
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier: kSl46BuKaBzm3gzWk2YvBbKleiaO6StZk3NvFkwro+k=
Subject key identifier: 1D:F9:86:78:58:E6:8B:25:F0:D9:F1:3F:0F:7D:79:D3:E2:C2:A3:46
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0B3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number: 0A2D
Signing time: Fri 12 Jun 2026 20:17:33 +0000
Manifest this update: Fri 12 Jun 2026 20:17:33 +0000
Manifest next update: Fri 19 Jun 2026 20:17:33 +0000
Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: e/vxyG89KJt5z0YGr6UllUvLyKLZ/Hz9jeAVSdAUZFc=)
2: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
3: B77F1302558911F1BE2A2CA290833773.roa (hash: CEXatkdTSyppry95vayEwKgiQ+BULuh8Jyp5xE7k0Ak=)
4: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
5: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
6: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: r15uqv6WSpyGLR+Er0vvFpAbl5hiRy3inQvvu0xjv6k=)
7: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
8: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
9: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
10: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
11: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Jun 12 20:17:33 2026 GMT
Not After : Jun 19 20:17:33 2026 GMT
Subject: CN=6a2c695d-c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:f4:79:a7:4f:49:62:a4:33:a9:17:77:4b:
71:3c:12:3e:b3:e9:88:8c:58:87:57:41:25:f2:3a:
0a:4a:e2:15:1f:55:cb:c0:14:f0:aa:e0:d7:46:0d:
c6:ee:1d:f6:57:81:92:d7:e8:94:eb:c4:2b:b2:11:
b6:10:48:04:f5:24:86:61:aa:ac:05:63:03:3a:2c:
5e:67:01:8b:eb:ad:fb:40:96:7e:01:57:5a:c1:61:
08:0b:57:db:68:3d:18:39:be:00:73:d6:ad:5b:69:
5e:9b:43:f2:61:59:69:26:04:7f:13:9f:cc:8d:88:
79:c0:50:7d:5c:75:5f:84:5c:fe:3b:42:c6:4a:e8:
f4:87:7f:0b:13:1b:51:7f:f9:e2:44:4c:ec:a8:f7:
87:34:83:f4:74:9c:e5:f3:a7:1d:b1:9d:b6:76:84:
41:23:ea:98:7d:43:70:9c:54:70:c2:df:b0:b6:43:
18:5b:b1:09:4e:a3:c3:26:8b:6a:d1:a5:ad:2d:31:
e9:4d:98:13:f4:1c:70:16:9c:6e:14:1a:f8:1d:11:
ae:e7:de:61:b0:b0:a5:c5:68:6d:ff:b5:f7:c2:00:
57:1b:d6:2a:4b:ff:8a:38:31:ea:09:22:96:b8:cb:
1a:b4:83:8b:85:da:ee:79:4d:ca:38:5a:76:91:41:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:86:78:58:E6:8B:25:F0:D9:F1:3F:0F:7D:79:D3:E2:C2:A3:46
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:b0:a6:ab:8e:fb:c6:39:1a:ba:2b:04:e4:96:54:8f:e2:
2b:15:51:3c:49:87:e7:e6:bc:01:10:20:04:65:ea:31:33:38:
b9:1a:e7:f6:69:cb:be:12:49:b1:d6:35:9d:57:8e:4a:37:bf:
e1:0b:1e:9e:09:65:58:7b:e7:44:b5:38:ab:6f:b8:ce:a0:92:
42:cc:fe:da:df:1a:05:f7:03:ce:65:32:56:8d:87:8c:7e:d2:
10:13:fa:da:6a:01:9e:f7:91:a5:5f:c3:99:54:41:0e:14:45:
7d:a1:8d:4c:25:76:b0:e5:04:93:73:1a:39:80:cf:a7:0a:b6:
40:75:c7:3b:7d:f7:b4:c6:f4:3d:c0:55:49:a0:0f:d3:9e:af:
b0:73:99:64:18:29:c8:be:cf:96:f0:9f:d7:06:df:af:fa:93:
34:88:9c:4d:ef:d3:20:60:60:38:87:c5:69:66:b2:f7:97:68:
de:85:f2:f3:be:4b:1f:98:ff:74:92:f6:5c:02:62:f3:26:38:
01:90:ce:ac:a8:12:e6:dc:81:b8:46:ad:10:1e:9a:bf:34:46:
c9:40:93:de:e2:0a:f1:ac:3e:19:43:e0:5f:bc:ad:0f:1b:49:
01:1b:f8:ce:0e:51:b0:28:2d:f1:4d:41:a2:4c:a4:dc:68:7b:
2c:1e:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:00 2026 by rpki-client