this update: Thu 16 Apr 2026 18:26:02 +0000
Manifest next update: Thu 23 Apr 2026 18:26:02 +0000
Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: XNIymwLYOS3PivdFfmXsOUJAO9Dnf0zuI3wloW62at0=)
2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: 2My4J518BuXDlVTrUGKU/R5t7+Fy21v8HniCQ4WnhXU=)
3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: H0qqK0ftqlCO4iGmc0hYXhGbYS0nJ+mVr0nn6HNSQfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Apr 16 18:26:02 2026 GMT
Not After : Apr 23 18:26:02 2026 GMT
Subject: CN=69e129ba-5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:96:a9:68:44:56:44:61:80:f0:72:85:15:
4a:6d:36:3c:39:12:86:d9:c5:a6:db:00:49:be:5f:
39:c4:cf:60:3b:7e:64:52:ca:5b:57:3e:f1:f9:21:
68:bf:ef:b3:29:d5:e6:3b:06:b3:52:44:7b:a1:c1:
d2:82:dd:f6:6f:fe:8c:3c:ad:eb:78:55:08:c5:85:
5f:fd:36:49:c8:b4:7c:aa:4e:39:df:0b:d0:1d:0a:
5d:ae:af:f5:2d:9d:80:b0:b6:4a:a0:56:d7:9b:d3:
e9:ac:ea:e1:df:6d:a4:12:4a:f0:9f:de:f7:e0:c4:
ba:c3:c1:e4:c1:df:97:1d:52:1e:b9:4f:51:9d:ef:
f0:63:13:76:78:f6:d6:63:37:76:4f:0f:ae:c0:29:
f8:57:5b:3d:5c:70:21:35:5f:19:4e:01:4f:34:38:
cf:01:29:06:90:14:d8:83:4e:f2:32:42:29:6b:55:
92:bc:56:75:6f:29:1e:e8:d9:01:b2:ff:e9:fb:c4:
64:8e:ed:9c:2f:ef:b5:9f:cb:3f:5b:ba:75:ee:d0:
61:d4:de:eb:2c:e0:29:ab:67:45:07:51:eb:12:d4:
31:99:29:dc:e2:e1:c7:6b:0d:96:2e:d7:b5:f3:a8:
c3:18:05:a4:88:a5:83:dc:17:bb:73:7f:46:c6:02:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:22:46:C2:39:26:07:9B:AE:90:9F:47:09:94:C6:49:E9:86:A6
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b5:c6:9f:a0:e1:9e:99:e1:92:05:36:0f:9c:be:00:fc:60:
3c:39:98:38:6b:9f:2e:20:f2:5a:e5:b5:5f:de:8f:b3:d7:d7:
0c:fe:c1:80:89:9d:44:a6:eb:fa:6a:78:79:84:98:b3:fc:83:
65:05:e1:fa:34:d8:a8:72:61:d2:30:6e:48:e9:b0:b8:74:76:
bf:c7:54:52:39:99:f3:0e:55:91:5c:ba:ca:ae:91:01:46:ef:
45:d7:f2:30:e8:e1:41:e5:43:a2:c1:50:8f:b8:38:34:70:ca:
09:34:b8:ac:55:7e:c5:dd:fe:04:10:1c:80:95:0c:52:29:78:
14:e5:21:b2:8a:31:71:d4:84:63:17:e0:1f:f9:7c:62:84:14:
32:dd:62:a6:c9:89:00:9b:17:90:f0:d4:dd:dc:72:7f:cf:aa:
ef:a1:4d:65:b0:de:1d:ad:d7:09:0f:51:eb:a1:83:0f:9d:03:
6e:ce:78:b3:97:8a:ec:d8:01:da:93:cc:8c:1a:ff:5d:00:5e:
af:3a:5c:da:f9:04:7c:b6:33:b3:8f:99:48:fb:76:9a:77:97:
82:35:9a:b5:83:5b:b7:a4:00:1b:cc:33:a6:50:86:3b:57:c3:
d8:38:c8:bf:24:b8:4c:c9:77:c6:be:c6:87:4c:9c:3f:c0:62:
1d:8d:4b:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4
QzhCNDg4NDEwHhcNMjYwNDE2MTgyNjAyWhcNMjYwNDIzMTgyNjAyWjAYMRYwFAYD
VQQDEw02OWUxMjliYS01ODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rCWqWhEVkRhgPByhRVKbTY8ORKG2cWm2wBJvl85xM9gO35kUspbVz7x+SFo
v++zKdXmOwazUkR7ocHSgt32b/6MPK3reFUIxYVf/TZJyLR8qk453wvQHQpdrq/1
LZ2AsLZKoFbXm9PprOrh322kEkrwn9734MS6w8Hkwd+XHVIeuU9Rne/wYxN2ePbW
Yzd2Tw+uwCn4V1s9XHAhNV8ZTgFPNDjPASkGkBTYg07yMkIpa1WSvFZ1byke6NkB
sv/p+8Rkju2cL++1n8s/W7p17tBh1N7rLOApq2dFB1HrEtQxmSnc4uHHaw2WLte1
86jDGAWkiKWD3Be7c39GxgKLTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzcIkbC
OSYHm66Qn0cJlMZJ6YamMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy
REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN
bVFoaDJHbXlBNVNNaTBpRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAabXGn6DhnpnhkgU2D5y+APxgPDmYOGufLiDyWuW1X96Ps9fXDP7BgImdRKbr
+mp4eYSYs/yDZQXh+jTYqHJh0jBuSOmwuHR2v8dUUjmZ8w5VkVy6yq6RAUbvRdfy
MOjhQeVDosFQj7g4NHDKCTS4rFV+xd3+BBAcgJUMUil4FOUhsooxcdSEYxfgH/l8
YoQUMt1ipsmJAJsXkPDU3dxyf8+q76FNZbDeHa3XCQ9R66GDD50Dbs54s5eK7NgB
2pPMjBr/XQBerzpc2vkEfLYzs4+ZSPt2mneXgjWatYNbt6QAG8wzplCGO1fD2DjI
vyS4TMl3xr7Gh0ycP8BiHY1L2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:27 2026 by rpki-client