
$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier: 4vJJlWMMPdFaj04xL1cHlyZPeBwF8FHlpO1dHrmTJHI=
Subject key identifier: 4A:DD:23:97:4D:A6:BD:B4:EA:6B:9D:76:6A:2D:7E:CE:D7:75:E3:E2
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial: 3543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number: 3539
Signing time: Thu 16 Apr 2026 14:17:12 +0000
Manifest this update: Thu 16 Apr 2026 14:17:11 +0000
Manifest next update: Thu 23 Apr 2026 14:17:11 +0000
Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: 1E4mfCf2a1/dtxgOON9gb51QMRkgE743bDlEIsE0XWI=)
2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: UVjNs6Ee7f+G00eKucHkD5VRAwAYtWeaPm0YXsnnb+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13635 (0x3543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
Validity
Not Before: Apr 16 14:17:11 2026 GMT
Not After : Apr 23 14:17:11 2026 GMT
Subject: CN=69e0ef68-168c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:55:ae:dd:49:f1:7b:9e:6d:25:38:8b:92:
32:ff:8f:40:8d:4d:00:ba:0d:21:56:42:1f:4d:32:
ec:91:28:27:f7:16:78:79:07:c3:5e:50:d9:04:dc:
73:23:4b:c7:63:d8:ac:dc:b0:7c:e9:51:ab:ed:3a:
c5:39:21:9f:9d:34:71:16:85:f3:d0:44:31:08:09:
26:5e:16:39:fd:e2:39:6e:68:18:9e:62:78:2c:b6:
64:9f:65:76:75:d5:82:79:57:2d:53:77:30:fd:b2:
7d:80:08:96:98:d7:dc:8e:6b:8a:20:86:28:8b:ac:
6f:0e:7a:68:af:3a:9d:88:dc:d7:5b:9d:c6:2b:12:
7a:ed:60:48:a7:6a:25:f9:19:65:89:19:7a:d2:15:
f6:a3:4c:63:68:15:8d:7e:1c:ec:f1:ef:ce:ed:a0:
33:4a:a1:25:20:4f:c0:10:f4:14:7f:32:b5:1b:d7:
51:d1:d5:29:5f:e3:be:85:81:5e:06:dc:8b:e6:ff:
3b:60:6e:1b:82:21:e1:55:78:5c:46:3a:5c:cb:ff:
5c:a4:e5:50:67:cc:5a:e0:cd:1c:56:da:b8:86:bb:
55:b8:db:b9:94:68:00:f1:04:cf:52:f9:cb:50:3e:
22:dc:13:cf:c4:21:bd:50:8e:96:50:e4:63:94:b7:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:23:97:4D:A6:BD:B4:EA:6B:9D:76:6A:2D:7E:CE:D7:75:E3:E2
X509v3 Authority Key Identifier:
keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:3d:d9:4b:75:37:ee:3b:fb:21:7a:a8:3b:0b:b5:fe:4f:
a1:0f:39:7e:1a:a4:b7:99:25:11:cb:11:2b:8f:78:c0:ca:42:
4e:f6:19:f9:4d:0a:42:a5:5c:3f:25:fb:dc:be:27:cf:cf:71:
4e:ac:08:97:bd:41:a8:a2:31:10:c2:a5:1c:f9:7b:09:e5:09:
bd:0e:cd:cd:da:ca:01:4f:c0:88:d8:80:fe:69:d4:24:54:ae:
89:ac:52:e8:25:fd:b2:ef:d0:cf:23:ad:96:cd:80:f6:17:d8:
d6:3a:c2:cc:da:2e:13:a4:8a:93:72:28:97:56:be:0e:15:d9:
84:00:8b:12:8c:07:8a:70:94:c3:50:0f:5f:aa:ff:f3:d4:9f:
62:f5:2f:72:c7:d1:6b:b7:4f:0a:29:75:d5:16:9b:c1:ea:e2:
9c:f5:6b:ed:ae:b1:47:c6:db:35:28:88:29:7e:32:fd:20:98:
d7:79:f5:97:37:8d:8c:ce:7d:25:b4:99:79:48:47:84:d3:4f:
a4:91:7d:da:9d:fe:e8:c8:34:98:13:8a:41:c7:d7:67:6b:a5:
96:1c:91:a9:5f:2f:af:02:5c:55:40:be:e4:4b:5d:c6:f4:7f:
05:b0:50:b3:4d:3e:85:26:f0:73:c3:ba:3a:47:1e:d7:b6:1c:
7d:78:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:09 2026 by rpki-client