
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json)
Hash identifier: Hykb9YTIZLypuPOfG0aBl9p3gu2TCbfNv7cLlBqZbws=
Subject key identifier: 73:5D:86:BB:9F:7E:99:43:5E:17:4E:9D:39:B8:3C:78:57:F6:A5:94
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
Manifest number: 02AD
Signing time: Fri 17 Apr 2026 01:21:46 +0000
Manifest this update: Fri 17 Apr 2026 01:21:45 +0000
Manifest next update: Fri 24 Apr 2026 01:21:45 +0000
Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: 5EoPo83x7aeDfi3PmVHWsMcBFY0w0qchs13CuFR4lVE=)
2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: J9UUSEwKqauquMmKvfncZPjjMkXwX/cwJi3gEdCy2os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Validity
Not Before: Apr 17 01:21:45 2026 GMT
Not After : Apr 24 01:21:45 2026 GMT
Subject: CN=69e18b2a-5965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:a0:3f:40:e5:16:76:5b:a6:8e:62:f5:cb:
b9:3c:31:53:87:8d:0c:e9:63:b6:e2:fb:3d:bb:15:
89:10:7b:a3:e3:4f:ec:39:80:10:e3:50:d3:62:36:
b1:67:49:b4:a1:28:af:c6:36:3b:10:f2:23:9d:85:
fb:5a:88:2e:b3:af:0a:be:6c:d9:19:0b:dd:23:54:
60:f5:d1:f9:93:30:bf:9a:a6:83:cb:f6:9d:be:3d:
09:94:1b:a0:e6:aa:61:b8:c6:69:61:6d:18:ca:0e:
9c:36:f7:e8:d0:2b:bf:dc:9a:1a:d9:0b:fa:f1:5c:
0c:ea:44:a5:47:90:eb:7b:86:9f:db:83:af:f0:0f:
f0:25:64:72:76:ba:8f:f0:d8:4a:47:4b:82:38:2c:
8f:fe:16:02:87:02:f3:ab:10:c7:ad:0e:68:8b:10:
8c:0e:d3:94:87:bf:6f:77:63:2e:60:10:a0:1a:aa:
7e:21:32:c8:70:74:5e:99:9e:e2:34:98:7a:aa:0d:
38:bf:69:cf:12:f3:34:2c:d5:fa:e0:cc:e3:65:9f:
3f:9b:35:23:54:e1:b3:66:1e:a5:c4:3c:75:a9:5f:
0b:6d:19:6f:02:59:9a:4e:d9:d1:1f:ea:3e:4d:64:
71:01:d3:5e:66:e6:6b:95:0c:a6:42:97:67:49:bf:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:86:BB:9F:7E:99:43:5E:17:4E:9D:39:B8:3C:78:57:F6:A5:94
X509v3 Authority Key Identifier:
keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:9a:67:a9:4f:bd:85:ad:ad:02:22:91:9d:24:93:d7:6e:74:
5f:3e:a3:c9:6c:94:a4:67:7e:73:c1:bc:0d:cd:25:22:50:5a:
04:28:6f:37:d8:c6:cb:a6:75:88:89:4d:ed:03:e4:51:d5:c7:
dc:2f:ef:f4:ae:46:1b:4c:e1:1c:20:76:f0:bc:3b:cb:84:98:
79:0b:87:2b:b7:3a:31:ca:66:8b:4c:e6:27:02:ba:7d:d3:7e:
53:eb:0b:bc:a3:47:27:6c:04:9f:ce:c7:ee:a0:57:d3:f3:dc:
c7:6d:b5:b9:41:8b:99:85:fe:1a:f9:65:bb:cb:b4:2f:e5:55:
97:73:cb:76:c8:f9:5a:de:dd:6e:7d:e8:47:09:6c:b2:32:07:
fd:81:b0:6a:7f:35:bc:74:90:0c:cc:bc:34:5e:6c:56:50:d4:
9a:6e:e5:2a:30:c5:fb:87:7e:4c:4c:48:3c:bb:11:8b:8b:1c:
49:f2:c9:0e:cf:2c:cb:32:a9:77:65:b2:57:74:b7:ab:39:67:
4a:8d:d0:4e:c0:2d:47:64:9c:d0:90:b5:18:bd:eb:de:86:e4:
9d:b8:bc:be:eb:77:51:97:de:f9:7e:1d:28:69:d5:37:76:32:
73:26:67:74:6e:37:27:df:b0:e5:4d:3f:8e:a7:b5:78:b0:ee:
06:ef:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:16 2026 by rpki-client