
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File: DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier: zlVCK3fP5g+EU5C9mWOgApmVKK0ycCK0zRgd1kCXm90=
Subject key identifier: 53:81:63:21:33:97:34:A0:CF:32:13:AA:BE:B8:BA:97:8A:1C:E4:CF
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number: 88
Signing time: Sat 13 Jun 2026 07:37:28 +0000
Manifest this update: Sat 13 Jun 2026 07:37:28 +0000
Manifest next update: Sat 20 Jun 2026 07:37:28 +0000
Files and hashes: 1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: 5hrStA/0X6ua9EBEepZ3vUILiDKWXNL1uuWXFUzp4As=)
2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Validity
Not Before: Jun 13 07:37:28 2026 GMT
Not After : Jun 20 07:37:28 2026 GMT
Subject: CN=6a2d08b8-4b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:f1:47:b1:8e:1a:f7:91:2b:b4:6b:83:fc:
97:fb:76:a6:75:f7:9e:39:a6:ae:69:4d:0c:83:0d:
d4:e4:d9:c3:2a:68:24:ae:5b:13:2b:2b:cd:4b:f4:
a9:41:c9:ec:10:e8:15:33:a6:af:75:a9:7d:fa:eb:
42:45:65:8c:58:fa:5c:c0:f7:89:0e:aa:49:7e:77:
77:b2:df:1f:8c:d9:b2:83:48:d2:13:22:25:93:59:
a1:31:a2:e4:5b:15:60:89:9d:45:d5:4a:2f:76:a5:
93:a3:f8:65:59:ff:b2:b4:98:84:d2:7d:da:6c:8c:
17:09:3f:56:6d:72:56:fe:c6:69:6f:52:d1:a8:60:
09:fe:ff:ab:4e:de:72:a1:ad:27:49:63:89:a6:b7:
8a:ea:78:b4:f6:1d:bd:da:78:d4:3e:aa:81:1c:68:
6f:9b:09:00:2b:6b:69:05:d7:ea:67:26:14:6a:e8:
11:81:43:00:55:45:10:5f:d8:7a:ca:36:d9:97:41:
be:24:d7:80:56:dd:ae:32:2f:b4:05:17:73:e0:ad:
08:5d:f8:2a:14:b4:1b:2d:a0:3c:4b:c8:86:04:75:
b9:e1:a7:11:76:8d:0f:3c:90:80:84:e4:97:96:f6:
b3:67:25:d7:15:14:72:fa:b1:85:91:2f:41:66:bd:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:63:21:33:97:34:A0:CF:32:13:AA:BE:B8:BA:97:8A:1C:E4:CF
X509v3 Authority Key Identifier:
keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:cc:1a:c8:5e:9c:89:ec:64:f4:13:3d:c8:39:07:a3:f1:
ec:c6:8c:8e:45:e6:a0:55:50:28:73:43:23:5d:eb:d9:4b:e8:
dd:db:08:43:e3:63:84:9e:e6:12:26:1a:54:a0:58:0b:77:ea:
fe:8d:32:03:12:50:0b:6e:fe:d6:70:6d:31:54:f1:c3:dc:da:
35:14:5d:d8:dd:d8:ac:df:28:7b:a3:46:4d:15:68:70:34:9b:
22:c7:61:bd:ca:c8:22:e0:ca:0e:4c:14:24:6e:50:84:c2:3f:
eb:d3:84:ea:a1:e0:f0:32:df:31:d7:73:6f:1b:9b:4f:ec:0c:
fa:43:e3:2b:b8:87:0a:7e:20:73:10:fd:5f:28:8f:a2:4f:30:
aa:73:2f:e7:18:39:ab:93:51:8d:1c:23:3c:4f:6b:ae:51:dc:
17:86:e2:af:a0:49:0b:d5:0f:31:1c:3f:28:29:09:88:6e:9f:
0a:05:a6:94:ef:f6:81:59:8e:6f:56:78:c1:f3:fc:a6:58:9c:
72:98:c4:42:6c:3f:70:22:d0:f3:b7:02:92:c3:e3:38:2e:75:
26:fd:45:0a:cc:0c:f8:07:26:fa:2e:c4:d4:f7:4e:2e:69:0f:
fd:b1:bc:b5:f4:17:35:14:7f:16:fa:d8:8e:44:60:8c:f8:a7:
83:55:14:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZBMzUxMTAvBgNVBAUTKDBFQThFMTgwNzgzMDQzMjE1NjA2MzRBM0I0RjI2RUM2
RUM3NjIxMjYwHhcNMjYwNjEzMDczNzI4WhcNMjYwNjIwMDczNzI4WjAYMRYwFAYD
VQQDEw02YTJkMDhiOC00YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncjxR7GOGveRK7Rrg/yX+3amdfeeOaauaU0Mgw3U5NnDKmgkrlsTKyvNS/Sp
QcnsEOgVM6avdal9+utCRWWMWPpcwPeJDqpJfnd3st8fjNmyg0jSEyIlk1mhMaLk
WxVgiZ1F1UovdqWTo/hlWf+ytJiE0n3abIwXCT9WbXJW/sZpb1LRqGAJ/v+rTt5y
oa0nSWOJpreK6ni09h292njUPqqBHGhvmwkAK2tpBdfqZyYUaugRgUMAVUUQX9h6
yjbZl0G+JNeAVt2uMi+0BRdz4K0IXfgqFLQbLaA8S8iGBHW54acRdo0PPJCAhOSX
lvazZyXXFRRy+rGFkS9BZr2E6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOBYyEz
lzSgzzITqr64upeKHOTPMB8GA1UdIwQYMBaAFA6o4YB4MEMhVgY0o7TybsbsdiEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkEzNS81NDY1N0RERTk4
QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9EcWpoZ0hnd1F5RldCalNqdFBKdXh1eDJJ
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RxamhnSGd3UXlGV0JqU2p0UEp1eHV4MklTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkEzNS81NDY1N0RERTk4QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9EcWpoZ0hnd1F5
RldCalNqdFBKdXh1eDJJU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIDTMGshenInsZPQTPcg5B6Px7MaMjkXmoFVQKHNDI13r2Uvo3dsIQ+NjhJ7m
EiYaVKBYC3fq/o0yAxJQC27+1nBtMVTxw9zaNRRd2N3YrN8oe6NGTRVocDSbIsdh
vcrIIuDKDkwUJG5QhMI/69OE6qHg8DLfMddzbxubT+wM+kPjK7iHCn4gcxD9XyiP
ok8wqnMv5xg5q5NRjRwjPE9rrlHcF4bir6BJC9UPMRw/KCkJiG6fCgWmlO/2gVmO
b1Z4wfP8pliccpjEQmw/cCLQ87cCksPjOC51Jv1FCswM+Acm+i7E1PdOLmkP/bG8
tfQXNRR/FvrYjkRgjPing1UU9A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:52 2026 by rpki-client