
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier: WOS0BxyuZoY5heqNtRisQ6c1mL/PiWj95h6EoD6JFjE=
Subject key identifier: 9F:D0:41:E9:78:4B:01:1A:40:8F:A8:4B:F3:1A:9E:44:56:E0:58:82
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number: 0121
Signing time: Fri 17 Apr 2026 05:28:27 +0000
Manifest this update: Fri 17 Apr 2026 05:28:27 +0000
Manifest next update: Fri 24 Apr 2026 05:28:27 +0000
Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: SaF7erh8VN7450kP/Zcr34k7Fvpv80gkBYoxjWy9hyM=)
2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Validity
Not Before: Apr 17 05:28:27 2026 GMT
Not After : Apr 24 05:28:27 2026 GMT
Subject: CN=69e1c4fb-4eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:b9:b6:cb:bc:98:b6:99:f6:07:1e:29:e4:
0e:bf:d5:3a:77:77:a8:78:20:57:81:a4:63:52:67:
34:ec:80:93:e1:e6:7b:7e:0a:28:47:40:68:e3:a6:
49:98:ba:a8:52:ff:03:50:55:0e:e6:e7:12:34:2b:
90:92:cc:e7:c6:96:63:ad:d9:29:61:90:a6:62:8e:
ae:d3:be:a8:d4:5c:c4:39:65:0b:99:a8:50:9a:bc:
41:04:8d:b8:e7:07:e1:c7:11:49:31:11:9c:2d:1a:
42:1c:e8:c2:32:ef:e4:0c:ee:02:6a:71:01:28:9e:
c1:79:f5:b4:92:55:c4:bd:ae:0e:e5:7e:6e:af:e3:
26:ac:61:4f:71:cf:7e:0f:a4:69:d6:68:05:c4:77:
b2:bf:2b:ba:98:46:4f:91:db:c2:6a:9e:61:1c:8e:
4d:0d:cf:d2:2b:33:f6:b4:63:88:03:9f:7e:65:d5:
51:a4:96:67:55:33:46:54:f6:a6:94:ac:2f:e6:05:
f7:02:27:03:6d:42:ce:1b:e4:88:25:ff:67:55:c2:
46:70:a9:ef:6c:87:d1:fd:1b:23:34:31:1c:70:c3:
c7:2d:b3:b3:20:2b:ea:84:d2:3d:4e:c5:dd:92:ca:
c6:f3:f3:07:7c:8f:f2:2c:6f:49:27:6d:c0:6a:3e:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:41:E9:78:4B:01:1A:40:8F:A8:4B:F3:1A:9E:44:56:E0:58:82
X509v3 Authority Key Identifier:
keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:26:21:71:ed:84:50:78:69:be:92:5e:75:e1:99:d3:8c:
e4:d8:fb:5e:4b:c8:8b:08:89:ee:5f:42:2e:83:d4:af:67:14:
55:d9:bd:1a:64:b0:38:ea:0d:eb:1d:36:05:45:c8:ff:6b:7d:
31:bc:46:46:da:d7:f4:dc:5b:5e:02:d5:8e:e1:85:fa:20:b6:
50:0e:d7:ef:ee:9b:fa:e3:11:6a:0e:0d:ed:79:9a:21:89:43:
f2:e5:5d:38:18:46:e1:5a:e9:81:c9:34:ab:75:60:a1:78:32:
a8:1c:a9:75:05:80:3f:e1:9e:f5:70:a5:40:69:0f:1f:64:dc:
68:b0:c2:c9:60:85:85:ea:80:0d:b9:70:76:6d:46:ab:51:0e:
dd:8f:13:28:38:7d:3e:84:a9:e8:d7:0d:2d:7d:b7:8b:1e:59:
0b:1e:04:a9:ca:a1:e9:46:e0:5d:47:00:f1:db:dd:70:44:b2:
aa:43:d4:1d:32:cb:fa:3d:a8:23:ce:39:00:91:c1:67:d7:1b:
2e:d5:f3:53:e8:32:88:ce:91:98:2d:54:b9:f3:ab:df:f6:46:
31:04:c5:02:c6:bb:ba:5e:75:b5:c8:eb:32:73:08:fc:d5:11:
20:87:d1:47:38:8f:ca:4e:52:dc:5f:cf:ce:f9:01:30:97:3a:
09:04:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:15 2026 by rpki-client