
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json)
Hash identifier: jeUrlAhAo8b268xQxkOp/Nn4nDMIkPxQRDDFWK7+gJk=
Subject key identifier: B6:73:7B:6D:E3:85:C9:88:F3:73:53:53:08:88:C5:73:56:C9:6A:9E
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
Manifest number: 02EC
Signing time: Sun 01 Mar 2026 02:09:07 +0000
Manifest this update: Sun 01 Mar 2026 02:09:07 +0000
Manifest next update: Sun 08 Mar 2026 02:09:07 +0000
Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: c3f9Oy070EgWJk507gNb8WTCAbMmYReV8IjBnPxWMVc=)
2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Validity
Not Before: Mar 1 02:09:07 2026 GMT
Not After : Mar 8 02:09:07 2026 GMT
Subject: CN=69a39fc3-2677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:eb:f6:bd:ea:ae:23:01:fd:c9:3a:98:10:
3b:08:7b:cf:22:7b:5e:2c:08:eb:b2:4b:87:54:c8:
c2:f4:f7:7c:5f:00:52:b8:27:b4:cb:fa:4a:19:90:
33:4f:ba:2d:54:d2:aa:0e:aa:8b:03:73:76:a1:49:
ee:f9:f8:cd:ba:fb:de:e8:5c:db:81:6a:e2:73:af:
23:8d:b6:a3:b8:72:94:e5:f0:4f:42:dc:0c:4f:b5:
a5:1b:b5:c4:d8:ca:56:69:ed:a4:0c:4c:17:dc:47:
3e:91:fb:fa:20:68:ac:72:a4:90:cd:8e:88:23:09:
b9:11:71:f4:44:51:f3:04:9a:b1:e7:df:d6:26:c2:
f1:8a:c6:94:70:9e:60:99:00:2f:5e:da:17:da:02:
24:49:e0:de:9c:d6:c8:e4:c0:35:44:3e:d0:22:85:
a8:38:b8:bd:65:6c:43:c8:e0:3c:da:fa:22:15:28:
6b:19:a5:23:3b:15:87:eb:c2:4a:24:ac:c5:c9:5f:
07:95:5d:cb:95:8d:7e:1d:e0:53:d7:96:cc:bb:2d:
28:01:46:ba:98:40:2f:ef:02:02:05:95:e6:d4:68:
d8:a1:bd:5a:4b:10:62:5a:89:4b:96:85:0f:1e:89:
52:cc:2a:1d:81:cf:d5:db:29:cf:f4:e6:17:7c:e6:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:7B:6D:E3:85:C9:88:F3:73:53:53:08:88:C5:73:56:C9:6A:9E
X509v3 Authority Key Identifier:
keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:63:9f:3e:12:d7:00:6f:06:d8:4c:2f:9d:6b:f7:f1:c8:b9:
e5:e0:61:b4:12:34:12:6c:4b:76:ea:0b:8b:d6:1f:0b:b8:0a:
dc:fe:5a:6c:76:7d:f7:17:53:46:d8:b0:e6:c4:b1:0f:70:dc:
27:11:b7:5a:93:60:c9:9f:c4:22:22:f8:f8:da:23:7f:6b:62:
36:28:80:e8:08:87:fb:77:54:53:c1:b3:dc:db:d5:3d:4d:2d:
da:19:20:21:aa:cf:85:73:9e:74:31:c8:30:c9:af:3f:28:84:
6d:f3:15:14:e4:68:b9:ee:ff:c3:ae:3e:b7:6d:20:89:2f:35:
05:e9:7d:53:84:77:65:85:6f:d2:92:3d:36:36:33:b3:ce:76:
e8:70:b6:81:d3:1d:e4:aa:42:f7:8b:99:d6:5a:9b:ed:63:e9:
c0:8b:56:0c:6e:c5:8c:64:a5:9d:04:ab:05:63:63:18:a3:45:
ba:12:f8:17:60:60:8f:91:49:5a:4d:8f:fb:b2:f2:86:16:ed:
bc:00:fc:54:08:cb:e5:b3:d1:c6:c2:fd:8d:75:52:65:e7:88:
87:50:0e:64:45:b6:d0:52:5c:24:60:9a:90:8d:45:9a:f8:4b:
33:23:78:77:97:40:3a:04:97:09:28:f1:aa:e4:d9:99:6e:50:
e9:b1:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:53 2026 by rpki-client