
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier: wSNeSB+IijAyWcZZKuHD2sqagOR0rM616FX56ohpMoo=
Subject key identifier: DE:68:6D:6C:04:DF:49:18:34:9A:BD:72:15:72:08:F0:05:9B:C5:0B
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number: 0C33
Signing time: Mon 02 Mar 2026 02:22:36 +0000
Manifest this update: Mon 02 Mar 2026 02:22:34 +0000
Manifest next update: Mon 09 Mar 2026 02:22:34 +0000
Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: NWEjLsgGaI7YaWOH0Y/PA+S0URA85A8Qg4pMJ4zbGqw=)
2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Validity
Not Before: Mar 2 02:22:34 2026 GMT
Not After : Mar 9 02:22:34 2026 GMT
Subject: CN=69a4f46b-6434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:ce:27:44:d3:8a:4c:f8:4a:70:f5:3f:e9:
05:4b:40:7a:18:76:be:97:ba:67:aa:8a:87:91:e9:
bc:62:b3:d0:5c:58:9d:72:7c:99:04:5a:6b:80:ed:
ab:fb:41:02:6b:f5:5e:84:e2:37:be:35:55:d0:14:
86:ae:76:18:d3:84:0c:f7:95:eb:61:ac:8d:3f:05:
ec:39:06:84:e6:55:4d:00:f9:0e:88:af:b9:56:22:
23:f6:9c:97:5b:aa:1f:c5:22:1b:44:f2:3c:e0:42:
fd:7b:ce:b8:69:8f:1e:5d:74:c2:0c:6d:36:c0:79:
07:b9:27:7f:45:5b:13:c3:9f:89:d5:df:41:04:11:
72:17:03:62:bd:0a:e7:c5:bb:8b:37:a6:30:42:46:
ad:9c:02:b2:93:8c:d2:b0:e7:70:b1:3e:0f:8a:02:
b4:c3:7e:6f:10:3e:19:f8:41:4f:75:91:70:37:64:
ef:3e:66:c8:ae:09:74:d5:15:16:06:59:a2:0f:48:
3e:f3:4a:09:32:d4:59:e2:76:9f:b7:56:7f:62:99:
1c:aa:e9:7b:ef:92:83:5d:f7:d7:64:b2:0e:5e:a5:
2b:a5:5b:b4:26:b0:f8:b6:6b:3e:6c:ba:c2:4a:f5:
1b:91:ce:49:8b:4e:0a:63:a8:b3:2c:e5:45:2a:6c:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:6D:6C:04:DF:49:18:34:9A:BD:72:15:72:08:F0:05:9B:C5:0B
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:67:45:43:98:94:0c:8a:cf:92:1b:05:96:fb:c2:64:61:
fa:49:9d:ba:cb:e7:ee:f3:f0:c3:d0:c7:b6:2f:42:2d:cc:62:
20:c4:96:ab:36:5e:9e:2a:3d:7f:61:c8:fa:44:51:16:a9:12:
ae:2f:c7:a7:9c:05:0a:16:d7:d8:72:bb:52:12:ea:8a:00:28:
c5:74:6d:8e:a2:40:1b:d8:52:af:2e:12:38:20:4e:e6:b8:8d:
1b:30:61:ca:56:38:74:1b:51:03:46:ad:7e:25:c8:4d:23:27:
d3:3a:a2:4e:50:2e:f6:5f:c9:06:8a:4b:d6:8d:bf:d7:a9:25:
fd:66:16:30:48:e6:31:fc:6c:5f:5b:11:6b:92:d6:c9:fc:96:
91:62:f7:47:48:9d:3c:0a:83:dd:28:ca:27:0d:bd:63:03:07:
3d:7d:8b:70:08:5b:ff:19:41:a5:fe:79:5b:05:6a:b7:e1:0f:
95:fd:de:87:6f:80:60:95:ea:17:b0:9d:6d:19:65:85:39:d9:
97:fd:76:f0:81:45:89:02:76:aa:37:4d:68:72:82:87:e1:67:
f6:45:95:1c:c9:cd:61:7d:f8:4f:07:c1:cd:b5:80:ed:bd:5b:
d5:ec:a5:11:34:57:e5:71:b2:12:6b:8b:7a:80:d2:cf:39:3d:
a8:99:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:41 2026 by rpki-client