
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: kx0wQkjPivN5s7py/nE4kwjsv/7y6NAvu/XxHhaaQg4=
Subject key identifier: F8:8D:69:6B:3A:F6:DF:86:37:26:CB:3F:BA:97:F7:76:24:B8:A4:4D
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: 5B
Signing time: Sun 01 Mar 2026 09:32:38 +0000
Manifest this update: Sun 01 Mar 2026 09:32:37 +0000
Manifest next update: Sun 08 Mar 2026 09:32:37 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: X+xIpdvD/Pb1rTGEzu4p2q6RuQLweWb1sE1VQwM5pLU=)
2: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=)
3: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=)
4: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Mar 1 09:32:37 2026 GMT
Not After : Mar 8 09:32:37 2026 GMT
Subject: CN=69a407b6-85fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:fb:04:c3:2c:76:b8:fc:b6:e9:ea:23:20:
20:ea:98:1d:14:e2:74:66:fa:a5:51:49:43:d2:66:
76:c5:b5:bc:92:e2:68:60:8d:40:a7:b1:ef:02:f3:
8c:b4:8f:e4:93:a8:92:7d:a2:3e:5a:dd:de:71:35:
ed:27:0b:d6:57:59:be:6e:b3:9c:cd:7a:d4:d2:5a:
38:eb:53:bf:cc:0e:8f:5a:ca:c0:34:a7:fa:38:47:
9a:86:13:78:ab:b6:28:64:df:a4:e8:90:31:0a:6d:
72:65:b8:1f:27:ac:4b:a7:32:d2:1b:76:e4:ab:80:
86:c1:63:73:80:24:40:59:0a:a5:50:d1:ee:75:4d:
c9:2c:77:5d:c9:1a:84:a9:44:98:17:ad:57:4e:05:
e0:68:a6:e6:79:96:5d:a8:53:6b:12:79:00:00:cd:
ef:43:97:be:4f:f9:cb:45:81:d9:18:37:6d:d8:76:
2c:91:9e:51:c6:07:5d:9c:57:1b:ee:9d:bf:12:6a:
da:83:19:1b:e0:2a:28:58:73:e7:bf:2f:eb:23:62:
76:83:3a:dc:8b:2d:7a:ec:f0:dc:41:25:62:da:08:
d2:8a:d0:00:7f:b8:83:38:19:4a:4c:06:b8:bd:53:
bf:84:ae:5e:9f:16:88:20:4d:dd:9b:91:78:91:cf:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:69:6B:3A:F6:DF:86:37:26:CB:3F:BA:97:F7:76:24:B8:A4:4D
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:93:6f:e9:94:74:dc:b5:46:c8:09:9d:91:a3:14:ea:8b:
4e:8f:b6:e9:2d:70:c9:36:fd:90:8d:d1:04:ff:47:8e:01:05:
a0:6b:64:f7:f2:0c:36:df:cd:ab:cc:37:1f:d9:65:e0:35:52:
29:b0:fe:e6:95:2d:97:28:55:9c:3a:9b:71:26:39:27:46:18:
fc:73:e1:91:99:27:39:26:ba:6f:4e:38:59:12:1d:16:97:e0:
65:08:d7:48:8a:19:65:ee:a4:a3:72:d0:df:1a:f5:1d:9e:1b:
28:2d:86:af:02:9f:a0:9b:97:6c:ff:ea:cd:5f:91:9f:fc:28:
b7:ea:27:d3:ff:16:44:90:bb:2e:4f:9f:82:1f:b3:67:99:fa:
25:ff:3a:db:d8:72:22:21:58:18:07:cd:9f:1f:0f:5f:35:74:
46:97:7b:57:29:3b:7f:e2:35:7d:5c:5f:4a:ba:df:04:8b:ea:
ef:c4:6e:13:eb:60:0b:89:25:bf:ce:b8:55:93:06:06:c2:a6:
ed:bf:d6:78:21:ce:70:d2:5f:d6:7d:fe:7d:9f:d8:ee:ae:8d:
4e:f2:d4:fc:7a:3f:b9:5c:03:e9:fa:b6:8f:43:54:fb:90:10:
fe:0a:54:eb:78:43:1f:6d:d8:c8:09:18:7d:45:3d:01:05:2a:
c9:77:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:19 2026 by rpki-client