
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier: H+LeuKoz1ykb7KglHVkgKCfv6jECrn4NDX1J71BHQOc=
Subject key identifier: 8C:C6:8E:3E:D6:E1:CB:7D:66:C7:F8:50:88:12:DF:3D:FF:5E:FD:31
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number: 0C4B
Signing time: Thu 16 Apr 2026 18:40:24 +0000
Manifest this update: Thu 16 Apr 2026 18:40:24 +0000
Manifest next update: Thu 23 Apr 2026 18:40:24 +0000
Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: WqCn3194iF6UG2nHMxGBqOjUEtOmZ8XvT6jvkEj0CCI=)
2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Validity
Not Before: Apr 16 18:40:24 2026 GMT
Not After : Apr 23 18:40:24 2026 GMT
Subject: CN=69e12d18-95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d3:9f:86:b9:54:97:20:b2:0f:60:f6:8d:04:
a1:2b:0c:43:a5:21:9c:cf:39:44:14:01:70:51:d1:
6a:a5:3a:ee:84:ef:c1:f0:cf:43:2e:d2:84:ca:bf:
db:f7:73:9f:fe:52:dc:94:14:c1:65:30:26:d1:cb:
2f:e6:fc:46:1b:8e:ff:f5:a5:70:a8:7f:49:e3:18:
5a:ef:3f:9e:e2:ee:ef:a0:97:ba:b9:c4:f6:78:e8:
93:15:e0:c5:03:00:ff:30:be:73:f2:9e:17:5f:6d:
c3:7e:4f:19:16:10:78:67:00:ff:d9:76:ec:09:31:
a5:ad:82:19:c7:9c:be:00:4f:34:7b:16:d7:53:ae:
6f:a8:08:c4:8f:f2:a3:20:8f:8b:47:5a:c4:43:2f:
91:02:80:57:bb:35:7f:04:89:53:d9:54:46:08:55:
fd:13:4a:ec:2d:a4:cd:35:4d:f3:cb:74:9d:7c:41:
cd:14:c2:a5:80:26:ad:dd:91:05:a9:72:f3:bf:68:
9e:f9:e9:ab:b3:74:5e:8f:40:70:c2:65:78:34:80:
38:06:e8:bc:e7:c0:dd:17:86:45:7d:0c:45:a5:34:
40:c9:4b:5a:e7:ec:9e:97:a5:fc:03:e1:f1:5c:bb:
51:48:8a:75:7c:b9:83:c7:0d:82:49:b5:80:3e:ce:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:8E:3E:D6:E1:CB:7D:66:C7:F8:50:88:12:DF:3D:FF:5E:FD:31
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:dd:f5:e1:2a:99:ce:de:35:07:81:8b:3b:cf:bc:e3:fa:
06:c5:5f:17:0a:30:f2:11:df:19:3c:f2:94:99:85:16:02:ff:
b3:69:0f:c3:6f:a1:02:ad:e2:cd:ff:c2:f0:86:3e:ff:02:15:
98:c7:d7:d6:e0:0c:d9:78:2d:ee:8e:b2:1d:08:6b:80:4c:c7:
c3:14:d8:9c:64:10:6f:2a:b5:16:68:1b:ca:b8:6a:cf:89:8c:
46:a6:58:0a:d9:88:6c:85:70:53:4a:96:ad:9d:b8:29:f4:77:
a5:34:d4:9f:4c:d5:eb:40:8b:2a:2f:41:aa:2f:1b:6f:93:39:
fd:03:7d:3c:7f:23:a6:f0:1b:11:d9:ce:0e:98:48:43:ec:13:
f2:fe:00:c0:9c:03:ba:53:b1:04:9e:b6:57:5f:ec:0e:f8:0a:
83:b6:bf:57:fe:e0:7b:fe:d6:88:81:03:33:65:68:4f:9e:44:
5c:60:be:ca:d7:9a:1d:39:49:fb:75:40:d1:4c:77:85:71:8c:
a0:4b:2a:b0:65:35:de:04:9b:d2:57:25:c2:65:c4:90:b7:f6:
53:99:0b:59:3d:48:6c:07:0e:90:cf:23:a3:63:5e:76:74:d8:
a4:9e:dd:59:ce:1a:41:64:c1:2c:35:80:5a:28:65:4d:b3:4e:
5d:be:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:50 2026 by rpki-client