
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier: ceAyNL8hhieJFfk8ue5GOU+E1xarX7AtlF5gOypXwMU=
Subject key identifier: 4A:31:EC:30:6D:EE:67:B6:C4:0A:58:D6:EA:C2:5A:06:F7:78:BA:10
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0B1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number: 0A0C
Signing time: Thu 16 Apr 2026 20:13:48 +0000
Manifest this update: Thu 16 Apr 2026 20:13:47 +0000
Manifest next update: Thu 23 Apr 2026 20:13:47 +0000
Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: kycz7weHSpmRfeRvLC6mE+aZ42Ycoun6GD1LtjGscfU=)
2: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
3: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=)
4: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
5: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
6: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
7: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
8: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
9: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
10: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Apr 16 20:13:47 2026 GMT
Not After : Apr 23 20:13:47 2026 GMT
Subject: CN=69e142fb-b56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:80:33:c4:5a:b6:e6:ea:0c:d9:21:19:35:
e4:68:ba:ed:48:89:85:59:82:91:68:9c:ce:5e:b9:
64:40:0f:49:a6:11:c2:dc:d3:04:79:30:0d:3a:87:
f9:ed:a4:5c:30:e3:84:ae:03:e1:f2:dd:16:d2:60:
f1:c9:a9:23:b7:96:88:0a:99:1e:d5:05:99:ff:77:
20:97:13:4d:b1:86:49:4d:65:f9:f9:10:b8:89:9a:
15:4c:fc:50:2d:03:9b:0a:a3:13:28:b5:30:12:0a:
af:e2:84:f4:55:f3:48:9f:1d:93:e3:51:c9:5a:ca:
b5:08:17:2f:47:fb:c0:62:d9:45:9d:ea:d0:b7:0a:
15:82:5c:26:4b:6a:8d:e2:60:47:c0:ca:61:43:59:
a6:0b:fb:0e:e3:73:68:19:e4:0d:b1:86:a6:e8:9e:
49:c7:76:cf:d7:6c:96:4b:3c:85:b4:d3:a6:11:36:
c2:e7:ea:25:e6:50:4d:76:27:05:99:f4:19:e2:da:
04:a2:81:b1:54:ed:c4:bd:49:b3:f1:e4:ea:b7:79:
4e:81:f3:54:27:72:77:6e:b2:7a:d8:a7:1f:cc:e9:
89:71:16:49:ea:9e:6e:17:7d:cc:fa:85:36:2e:7e:
53:26:b8:55:1d:74:5c:e6:20:78:ec:50:e6:4e:1c:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:EC:30:6D:EE:67:B6:C4:0A:58:D6:EA:C2:5A:06:F7:78:BA:10
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:62:5b:1c:70:cc:b4:79:bb:92:ee:9e:85:c9:fe:6d:43:
a8:cd:58:c1:f5:e6:5d:a0:f8:72:4e:c5:18:b6:fe:99:63:52:
f2:35:16:09:e0:1c:09:b9:6c:aa:2c:6e:e1:9c:0a:16:08:5b:
81:65:ac:01:d0:dd:e8:ed:0d:a2:27:76:be:df:de:48:17:78:
c8:90:66:96:b5:ce:a0:20:95:0e:45:7f:a5:f2:03:30:56:fd:
97:f9:c7:bc:0d:eb:6e:7e:03:40:31:6d:67:ec:5a:26:7e:c2:
87:90:b9:dc:95:99:4c:10:21:44:64:68:0d:e4:2c:30:b0:5a:
7e:3a:b2:8b:9f:49:f5:33:b1:ad:f8:f4:b2:b0:c9:15:1c:13:
c5:d6:73:0e:17:76:98:03:55:d5:55:6a:42:ab:2c:3a:e5:9b:
cf:03:dc:93:64:b3:0f:4e:1d:cf:84:76:ed:6f:34:92:97:32:
17:a2:a0:66:83:0b:06:e9:0f:f7:d1:31:73:d5:67:ae:69:b8:
f7:59:18:39:37:69:ce:9a:14:66:21:08:e7:23:39:fc:ae:f9:
63:fe:23:8b:e9:41:e0:ef:9c:e7:48:6f:d5:10:7a:44:52:7c:
8f:f8:80:f5:1c:88:de:50:45:c4:b2:ec:71:48:86:59:e9:28:
4f:2b:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:18 2026 by rpki-client