
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json)
Hash identifier: b1mcHTnHwMrHeOwAvETL8r2J3IsgWQr0at0xKegGVes=
Subject key identifier: 59:EF:05:CF:8A:1F:66:3D:5C:21:2F:BC:20:60:E2:39:A8:3C:5D:BB
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
Manifest number: 0844
Signing time: Sun 01 Mar 2026 23:26:38 +0000
Manifest this update: Sun 01 Mar 2026 23:26:36 +0000
Manifest next update: Sun 08 Mar 2026 23:26:36 +0000
Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: bLUogyRF3jBSOSLxn8ysZdikq9pwkGzXwAp8MntekF8=)
2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Validity
Not Before: Mar 1 23:26:36 2026 GMT
Not After : Mar 8 23:26:36 2026 GMT
Subject: CN=69a4cb2d-c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:46:15:c6:4d:5d:38:fb:50:6c:d5:16:da:07:
95:63:7f:df:07:18:f7:38:1c:99:53:5a:57:21:63:
00:eb:bf:56:2d:fa:8c:b0:aa:af:a6:55:ba:8b:11:
ec:6c:56:52:d8:97:1f:c9:b9:8d:24:b7:97:61:70:
9e:33:c9:21:f2:ba:84:ed:e5:78:66:82:85:10:8c:
7e:7c:8b:96:b0:31:98:67:57:05:5b:7c:64:3b:d9:
0f:7b:e8:99:12:2f:f5:35:e7:02:e9:b4:3f:a5:80:
ee:16:e8:40:c2:64:65:8e:88:ac:18:2d:eb:a7:0b:
58:d4:70:97:d6:6d:b7:90:ca:01:20:41:52:07:98:
9f:13:8f:1d:84:fb:0f:ff:4b:8d:b0:a2:23:f0:eb:
f0:67:5f:36:76:30:87:1a:53:1b:ba:1c:85:a0:86:
c4:2c:0c:ba:78:ad:26:7f:b1:80:e0:2d:b8:9b:41:
31:38:7b:ec:6d:03:60:01:4c:33:8a:c7:45:05:7c:
60:b2:54:eb:70:3d:a3:76:0c:52:4e:cd:14:6f:58:
53:10:49:29:df:e2:42:b6:50:b0:d5:23:c6:99:79:
bc:7b:a0:ef:a3:06:7d:42:e8:7b:e4:4f:ee:55:6f:
6f:03:44:f5:42:84:9f:f8:64:64:0b:bb:75:cb:80:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:05:CF:8A:1F:66:3D:5C:21:2F:BC:20:60:E2:39:A8:3C:5D:BB
X509v3 Authority Key Identifier:
keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:8f:8b:43:a4:cd:d0:e6:94:2e:96:09:48:4f:27:48:4d:28:
93:cd:d7:fa:c1:ce:99:67:1a:16:ae:9d:3f:f6:94:85:1f:44:
57:93:87:a2:ea:fb:ad:e8:d7:12:98:c0:a0:00:3e:59:ff:a3:
ce:95:be:85:e8:24:ec:67:ac:8b:48:1e:53:61:0c:77:5f:25:
61:ab:34:65:46:d0:64:af:cb:3a:a7:3d:c5:b9:06:c5:82:b5:
05:b8:a4:5b:f2:45:dd:53:fa:e0:35:ef:03:b2:79:ba:67:45:
8a:1b:b6:26:7a:61:07:b9:30:fc:2b:27:c6:a2:e5:dc:0d:51:
99:dd:8d:fd:1b:d5:98:5f:3d:29:53:e6:37:57:16:d5:76:ca:
9b:46:50:fe:4d:95:d2:54:d1:0b:29:65:77:84:77:1e:2f:47:
dd:c8:c5:42:bb:27:30:8f:2c:26:55:ee:01:55:5c:ee:3c:f2:
8c:9a:25:89:bb:61:86:81:80:b1:c5:6e:12:b4:f4:a0:32:69:
c2:93:e1:30:5d:ad:58:19:ab:23:23:85:90:17:4c:ca:0b:00:
6c:d3:84:9e:d1:1c:91:9b:88:11:b4:ab:ea:af:68:73:a3:87:
d1:71:d3:d6:f2:9c:84:7d:34:d5:9c:9b:4f:6e:21:ff:d8:bf:
03:a2:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:25 2026 by rpki-client