
$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File: _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier: fV5tJ9pqOI6WDWeuI1y9g8Xx9ockBqYWWon7aDsMr/M=
Subject key identifier: 2F:50:AC:FA:94:08:84:60:41:53:BA:1C:C1:8B:C1:F0:52:2F:55:39
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial: 08CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number: 08B2
Signing time: Sat 28 Feb 2026 20:47:14 +0000
Manifest this update: Sat 28 Feb 2026 20:47:13 +0000
Manifest next update: Sat 07 Mar 2026 20:47:13 +0000
Files and hashes: 1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: CJShjQcdCp3wSVCb5fDZJZyDNlLuKxX/D7pjYeckF6E=)
2: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: JKAxoURLcld4TYBs+HuThRABfXOXWBihIh336+ir050=)
3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: pVe/D2y8+Q5khNjEW30/uK4SviswKm/bN634mRuECH4=)
4: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Vhzmp3txj0Xul7ynXkTKnMTWBScHUp4m7KHYrp1yvUA=)
5: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: dUADLZNofYstB4J1GHJqZ4NyoXP/5OBBFPnTwTmX5d0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Validity
Not Before: Feb 28 20:47:13 2026 GMT
Not After : Mar 7 20:47:13 2026 GMT
Subject: CN=69a35452-521e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:c1:8c:d5:bd:f4:9b:7a:c4:03:97:2a:1b:
8d:eb:94:89:b4:21:69:6c:47:4e:42:e8:ee:3b:e5:
65:b0:77:74:42:f1:61:e9:43:77:52:69:b0:5b:84:
cd:9c:bc:51:87:07:a2:95:1d:d2:f3:d4:c4:f1:86:
67:69:ff:c1:d7:35:2e:03:92:54:79:90:92:fa:5b:
ad:fe:23:eb:74:e8:f8:5c:1b:f6:ec:da:0b:48:c0:
4d:a8:04:5a:0a:35:62:e0:dc:1e:eb:f9:7c:d5:88:
c5:1e:e2:e5:ee:7f:a1:9d:be:c6:13:b6:16:8c:7c:
ca:0e:f0:a3:4f:d2:2d:ed:f6:7a:59:d9:b4:48:65:
eb:92:ec:77:58:e3:56:7c:46:28:47:97:4c:8f:a2:
12:2a:d2:f9:23:95:5f:95:98:c6:d0:34:ae:47:74:
12:8f:d4:8b:42:bb:ad:3c:13:a0:d4:d3:83:1e:4e:
62:f7:57:0c:48:48:f2:2d:80:43:3a:77:ae:e1:a2:
d5:e3:0b:5b:5c:6b:c1:2b:80:04:24:aa:e4:83:57:
22:c5:85:e8:48:02:ec:dc:98:d6:54:ba:2b:e3:1f:
74:61:db:3e:80:a5:83:2a:a7:cd:cc:b7:96:5a:59:
90:b0:6d:90:09:ba:9e:3b:6d:18:ae:27:ff:74:4a:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:AC:FA:94:08:84:60:41:53:BA:1C:C1:8B:C1:F0:52:2F:55:39
X509v3 Authority Key Identifier:
keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:7c:49:6c:e8:10:55:88:52:60:ab:00:d1:7c:81:8c:98:d7:
35:8c:aa:d5:f4:92:b1:35:bd:22:70:bb:8e:0a:52:36:fd:4b:
2c:bb:e1:c2:a3:9e:60:03:f4:ee:4a:e3:bd:39:9f:4b:3a:3d:
9a:bf:0c:05:5b:c3:a5:f8:87:0d:c6:a2:75:b4:7e:5f:df:02:
3d:5c:c3:37:67:e4:e3:06:db:16:fb:89:48:78:53:f4:73:44:
02:c3:fd:97:3f:0d:99:ce:e6:90:71:fb:87:44:c3:88:e7:05:
0a:00:7b:e3:40:90:77:c3:ff:f5:f8:70:a3:72:8e:92:97:04:
e3:3b:ac:85:ea:c2:58:3e:2d:83:1e:cb:09:e8:ae:56:6d:8f:
f5:ff:34:2c:61:0d:49:82:e5:fa:d1:a6:4e:74:88:1d:d8:ff:
79:e6:57:93:cc:77:97:ad:e9:73:4b:dd:0a:53:ca:c5:db:21:
b8:f6:fe:77:91:d7:12:58:14:ba:d8:6f:54:7a:b0:1a:b5:02:
02:35:b3:35:f9:03:6c:ff:5d:5d:89:59:e1:25:22:a0:9e:49:
ae:6c:5f:8d:17:5e:65:46:16:b2:d7:82:a5:1e:7f:39:ee:50:
cb:57:d6:cf:3c:ee:e1:a4:bf:dd:9c:a9:d0:c5:f8:4c:b2:c6:
2c:cb:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:01 2026 by rpki-client