
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
File: DNjeYk5eS0zpjdodRx4ImBlywHs.mft (raw, json)
Hash identifier: 4XAnufbVZFSPH6OuE7Us4TJIiWu7ZfZVpDwqiPSOxCk=
Subject key identifier: 8B:25:EB:AD:FB:A0:47:D2:CC:9D:91:F6:4D:9D:9C:94:3A:2C:4B:A6
Authority key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Certificate issuer: /CN=A912B051/serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
Manifest number: 06
Signing time: Sun 05 Apr 2026 08:31:53 +0000
Manifest this update: Sun 05 Apr 2026 08:31:52 +0000
Manifest next update: Sun 12 Apr 2026 08:31:52 +0000
Files and hashes: 1: DNjeYk5eS0zpjdodRx4ImBlywHs.crl (hash: Y0i1y15V//z+2kGeRlDeiTLf9P+kfROVmMn9hJiK89Q=)
2: 3821514E2B4811F19B7264C192833773.roa (hash: e64lUnfS7wfjInkBVUdmQIHSiqksyO4u4kXiPM7qffU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Validity
Not Before: Apr 5 08:31:52 2026 GMT
Not After : Apr 12 08:31:52 2026 GMT
Subject: CN=69d21df9-6e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:21:70:3b:86:e4:16:8c:0e:99:87:df:76:
fc:02:59:fe:26:7e:77:b2:a6:81:ae:2b:80:1e:c9:
95:76:af:7d:77:90:59:3b:46:e7:62:4d:c0:e8:bc:
33:87:54:c2:bb:5f:6e:f0:0a:2a:cc:40:bc:05:6c:
f1:b8:20:b5:f5:69:5e:f8:b8:02:d9:29:f8:06:bc:
08:3e:bb:e7:61:2b:24:ce:b5:c7:2b:b8:1f:35:09:
3f:67:59:d3:56:01:6f:8d:6e:56:7d:fc:69:15:77:
51:f9:59:18:62:e5:44:2e:02:6d:3c:5d:65:e6:f8:
bc:ac:59:01:19:5c:bd:39:1b:9c:33:2b:64:ed:dd:
47:af:8d:6b:7e:9e:a6:a6:d1:83:8c:5e:3c:45:37:
17:c4:be:70:7a:35:a6:6d:74:de:dc:73:b0:5e:e4:
9e:c6:5a:35:c5:a3:60:57:69:f6:17:ab:40:1a:28:
33:b2:06:63:2b:6a:5c:0b:cc:79:67:6f:5e:cc:eb:
51:11:0f:5f:9e:e5:73:6f:8a:8e:3a:cb:3e:5f:c4:
0b:61:2a:01:7f:1e:40:9a:4a:dc:86:c4:97:4d:63:
ba:29:e2:53:43:70:d9:44:4a:b9:46:d7:52:0e:65:
72:cb:b5:7c:45:34:46:d6:ee:5b:0a:3a:fd:17:8c:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:25:EB:AD:FB:A0:47:D2:CC:9D:91:F6:4D:9D:9C:94:3A:2C:4B:A6
X509v3 Authority Key Identifier:
keyid:0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:7c:65:61:ed:03:2b:22:06:72:4d:17:77:e4:56:8c:9f:
3c:7d:7b:89:d4:c7:51:d9:8a:2c:67:94:60:5c:71:8d:bb:59:
db:fc:f4:8c:d5:8e:e1:cf:b3:44:c2:28:86:13:f4:16:1f:d3:
3e:fe:20:00:c3:6c:4d:3b:de:31:7c:08:b1:fc:5e:d7:d6:f6:
2c:25:23:74:66:ee:99:6a:13:f9:b8:22:80:ee:1f:cc:18:52:
fc:58:73:56:0b:8f:5f:3c:46:6d:2f:42:6e:0c:6a:e6:70:08:
4c:9d:09:b1:3b:a2:a9:20:26:36:3a:6d:a7:70:4b:16:de:e6:
54:c6:5d:dc:b7:7f:0f:1f:50:fd:f2:b8:74:0b:6a:87:ae:00:
84:c7:25:39:59:f3:3d:68:82:01:45:44:44:5f:5c:8b:ad:72:
c9:a2:0d:05:33:ba:dc:1d:12:22:04:bc:8f:d8:e6:19:0c:4a:
ab:e5:b1:38:5a:b8:44:0d:44:73:21:66:70:74:23:77:b2:35:
64:a4:43:94:d2:e6:97:9c:0d:36:37:d3:13:c7:35:cd:6f:c0:
e6:8e:cd:8b:bb:a2:bc:21:19:55:a9:d6:68:7b:27:7e:54:da:
a0:a7:5c:90:c5:8c:c4:6f:a4:87:97:16:36:72:e2:ef:36:80:
6c:39:6f:93
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QjA1MTExMC8GA1UEBRMoMENEOERFNjI0RTVFNEI0Q0U5OEREQTFENDcxRTA4OTgx
OTcyQzA3QjAeFw0yNjA0MDUwODMxNTJaFw0yNjA0MTIwODMxNTJaMBgxFjAUBgNV
BAMTDTY5ZDIxZGY5LTZlNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCOTiFwO4bkFowOmYffdvwCWf4mfneypoGuK4AeyZV2r313kFk7RudiTcDovDOH
VMK7X27wCirMQLwFbPG4ILX1aV74uALZKfgGvAg+u+dhKyTOtccruB81CT9nWdNW
AW+NblZ9/GkVd1H5WRhi5UQuAm08XWXm+LysWQEZXL05G5wzK2Tt3UevjWt+nqam
0YOMXjxFNxfEvnB6NaZtdN7cc7Be5J7GWjXFo2BXafYXq0AaKDOyBmMralwLzHln
b17M61ERD1+e5XNvio46yz5fxAthKgF/HkCaStyGxJdNY7op4lNDcNlESrlG11IO
ZXLLtXxFNEbW7lsKOv0XjJH9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiyXrrfug
R9LMnZH2TZ2clDosS6YwHwYDVR0jBBgwFoAUDNjeYk5eS0zpjdodRx4ImBlywHsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMDUxL0NFNzY3MTcwMkI0
NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6cGpkb2RSeDRJbUJseXdI
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRE5qZVlrNWVTMHpwamRvZFJ4NEltQmx5d0hzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC
MDUxL0NFNzY3MTcwMkI0NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6
cGpkb2RSeDRJbUJseXdIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCo4HxlYe0DKyIGck0Xd+RWjJ88fXuJ1MdR2YosZ5RgXHGNu1nb/PSM1Y7hz7NE
wiiGE/QWH9M+/iAAw2xNO94xfAix/F7X1vYsJSN0Zu6ZahP5uCKA7h/MGFL8WHNW
C49fPEZtL0JuDGrmcAhMnQmxO6KpICY2Om2ncEsW3uZUxl3ct38PH1D98rh0C2qH
rgCExyU5WfM9aIIBRUREX1yLrXLJog0FM7rcHRIiBLyP2OYZDEqr5bE4WrhEDURz
IWZwdCN3sjVkpEOU0uaXnA02N9MTxzXNb8Dmjs2Lu6K8IRlVqdZoeyd+VNqgp1yQ
xYzEb6SHlxY2cuLvNoBsOW+T
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:19 2026 by rpki-client