
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier: 4YFzE5XBLeOPDWZ1O4ia3hjwtP6rAzrFbDwW5T6Q7+o=
Subject key identifier: F2:ED:78:F5:0B:B3:B9:17:C4:4A:05:66:EB:B3:DF:87:59:D9:2A:61
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number: 063F
Signing time: Mon 02 Mar 2026 01:02:13 +0000
Manifest this update: Mon 02 Mar 2026 01:02:11 +0000
Manifest next update: Mon 09 Mar 2026 01:02:11 +0000
Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: 6YMF6DHp+DhNZV30+Ep1YZE8/occ05TqAp+gsbqbAcE=)
2: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: YSObMkEBXS6AGJ0rnW9kv0JoHduUwC+6vftJJjp6P4c=)
3: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: f58Ln8YgOMKXm+UFFvevk+7pdNWbPHPbGAfBZzTmoKo=)
4: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: rn2+8W21dCl6lnIgpMbqK+DXRVpz1iSyuq7a+y1/Ps0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Mar 2 01:02:11 2026 GMT
Not After : Mar 9 01:02:11 2026 GMT
Subject: CN=69a4e194-bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:32:fa:8f:cd:73:fb:10:c9:bc:a2:c9:71:
1b:7a:2b:71:0e:cd:ca:e4:74:9c:6c:2e:31:f4:2a:
f7:54:bf:8d:fa:ba:84:63:54:db:c8:9c:37:a0:56:
a8:27:38:d0:29:78:54:35:59:66:ad:2b:e8:5e:c7:
29:67:72:df:c2:ef:d1:4f:2a:ff:f9:3c:55:8c:68:
a0:91:82:88:ae:49:ad:c0:de:46:81:58:b9:03:e3:
7e:35:49:60:30:04:97:33:0c:0a:fe:0a:d2:40:75:
30:cf:f5:85:1e:11:d9:67:e8:06:f0:c4:9f:7f:eb:
c9:46:15:b0:ec:43:5d:21:b7:1e:9b:25:72:5d:cf:
3a:40:e0:58:97:ff:da:b7:df:31:54:fb:f6:7d:7a:
5e:89:9c:7c:d3:96:36:ec:0a:7e:f2:e7:49:3b:f4:
e1:58:7d:f3:ea:ee:fa:aa:90:66:fa:82:8d:52:69:
83:83:e6:2b:78:78:ae:29:33:1f:09:fb:21:f8:12:
07:b0:36:77:a7:f7:a7:19:9b:9b:47:65:1f:53:23:
60:6d:4b:e9:27:a0:30:7e:72:c0:6f:41:c1:2c:b6:
a2:91:8f:22:9a:be:b6:7f:9d:5c:48:6d:e2:fa:7b:
a3:74:0c:9c:94:b9:78:30:64:78:eb:05:ea:15:64:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:78:F5:0B:B3:B9:17:C4:4A:05:66:EB:B3:DF:87:59:D9:2A:61
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:56:20:91:4f:c0:ec:39:19:98:95:9c:dc:9a:40:a3:e5:ef:
61:98:dd:84:14:12:87:23:b2:e6:0e:c9:1d:9c:35:c2:5d:37:
07:a3:4a:fa:81:2b:15:ca:1c:e8:f6:d3:cd:14:64:b2:b6:63:
4d:11:4d:db:a5:87:08:78:f1:0c:cc:28:d4:5f:ef:22:13:b2:
53:36:db:52:1a:f0:da:21:d8:76:1c:57:7d:39:03:1e:7c:9d:
ca:c2:79:a4:c0:14:ef:df:86:a2:b5:fa:2d:30:68:87:57:44:
a8:1d:41:a1:fc:48:ce:e2:c9:8d:50:e6:f1:09:7a:6e:09:cd:
64:d6:b2:ce:1f:66:e7:cb:4d:63:0f:07:f2:be:34:9d:7b:d1:
3d:19:67:f7:ce:ca:cf:a8:28:95:63:3e:53:65:42:c3:c7:48:
09:8a:22:1a:2d:61:39:3a:e3:d4:64:77:c7:ad:f2:90:cd:81:
ad:99:51:16:4a:aa:d6:c3:c9:07:d1:f6:c4:9a:df:3e:e9:eb:
40:d4:bd:f8:06:d6:80:b2:68:c2:bc:db:5a:5c:be:aa:b9:f0:
d3:1b:bc:41:91:62:cf:19:15:08:d8:00:a5:52:25:18:09:b4:
22:1e:2b:47:a7:cf:52:79:10:70:d2:42:9e:a1:bb:1a:ab:a0:
d7:24:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:10:05 2026 by rpki-client