
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: zc2Ni2m9E7/J6LnBQx3kvO4qxf9mZkRgPGUoet7prkU=
Subject key identifier: FF:3A:FF:AB:F9:25:97:BA:0D:A3:04:BC:68:66:F5:C9:34:A5:02:B0
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: A9
Signing time: Mon 27 Jul 2026 09:23:41 +0000
Manifest this update: Mon 27 Jul 2026 09:23:41 +0000
Manifest next update: Mon 03 Aug 2026 09:23:41 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: IYrgqXWPYS3RcS3+tXQFEHnpkOZJUcPKO6ToVcaiN94=)
2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
3: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
4: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Jul 27 09:23:41 2026 GMT
Not After : Aug 3 09:23:41 2026 GMT
Subject: CN=6a67239d-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:d9:1f:66:5d:82:e2:dd:35:7a:26:4b:f6:
48:49:e0:bb:67:51:44:7e:b5:80:4a:18:43:11:4b:
7c:9f:f2:d9:bf:f5:bc:f8:c8:02:18:31:99:2f:15:
9c:3e:33:f4:de:7b:67:03:34:e8:f3:e9:7a:f2:ac:
f4:95:0c:cd:ed:eb:74:76:19:2b:40:a1:2d:c4:f3:
b1:56:c5:ca:41:e3:53:58:c1:95:35:b2:4e:72:bb:
f0:82:ea:ad:74:16:5f:d1:fe:96:38:54:86:0a:87:
9f:10:d5:a7:63:26:45:f5:41:27:20:24:da:13:f1:
df:0c:9b:c2:0c:c0:67:ab:36:79:f3:ea:16:fe:37:
29:5f:46:f3:2c:40:7b:40:57:1c:91:f6:68:7a:45:
45:14:68:a3:f9:54:c4:88:c6:fa:84:a1:62:2f:a3:
02:01:8e:6b:fe:3a:91:5c:12:6d:9b:92:20:1e:f8:
62:e0:a5:8e:3d:55:fc:83:54:38:19:13:15:04:d9:
d5:56:34:ef:cf:a8:c3:09:17:57:0d:99:0f:70:90:
b9:bb:7c:0a:2c:c8:a1:3a:80:ec:0d:46:f1:32:a7:
63:8a:b2:ef:62:b3:02:a1:7a:23:12:fc:34:5f:42:
60:a6:08:99:89:72:50:2d:43:c0:a3:6b:30:b9:6c:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:FF:AB:F9:25:97:BA:0D:A3:04:BC:68:66:F5:C9:34:A5:02:B0
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:80:49:79:c6:ff:b1:f4:f5:06:56:59:2e:03:6d:80:ee:
5f:a5:16:2d:85:74:91:28:b4:12:38:3e:b7:c6:1e:87:9f:3b:
f2:0d:2d:f9:00:8f:d6:ae:d2:28:67:06:51:24:1a:0f:21:fc:
32:75:f1:1e:a2:11:f5:c2:a8:1c:a2:aa:b8:dd:c0:f1:0b:ac:
e8:9d:a5:6f:84:df:95:80:06:34:7b:bd:98:d1:8a:67:e3:fb:
e0:c1:4f:03:f3:0e:01:68:63:57:af:3a:ff:10:9f:57:c5:38:
a1:c3:e9:f4:e8:27:7d:fd:ff:48:cc:a8:12:34:c9:f6:0e:b4:
75:b4:01:25:87:f5:5b:d7:02:20:38:64:56:a9:74:68:85:53:
2b:ed:dd:c8:5c:91:a5:cd:f7:94:45:f5:51:08:66:bf:2c:90:
01:fc:31:3c:0c:a4:29:d9:27:d8:f2:91:10:fa:3f:8f:07:b9:
1b:28:53:79:f7:79:9b:d3:70:4e:2d:4f:5f:e5:b4:df:2c:cc:
d2:b1:e5:c6:cb:00:e7:00:75:1c:4c:87:5f:16:fd:e7:46:9f:
03:56:bd:1a:a2:02:7b:56:36:d4:d0:50:2a:23:0b:d1:e3:11:
3f:0d:de:dc:e0:9f:a6:02:11:6b:5f:0e:a7:ad:93:66:f4:88:
0a:c6:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:10 2026 by rpki-client