
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier: yogOjT438+AxJgfTl2LpfzJY9bW/nkKGK6bwKaUxVxA=
Subject key identifier: B2:2F:B8:96:BC:D9:E7:9F:C9:8A:A5:FE:6A:21:0F:E2:9B:32:EF:29
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number: 0119
Signing time: Sun 01 Mar 2026 06:55:40 +0000
Manifest this update: Sun 01 Mar 2026 06:55:40 +0000
Manifest next update: Sun 08 Mar 2026 06:55:40 +0000
Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: K1zulq96wq+Cr5AQSFDp54BCM7ze9xtrPB3fzYeUC5k=)
2: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: 9FFQWaVB+irLH5LQK4lUbYq93QbOasqqLLPoEvtouvY=)
3: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: gV+HYc6PaGbXoIxv4tVP5eLeL26hhMkwhH4xgC6rrVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Validity
Not Before: Mar 1 06:55:40 2026 GMT
Not After : Mar 8 06:55:40 2026 GMT
Subject: CN=69a3e2ec-a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:17:f6:44:23:2f:bc:e5:b7:4e:0d:e9:af:
f7:bc:0f:22:a2:3d:52:6c:56:eb:73:bf:c3:5a:93:
b2:4f:9d:4c:3b:74:8a:f7:cb:e3:8a:b8:1d:b8:bf:
32:50:13:97:7d:93:8f:9c:e7:dc:dd:6e:90:ca:a5:
c4:f3:66:05:7b:94:5e:32:17:54:4d:0d:99:64:b2:
20:81:e4:a8:95:ef:c2:e9:b5:67:25:b8:a5:26:24:
d4:6f:47:77:ee:47:00:47:ab:0f:ca:de:20:9b:d9:
1e:5e:c1:7c:88:ee:8b:bf:9d:2a:6c:e8:2e:62:c1:
e9:79:d5:1c:53:b7:be:9d:6c:37:d1:3e:33:7e:3f:
f0:2d:f2:d7:d8:8c:5e:fe:68:44:e6:c4:ee:c3:6d:
55:d3:13:73:3f:8b:c6:c4:d7:d9:f3:6e:e1:39:bd:
f8:d3:69:38:c7:53:5b:f1:19:cf:ea:ba:1a:d4:d1:
65:47:a3:55:ea:17:29:fd:6e:32:b5:25:5b:50:1f:
fa:f7:ef:9a:86:41:c2:e4:5f:ac:92:22:fd:72:05:
ec:fb:1e:94:44:10:d8:bd:d8:65:83:40:33:35:05:
89:15:8c:5a:e5:82:54:b5:39:29:e5:30:90:fc:6e:
26:8a:5a:2b:4a:70:99:9a:97:d8:c9:03:46:90:16:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:B8:96:BC:D9:E7:9F:C9:8A:A5:FE:6A:21:0F:E2:9B:32:EF:29
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:fe:49:c5:8f:21:29:5f:b7:6c:59:82:9f:62:05:4a:d3:
bf:34:0b:5e:38:68:58:2f:90:cb:fc:73:90:ce:1f:59:c9:d2:
1e:90:fb:a1:98:5f:73:55:20:dc:1c:eb:89:8f:f7:07:19:4f:
c2:80:10:16:43:7d:52:1b:4a:0f:e6:0f:dc:7c:31:3d:60:f4:
f3:66:93:5a:17:56:3a:7b:21:56:82:65:68:05:ef:04:e5:66:
be:2c:c7:95:9f:f7:98:a3:26:6a:d5:ad:fa:b0:e6:a7:e9:ca:
0b:d9:84:ba:67:3f:81:f1:87:93:f8:4d:95:ec:d4:df:91:32:
e0:c9:46:b9:d2:63:d8:f6:0c:a2:7e:b9:d8:ff:09:06:c1:90:
a1:5a:2a:95:7b:fc:cf:38:f1:bb:a9:27:1c:12:be:7d:96:c9:
5a:96:89:8e:af:46:0f:6b:90:59:07:b8:b0:4a:d2:e6:74:33:
cf:e4:48:cb:8d:2a:eb:e1:43:57:04:a9:9d:90:09:b5:03:36:
00:34:c6:16:cd:62:8c:aa:6c:e4:0f:18:40:0e:fa:df:c9:44:
6c:ce:6e:c8:a3:86:41:c1:e4:fb:17:85:8c:33:c4:73:98:3c:
38:da:e8:b9:26:ac:fb:0c:e2:23:40:ee:b8:87:8b:be:26:97:
cf:00:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:10 2026 by rpki-client