
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: DAijJuUUJh+u49FuSx1/ZCDWhY+D4LyQMJcawcRyodc=
Subject key identifier: 44:1E:20:32:E2:D2:FE:6C:7D:48:CF:88:D1:60:45:97:2B:8E:6F:B1
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0C90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0C87
Signing time: Sat 28 Feb 2026 18:44:14 +0000
Manifest this update: Sat 28 Feb 2026 18:44:13 +0000
Manifest next update: Sat 07 Mar 2026 18:44:13 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: ex/JNA+WoKVCljmCZ9bn6mvAf1VJB9FyqF6Xw/Jke7Y=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3216 (0xc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Validity
Not Before: Feb 28 18:44:13 2026 GMT
Not After : Mar 7 18:44:13 2026 GMT
Subject: CN=69a3377e-243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:24:9b:fe:bc:d4:ac:06:b8:b9:b6:30:a3:
11:7b:2c:7e:b8:74:6d:8e:05:fb:4a:a1:b5:27:7e:
84:cb:56:3a:69:f5:7d:a5:06:22:ea:18:bd:3b:d4:
1b:70:cf:52:95:be:68:87:e6:7b:76:af:7b:f5:e3:
f6:c9:35:a6:09:3b:36:53:69:2a:a8:5a:ba:5b:c8:
be:4e:79:c2:f3:ec:d2:19:62:05:eb:92:20:b6:59:
ea:bf:87:96:a5:db:6c:8d:84:48:99:60:c9:c9:07:
68:eb:2a:1e:e2:86:78:8e:18:95:cd:2e:92:43:e0:
cc:dd:1f:ed:c3:95:a4:15:47:85:db:df:ca:e6:9a:
64:59:a3:dd:c0:4e:bb:ac:dd:a4:10:17:55:83:74:
3b:0a:e7:3e:38:e1:65:48:8e:4d:1d:b3:35:05:5f:
1a:6e:5b:c0:f7:ff:ed:90:ef:10:60:f4:98:42:67:
f2:92:ee:d9:d4:2a:de:90:0f:4b:31:80:83:fc:0d:
e5:b3:af:a3:d3:71:e7:3e:22:5d:a6:ff:c7:09:f4:
31:cf:0c:6b:26:e6:ae:8d:a5:8e:be:c3:6f:31:85:
8a:5f:0f:dd:3d:de:60:bc:ba:65:69:2f:76:71:29:
5a:1a:07:72:56:69:75:48:5f:d6:5e:bf:d7:8a:57:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:20:32:E2:D2:FE:6C:7D:48:CF:88:D1:60:45:97:2B:8E:6F:B1
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:33:a7:e9:e5:7d:03:1e:9b:ec:14:ea:5d:44:3c:84:19:
46:81:90:e2:44:8b:57:67:b1:bc:b3:30:f4:2e:4f:8b:39:d6:
9b:ec:8a:47:42:d5:90:df:68:d7:14:18:46:29:68:88:81:d0:
8a:3d:f9:35:bb:3a:54:ad:58:23:00:7f:38:7b:48:d4:b6:5e:
1e:87:42:5d:5c:c5:be:02:18:2b:2d:62:31:da:1f:91:80:1a:
56:1d:af:3a:8e:63:85:ea:66:16:c0:eb:db:e0:84:46:51:19:
f3:9e:9c:1b:b1:e8:9e:fb:c0:db:48:0b:98:e8:f9:35:74:42:
9a:81:1c:19:2b:e2:70:b6:e4:66:e7:ca:19:bb:96:7d:7b:01:
43:91:c5:71:fb:95:61:09:ca:87:d9:63:a9:63:1a:92:7c:0c:
e9:fa:b1:af:2e:fd:7c:55:4b:ba:f7:29:70:01:66:42:b2:38:
7e:65:56:8b:f9:a1:2b:5e:1a:46:fa:af:34:17:39:a1:9a:14:
cf:bb:20:a7:0a:2f:7b:09:2d:23:16:33:f7:6e:6f:2c:40:6e:
88:b7:00:0c:24:c3:4a:df:1f:23:e0:ec:d8:73:45:e8:0a:00:
a0:96:3b:f2:77:38:09:b0:40:7b:1e:1f:95:c9:91:6f:b6:98:
46:82:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:58 2026 by rpki-client