
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier: +jHkYiK+cYwAtBUZfMSwr2Z9KnDaqNzUeBCDC6Dmzk8=
Subject key identifier: F4:3E:29:3D:21:C7:02:47:64:6B:7D:49:0C:33:D6:DB:F8:A3:2F:E1
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 1846
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number: 181C
Signing time: Tue 28 Jul 2026 16:37:18 +0000
Manifest this update: Tue 28 Jul 2026 16:37:18 +0000
Manifest next update: Tue 04 Aug 2026 16:37:18 +0000
Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: d74ai/mcg1JaWeNU02np3StInSrRC7zUQrP7UzkHtic=)
2: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: 5RREE6T02f31QWKKvKnKTP9nUut80+i9xP6eu2x6Dn4=)
3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=)
4: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Jul 28 16:37:18 2026 GMT
Not After : Aug 4 16:37:18 2026 GMT
Subject: CN=6a68dabe-0d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:e8:7c:02:82:0f:49:0b:6c:f3:4f:11:da:
21:b3:dc:9d:3a:b0:ab:74:a8:8a:9f:07:32:3d:41:
4b:9c:c2:e4:90:50:1d:dc:67:e2:97:cc:75:e1:c2:
b9:74:32:9b:97:d5:13:99:49:0e:0a:63:d6:a4:f7:
3e:7d:96:85:19:33:d7:5f:c1:e9:aa:5d:2c:88:5e:
d4:1d:7e:d7:d0:d7:79:20:8f:43:dd:56:c6:5a:a2:
9b:56:b0:ce:06:2b:78:46:0e:ce:77:7e:33:54:95:
29:64:b7:92:c6:38:bf:93:4b:b1:8c:7c:07:bb:3f:
46:22:1c:99:21:35:54:5a:c7:a4:be:af:54:da:16:
b1:e3:f0:c3:6b:84:1f:ac:da:ce:35:ba:55:d3:18:
98:be:ab:cd:db:bd:c5:7c:cc:8f:a8:a5:e2:a1:aa:
5e:11:ab:05:79:82:a5:d5:f7:53:d7:fd:e1:6b:2b:
c4:dc:ad:9a:f7:db:43:58:f1:3a:89:5d:9b:bc:6a:
64:44:9c:84:d8:0e:d8:72:2e:e5:82:b7:ec:3c:c1:
18:49:16:6a:e9:fb:e4:12:ed:a7:4e:cd:6f:e6:1c:
9f:d0:7b:f7:95:09:26:5d:ef:2a:10:65:64:b5:a7:
91:74:1a:3c:41:72:45:17:8c:29:e0:bf:5c:68:88:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:29:3D:21:C7:02:47:64:6B:7D:49:0C:33:D6:DB:F8:A3:2F:E1
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:71:79:32:60:d1:f5:a3:c6:cc:00:7f:41:7a:74:2f:ec:db:
02:a1:2b:b2:cf:cb:07:55:d6:91:63:ae:37:92:8f:95:31:a9:
5a:30:fc:25:36:20:b0:63:74:bc:78:b1:01:70:7c:8d:e9:87:
36:81:c8:12:4f:1f:b0:05:a3:f6:02:d6:b9:b5:4b:bb:49:72:
5b:c1:ee:12:a4:47:06:0c:7f:74:b5:9f:99:74:97:25:37:de:
7a:0e:bf:a9:94:5e:5b:3c:b1:44:ec:74:17:a4:1c:7d:2a:43:
e4:f0:ed:02:6e:43:c2:d6:44:4c:19:6d:d7:69:a9:1c:47:15:
a2:c6:d4:56:6e:00:cb:5c:fb:60:b5:d6:ea:82:e0:8d:a5:c8:
52:a5:af:dc:df:03:f7:08:fe:6f:1e:4a:5f:3f:cc:b2:f4:e9:
6e:ea:0b:e7:05:8b:b4:ec:ae:9c:30:36:ad:ba:56:6a:da:19:
25:dc:31:b8:7d:b9:9f:77:59:82:94:a1:19:1d:3f:2b:17:77:
f6:9d:19:11:b2:a8:8c:7e:92:42:d8:9c:2e:f2:e8:e5:72:05:
1a:23:9a:78:ea:12:94:05:21:7c:66:62:23:27:e3:0b:5f:c2:
69:f5:14:2f:b1:a6:3b:04:35:72:98:e0:50:20:85:73:0a:7c:
b6:35:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:14 2026 by rpki-client