
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json)
Hash identifier: trrUUpbPJrBZLZ0u9MXU9BGWgvhJwK6eZuhne+kdLn0=
Subject key identifier: 4C:4A:7A:95:A0:A8:85:97:85:2F:25:3D:01:76:A9:FB:04:9B:97:A6
Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
Manifest number: AD
Signing time: Sun 19 Apr 2026 06:48:40 +0000
Manifest this update: Sun 19 Apr 2026 06:48:40 +0000
Manifest next update: Sun 26 Apr 2026 06:48:40 +0000
Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: Dqt2v297GMQu46wT5iHv339x76c1/1dR8VdysRPKWig=)
2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Validity
Not Before: Apr 19 06:48:40 2026 GMT
Not After : Apr 26 06:48:40 2026 GMT
Subject: CN=69e47ac8-6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:e5:a5:ed:f6:eb:65:e9:49:8c:a7:9a:f3:
c2:0b:fc:34:ea:b3:d8:31:45:71:44:b1:4d:56:d1:
09:73:3d:e4:e0:da:a8:30:8d:39:fc:bd:29:dd:5e:
09:6a:3b:db:79:53:95:a6:16:45:6f:61:bb:77:ea:
99:b4:bb:2c:01:c6:04:f4:e9:ef:72:4d:11:20:00:
07:92:27:ce:f6:af:13:39:c7:41:20:17:c3:8e:96:
5a:d2:46:41:b9:59:72:1c:29:9e:af:42:76:e5:dd:
f6:24:ca:40:0d:4f:50:fc:ce:44:93:2c:77:a8:45:
a2:a0:e9:ae:02:4f:6a:9a:14:1c:ff:69:22:f3:53:
93:32:fc:c9:0b:6a:16:cc:39:fa:5d:b1:64:7a:94:
51:e0:37:61:2f:72:67:c5:8b:a0:cd:64:72:44:64:
e7:5a:c7:9d:84:19:17:dd:72:25:d9:03:41:e4:25:
ca:7d:73:8a:0c:32:13:3a:16:9e:3f:8c:d5:c2:31:
0f:04:f9:0f:5b:9b:ac:6d:62:f2:07:c1:0b:9b:76:
bf:2e:97:00:0b:8b:dd:a1:5b:71:ba:da:46:91:19:
ab:3c:d1:ce:b7:f9:68:9f:a6:bb:65:a1:49:95:02:
43:81:96:38:56:58:30:61:de:28:28:1a:57:b2:ec:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:7A:95:A0:A8:85:97:85:2F:25:3D:01:76:A9:FB:04:9B:97:A6
X509v3 Authority Key Identifier:
keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:3f:2b:8e:10:78:df:ee:08:ba:d5:95:30:98:fd:86:ce:
c5:0d:1e:1f:70:52:93:ba:13:52:25:5f:46:bf:8e:61:05:12:
f2:02:b5:59:46:3c:a5:e1:90:95:b4:80:0e:56:4e:fc:3e:e3:
e3:2f:c8:44:6f:81:5a:3d:f8:e6:10:bf:2d:df:3d:77:c1:a3:
94:fb:27:c8:9f:51:ef:91:0a:d3:84:2b:ac:8b:45:6a:0a:46:
74:1d:7d:28:f9:71:b3:8d:dc:f4:13:8f:ae:b6:25:62:0d:77:
52:45:b2:6a:75:26:2a:49:b2:cb:81:c9:12:8e:9c:6f:82:e5:
91:a3:c9:0e:4b:bf:a9:8d:03:26:00:e5:23:ab:d4:64:aa:7c:
0d:3a:64:00:8a:8e:9c:a9:dc:ea:0d:57:4c:a2:f5:b2:cb:12:
b4:e9:38:2d:c3:d2:1f:a6:8e:2d:b4:c3:20:f0:45:62:22:27:
b7:47:52:aa:f5:0b:cd:d3:75:50:01:f9:fe:1a:c6:f3:61:24:
40:87:4f:64:cd:4e:90:39:7b:c3:1a:0b:00:7d:dc:66:7c:c1:
91:fa:4b:ad:b4:58:1a:bd:a1:82:a9:b6:84:e4:78:3f:ad:42:
e3:3b:10:66:3f:06:17:46:60:1e:55:d8:d2:bd:a1:fe:79:a9:
f0:72:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:01 2026 by rpki-client