
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier: 4qzbOFGlid6+Xnw8gdwot6aYijO5SHWJCWqvRjXlPf8=
Subject key identifier: 7D:8E:7C:4A:01:85:FD:A9:8D:06:AE:0C:E7:EA:B9:27:57:CB:D3:0A
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number: 09F4
Signing time: Sun 01 Mar 2026 23:44:32 +0000
Manifest this update: Sun 01 Mar 2026 23:44:30 +0000
Manifest next update: Sun 08 Mar 2026 23:44:30 +0000
Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: U5FN7xqt0lr9u4A0cWfN6fCNvfcIyoLouSjZBPPLXAw=)
2: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=)
3: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
4: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
6: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
8: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
10: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Mar 1 23:44:30 2026 GMT
Not After : Mar 8 23:44:30 2026 GMT
Subject: CN=69a4cf60-fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:04:5a:75:8a:d2:5b:06:38:84:51:84:5f:
de:8f:4f:85:da:9d:87:c6:ad:7d:f3:37:23:93:dc:
39:50:e8:53:bc:b0:4d:e3:9a:53:58:24:68:bd:43:
51:16:ad:0b:28:05:88:16:77:99:cc:01:39:13:41:
8c:5b:eb:28:95:a8:be:73:55:05:8f:4d:59:9e:4e:
29:47:01:24:16:dd:c9:e6:62:b7:42:e6:ef:11:c7:
ce:ba:36:a9:c9:ff:d3:5d:5a:7e:04:a6:07:84:55:
a1:8f:02:4d:1c:f4:aa:9e:8d:a9:0a:38:7e:f4:d2:
24:bd:90:17:60:fc:cb:e0:5f:51:1f:b9:ad:78:ef:
24:4b:06:90:8e:eb:63:16:db:d3:71:e4:09:da:44:
1c:11:ba:db:17:25:b9:2f:a5:c9:a6:f2:35:a6:b3:
0a:82:24:81:83:c8:5c:b6:2f:ac:20:3a:e2:99:a4:
fa:6d:9e:c4:46:3d:4c:3a:f6:c7:3d:b6:d2:91:64:
c6:bc:8d:7b:6e:15:91:cb:8b:4f:c3:ce:f7:a6:3a:
f1:a7:b8:b7:4d:42:4c:d7:89:19:78:38:e9:71:78:
44:b0:1f:b0:81:c6:c7:50:66:77:fc:62:61:7d:bc:
8b:82:bf:ea:6b:28:fb:4e:0f:60:cb:d4:a1:d6:b2:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:7C:4A:01:85:FD:A9:8D:06:AE:0C:E7:EA:B9:27:57:CB:D3:0A
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:90:c4:88:2d:ec:bd:df:bc:c1:bf:b7:03:a8:67:33:26:44:
c7:9b:c0:5c:22:8c:ea:78:76:e1:3b:c2:b8:a7:ad:c2:76:4f:
8c:ed:89:d6:d6:90:fe:9f:44:b3:44:b6:f2:42:4d:a2:a7:ef:
b3:80:50:2e:98:e6:3d:28:16:7e:e7:2e:72:95:99:fa:e9:4b:
79:ab:cd:1d:68:14:4c:4b:0b:5c:c1:e7:2e:d7:b6:f5:d1:fb:
df:ee:36:10:15:c8:fd:70:1e:82:24:7a:4b:bf:9b:b3:9e:80:
3a:09:d2:25:d4:82:0a:bb:b1:26:10:b4:08:41:8f:89:74:45:
05:f8:a9:57:7e:9a:ce:73:ad:f3:9f:94:d4:76:58:52:85:d8:
74:84:e2:75:2b:f5:d7:fd:4b:2f:c0:b5:f9:cd:d6:46:57:91:
91:ae:54:79:8f:45:1d:0d:9f:0a:d5:f1:00:05:60:92:64:79:
c8:a3:10:98:2f:28:d8:55:d9:b0:de:be:37:90:bf:8f:56:44:
20:41:c4:14:7b:cd:cb:63:5e:b2:f9:ea:d0:e2:a9:7a:97:68:
fb:18:85:00:5c:a0:4a:16:c1:de:90:39:ac:93:c7:37:f5:e4:
ea:ac:6f:30:82:87:7b:f1:80:ae:08:5e:d2:bf:aa:3b:c6:bf:
5d:4b:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:39 2026 by rpki-client