
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier: PhbJD6OvenKIA31026jKezKp4mdjr06GDBcRbAbk2sI=
Subject key identifier: 21:68:22:E8:41:4E:EB:8C:7D:56:0A:DE:D2:25:E8:3A:1E:A3:A5:5F
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number: 0194
Signing time: Mon 02 Mar 2026 00:40:12 +0000
Manifest this update: Mon 02 Mar 2026 00:40:11 +0000
Manifest next update: Mon 09 Mar 2026 00:40:11 +0000
Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: jRc2cOiQwRpppCP81irhokssVEgSE083sNia7U3FArg=)
2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: 6pEgldrr1YtYq2k54CPHu0agjPZ4ZtHP2ppniIf4WA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Validity
Not Before: Mar 2 00:40:11 2026 GMT
Not After : Mar 9 00:40:11 2026 GMT
Subject: CN=69a4dc6c-6838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:b4:11:91:60:de:e6:63:50:ea:8f:3f:c1:
4d:27:06:87:af:3c:6a:0f:70:cd:35:2e:ed:8e:ae:
38:52:35:83:4f:a9:86:31:da:0c:70:52:01:48:e9:
7b:35:d1:b4:07:e6:69:14:45:ab:8b:54:6b:80:04:
63:9b:c3:59:3f:ca:27:6c:85:51:0b:d1:e3:81:2c:
6f:fc:54:02:5d:d6:f8:bc:5b:29:ec:4f:f3:e2:51:
a1:d7:f1:96:b6:1c:b3:a7:cc:c5:18:87:7a:4f:16:
11:57:0c:bb:4b:8d:66:63:1d:7d:bf:38:ab:bd:16:
dd:63:f5:5c:b1:4a:d7:5d:58:a8:f7:ce:5a:be:71:
e9:5a:de:cc:a1:71:8f:18:ba:da:22:1a:3d:8d:60:
d7:6c:04:ab:84:42:7a:45:a4:df:43:b2:f1:31:8f:
c4:04:e4:17:e3:27:25:73:75:13:86:84:25:46:02:
79:65:6c:d4:b9:34:59:99:ad:bb:d3:97:d4:b8:9f:
76:d9:56:75:04:5b:d3:b4:36:bf:89:25:41:bf:4d:
6d:3c:1f:4d:82:1f:4b:25:46:0c:64:27:e1:c1:d4:
21:8b:d4:e8:11:88:c5:70:4a:39:fb:fb:20:6a:af:
1f:6a:18:fc:32:e8:93:2c:1c:a9:f2:9a:4b:9f:d2:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:22:E8:41:4E:EB:8C:7D:56:0A:DE:D2:25:E8:3A:1E:A3:A5:5F
X509v3 Authority Key Identifier:
keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b6:0b:6d:57:1e:0b:70:d6:0a:88:a2:ab:f4:e2:d8:29:98:
ea:8d:91:dc:56:48:ca:c5:b0:26:cf:ef:2b:8e:b4:05:92:32:
ed:55:e9:7a:d4:34:ca:43:f3:47:27:29:69:c9:c1:48:25:dc:
39:90:34:32:ed:bb:ed:6b:46:26:c6:b0:28:bd:b5:88:4c:73:
1b:09:42:85:38:a8:ac:ba:b6:f3:c4:a9:70:10:04:44:11:5b:
43:d7:85:5a:52:70:f9:df:e9:79:9d:d0:71:92:c3:20:ae:d5:
c6:c0:9d:62:62:81:99:cf:a1:a7:b1:fa:a8:1f:31:2a:3d:cd:
11:0f:16:1c:35:fb:d6:c8:92:a5:ca:83:bd:c1:57:41:5e:ab:
24:9b:b6:b3:9a:62:db:fe:9c:37:ec:65:2c:be:a6:5c:7e:8f:
95:a9:cc:6e:ca:2e:7a:d4:41:74:7d:bd:ef:99:d5:a6:20:c7:
bd:5a:40:0d:79:f8:54:fe:f7:dd:3b:8b:a0:50:f3:ee:dd:3f:
71:c5:bd:a4:b0:5c:32:93:41:a6:eb:5b:fe:1b:c0:15:e4:d7:
fa:be:a0:9f:0a:1f:45:47:72:e3:11:9d:7a:a1:1f:6d:f2:03:
f3:08:2e:e0:30:2b:af:05:ec:e4:99:16:97:6f:0f:57:85:4a:
d4:0f:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:37 2026 by rpki-client