
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier: wqPcqAgj7UpeTOuG+156AVIyc4Hs0tOtCohPuQ73XJI=
Subject key identifier: A9:38:37:6A:36:FE:76:81:DC:E5:0B:03:04:BB:16:08:D9:6E:2D:3C
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number: 01E5
Signing time: Mon 27 Jul 2026 05:05:04 +0000
Manifest this update: Mon 27 Jul 2026 05:05:04 +0000
Manifest next update: Mon 03 Aug 2026 05:05:04 +0000
Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: rEEYNiWIPgS3qnJqtSPrl8BpeM+Mmmbs4twcdPVJTKI=)
2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: 8ztK9WaHhwxCqfAPSsy7g03jnTlBHy5ygH9vBUeQxBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Validity
Not Before: Jul 27 05:05:04 2026 GMT
Not After : Aug 3 05:05:04 2026 GMT
Subject: CN=6a66e700-c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:15:22:b0:47:25:25:67:e1:73:2d:ff:c2:50:
7f:23:a1:77:01:65:26:c6:eb:71:38:2f:bd:71:fc:
69:48:bb:05:d9:67:75:f7:3f:27:77:02:78:91:19:
e1:f4:cf:2f:47:da:1d:69:63:71:ba:fa:91:d0:79:
c5:84:5d:8f:d9:8b:32:86:2b:a5:95:c9:19:72:30:
8d:64:35:79:45:3d:43:95:95:a7:7d:9f:24:20:b2:
68:05:91:75:c8:83:29:dd:2f:81:67:aa:bb:36:64:
5b:8a:1c:10:1a:5f:88:e1:58:55:96:93:e3:36:06:
ff:91:b2:7d:1a:c5:9c:3d:44:5e:d9:ef:6f:aa:14:
67:aa:2a:8e:81:78:ec:21:0f:99:b3:b6:83:41:cd:
7b:15:45:8f:8c:cb:cb:bb:ad:16:9c:50:23:29:00:
1c:ff:22:73:ae:a0:2e:ec:d8:e9:ca:4f:11:9e:0f:
ee:36:f8:5e:3b:98:25:33:7a:30:07:b2:e4:1c:00:
ec:ca:ab:07:46:87:15:40:3e:44:d0:11:a1:77:5b:
b5:c3:3a:95:49:7c:09:ab:7e:1a:37:a2:74:a9:1b:
43:89:3c:15:a8:ba:3b:f7:eb:be:8c:5b:1d:cc:c1:
d3:44:ce:2e:67:f0:4f:4c:ac:3d:51:0f:69:a5:26:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:37:6A:36:FE:76:81:DC:E5:0B:03:04:BB:16:08:D9:6E:2D:3C
X509v3 Authority Key Identifier:
keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:aa:d3:74:4a:da:ba:81:4b:a3:7c:fc:91:31:92:f1:72:b6:
8e:07:ed:71:c7:bb:96:ed:ff:24:ca:73:ad:d0:aa:88:bd:55:
4a:8c:f9:75:1c:08:6b:65:07:36:c6:9c:cb:68:72:37:29:f6:
2a:5e:41:fd:3c:8a:cb:94:de:34:70:d7:f8:3b:62:ed:12:97:
76:da:b5:97:52:8e:84:83:d5:39:01:c9:9a:83:1d:79:19:c9:
66:c7:1a:29:e8:b3:4a:e7:c7:00:fc:05:99:6e:f5:88:bc:40:
f9:02:d7:bf:99:95:25:29:d7:d1:cd:f2:72:18:ed:7c:d6:3c:
2d:43:f5:8f:19:c3:e4:02:6a:e2:4f:1c:b0:bc:7e:a3:ce:99:
82:a6:6c:af:bd:18:3b:99:1f:e2:27:59:7a:d0:a8:5e:65:68:
2b:cd:e6:cd:f6:10:6c:7c:25:2a:cd:61:d1:9f:19:09:f3:8b:
51:a2:e9:1d:93:49:2f:7f:b7:87:96:6a:1b:19:55:9c:b8:ae:
d0:2f:89:6d:f0:bb:b0:2d:e1:d7:98:28:37:55:7a:5d:c9:c6:
a4:d5:d3:44:9b:cb:63:86:af:c0:67:bc:69:f1:7b:57:84:c6:
57:4c:5d:a1:16:35:ed:ae:bd:d2:0a:d6:ee:7b:01:1e:8b:6c:
fe:36:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:45:29 2026 by rpki-client