
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
File: 0DOGEJUQz9wm91V6_5mhMey1lCQ.mft (raw, json)
Hash identifier: nURsl24Ds4Cjl9LX3MSpuC9/D2kXIrFJPlLI2mV/rgI=
Subject key identifier: 91:92:82:A3:9F:5A:15:17:89:EC:3B:9B:BC:1E:72:49:EB:8A:1C:09
Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424
Certificate serial: 35CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
Manifest number: 35A8
Signing time: Sat 10 Oct 2026 14:55:53 +0000
Manifest this update: Sat 10 Oct 2026 14:55:52 +0000
Manifest next update: Sat 17 Oct 2026 14:55:52 +0000
Files and hashes: 1: 0DOGEJUQz9wm91V6_5mhMey1lCQ.crl (hash: dAY3q2kCxN8M0QGa3MNBb0voMF0hcJ7BRAe6IIlyMIs=)
2: BE39F43074B811EB9AECDC67C4F9AE02.roa (hash: 16WodWe9duRlsrVReLGZtzM0CiqIeUZOIFJ6Ry79xho=)
3: 7CC8FF74562511E78A45783FC4F9AE02.roa (hash: Bn1YNPtkgT+SB+A+ua0TK0p8/s2quhsECBFyY259mck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl
rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189F23, serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424
Validity
Not Before: Oct 10 14:55:52 2026 GMT
Not After : Oct 17 14:55:52 2026 GMT
Subject: CN=6aca51f9-09e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:40:d3:3d:63:4b:f3:5a:27:82:83:81:92:
52:33:4a:eb:3c:bd:04:2a:43:8d:51:3a:01:36:20:
cc:54:67:f5:e3:57:1e:00:09:1b:39:1c:b3:4a:cc:
95:eb:64:e5:99:7f:89:68:30:5c:fd:b4:77:53:61:
52:ff:1d:3a:76:6f:ad:1c:a1:ee:6f:93:cf:ac:9d:
2b:3c:e6:33:45:c5:4c:66:3d:64:ab:e3:86:24:1b:
12:f5:47:34:4b:a1:f2:c6:a5:74:4d:f7:87:89:75:
48:cc:01:3a:b4:f2:66:ed:ae:5c:7b:38:0d:21:39:
19:3a:44:00:86:a5:fb:4d:06:7e:f3:ae:a7:cb:47:
01:5b:4c:68:90:a1:a5:4c:c6:f2:30:43:17:cc:e1:
cf:82:25:55:07:3b:94:88:85:c5:7c:8b:e5:0a:ed:
0a:e9:ff:05:6a:94:d9:64:b8:ab:48:a0:20:52:dd:
22:bf:4f:ab:0d:00:b6:bf:7f:8a:a6:1f:0f:a4:3e:
1b:ca:6c:d7:c7:fb:ba:a2:a2:53:83:49:78:1a:6b:
cb:8c:ba:a0:7c:4e:0e:ef:10:2a:2b:2e:80:bc:67:
01:3c:39:a0:db:53:0d:2f:31:e5:78:94:9c:e2:b4:
fd:10:4e:63:9f:6d:03:e3:26:4f:4e:fe:f4:ed:e9:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:82:A3:9F:5A:15:17:89:EC:3B:9B:BC:1E:72:49:EB:8A:1C:09
X509v3 Authority Key Identifier:
keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:d8:52:2b:49:14:78:9a:78:c4:e7:83:4d:66:b1:1a:4d:
25:30:2d:6d:b6:8d:37:f0:6d:e1:2e:e1:dd:ea:b0:a9:a4:cf:
13:a2:7a:df:66:f0:c7:f9:a9:1f:12:14:7c:d4:37:a5:0c:3d:
61:32:46:a6:0f:e2:73:6a:fb:f7:f8:40:2a:c7:86:16:e5:e1:
2f:13:3f:a8:c8:35:78:bb:05:2a:fa:98:81:50:70:25:af:d2:
49:9c:b5:78:1f:53:eb:61:ee:e2:c6:aa:80:ca:40:d2:59:66:
af:bf:7a:1d:ab:22:7b:11:55:3f:43:f4:18:6e:61:42:2b:33:
57:a6:ee:fd:a0:d6:2e:c0:86:3a:8d:76:f9:31:df:96:0c:c5:
c4:d6:9a:bb:a4:2e:b4:a8:d1:59:2a:34:5f:ba:45:b5:e2:11:
fc:a3:93:bf:2d:26:98:77:d5:c0:ef:2f:16:1c:4f:40:dc:cf:
26:43:af:af:83:dd:ef:60:32:1f:bb:03:81:e4:19:b2:24:91:
cc:66:f7:8f:50:33:02:3a:fa:0b:31:42:d6:46:7c:cb:40:4b:
09:37:d5:15:f9:ec:9c:ad:4c:10:76:b8:18:b0:85:52:94:d0:
19:83:c3:68:9c:5a:92:f1:e6:5c:18:c2:23:e9:ff:76:0d:1b:
41:66:05:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3QUZGOTlBMTMx
RUNCNTk0MjQwHhcNMjYxMDEwMTQ1NTUyWhcNMjYxMDE3MTQ1NTUyWjAYMRYwFAYD
VQQDEw02YWNhNTFmOS0wOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/BA0z1jS/NaJ4KDgZJSM0rrPL0EKkONUToBNiDMVGf141ceAAkbORyzSsyV
62TlmX+JaDBc/bR3U2FS/x06dm+tHKHub5PPrJ0rPOYzRcVMZj1kq+OGJBsS9Uc0
S6HyxqV0TfeHiXVIzAE6tPJm7a5cezgNITkZOkQAhqX7TQZ+866ny0cBW0xokKGl
TMbyMEMXzOHPgiVVBzuUiIXFfIvlCu0K6f8FapTZZLirSKAgUt0iv0+rDQC2v3+K
ph8PpD4bymzXx/u6oqJTg0l4GmvLjLqgfE4O7xAqKy6AvGcBPDmg21MNLzHleJSc
4rT9EE5jn20D4yZPTv707elstwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGSgqOf
WhUXiew7m7wecknrihwJMB8GA1UdIwQYMBaAFNAzhhCVEM/cJvdVev+ZoTHstZQk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUYyMy9BNUQ1OThENjFE
OUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5d205MVY2XzVtaE1leTFs
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBET0dFSlVRejl3bTkxVjZfNW1oTWV5MWxDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUYyMy9BNUQ1OThENjFEOUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5
d205MVY2XzVtaE1leTFsQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMzjYUitJFHiaeMTng01msRpNJTAtbbaNN/Bt4S7h3eqwqaTPE6J632bwx/mp
HxIUfNQ3pQw9YTJGpg/ic2r79/hAKseGFuXhLxM/qMg1eLsFKvqYgVBwJa/SSZy1
eB9T62Hu4saqgMpA0llmr796HasiexFVP0P0GG5hQiszV6bu/aDWLsCGOo12+THf
lgzFxNaau6QutKjRWSo0X7pFteIR/KOTvy0mmHfVwO8vFhxPQNzPJkOvr4Pd72Ay
H7sDgeQZsiSRzGb3j1AzAjr6CzFC1kZ8y0BLCTfVFfnsnK1MEHa4GLCFUpTQGYPD
aJxakvHmXBjCI+n/dg0bQWYFQg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:24:14 2026 by rpki-client