
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File: DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier: bdyX9HznZ9cOLLS93Gm1vKDYnDGQ4L0v6aAUnBYJPWI=
Subject key identifier: 8B:5E:4E:80:98:1A:B7:A6:4F:CC:63:1C:50:2A:29:BB:1A:19:D8:C9
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer: /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number: 6D
Signing time: Tue 27 Oct 2026 08:15:24 +0000
Manifest this update: Tue 27 Oct 2026 08:15:24 +0000
Manifest next update: Tue 03 Nov 2026 08:15:24 +0000
Files and hashes: 1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: SiWaqiRibwvtzvB5PM9y9XQTVZpEHdBMzlGkGT/rg/8=)
2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Validity
Not Before: Oct 27 08:15:24 2026 GMT
Not After : Nov 3 08:15:24 2026 GMT
Subject: CN=6ae05d9c-7b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:80:0d:19:23:cc:fb:2e:ef:e3:19:2b:30:
bd:c1:26:a4:09:c0:e6:ae:c2:57:1a:0b:97:91:a7:
45:b5:a7:57:40:7e:e2:a9:40:ae:b1:5c:0a:4b:4f:
de:ce:cd:ce:2c:f8:1b:91:05:3d:d7:b1:89:81:18:
e0:dd:bf:18:a5:88:9a:09:a2:f6:9f:07:52:89:3b:
91:3e:df:ca:33:59:f5:d8:c5:fa:7f:a2:52:e6:40:
62:a5:8f:4c:f6:1c:a0:b7:4f:2a:95:62:ff:53:66:
b0:a7:fa:5a:fe:0a:05:74:f6:7b:69:9d:80:5c:8a:
53:46:bf:9e:27:6a:ca:f9:13:a6:ee:d4:1d:ed:b2:
37:e2:68:37:1e:f1:b6:f7:db:8f:71:3e:d6:0e:5a:
23:4f:9f:50:51:8f:97:81:ed:e3:35:a6:07:6b:49:
5b:0c:2a:98:1a:f9:c1:a4:2f:e0:5c:3c:74:2d:75:
e1:52:0c:3c:61:28:b0:5d:46:6e:c5:2b:b3:11:ec:
40:64:81:13:fd:de:bf:94:3a:4a:f3:37:ca:f6:96:
12:1b:8e:12:9b:ca:78:bc:97:0a:a3:9b:60:37:84:
e5:f1:fa:c2:09:75:d3:00:14:49:a6:a7:6a:73:22:
10:dc:2d:2b:e7:c2:0a:66:13:e1:cc:54:b7:8d:73:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:4E:80:98:1A:B7:A6:4F:CC:63:1C:50:2A:29:BB:1A:19:D8:C9
X509v3 Authority Key Identifier:
keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:59:4a:64:a3:b2:40:18:76:b5:6e:17:f2:7d:62:fe:47:
ca:92:65:94:3a:07:3c:91:34:98:d3:e0:c3:71:85:49:11:80:
a9:78:eb:47:7b:e9:40:5c:b4:ef:15:cd:2d:16:02:28:97:a0:
4c:3a:4f:7a:2d:b0:41:75:24:f6:f0:09:14:5a:bc:3b:6c:57:
6b:48:98:e8:e1:be:34:19:70:ce:51:eb:8e:51:15:85:ac:03:
34:6c:1b:cb:58:15:c7:79:79:2c:59:5c:30:12:b6:76:b0:94:
ae:d2:e5:0c:a2:0a:9c:bb:5d:56:1b:a8:26:8a:2d:3d:88:91:
c3:2d:c3:95:c4:29:62:fd:88:11:18:a8:b1:b0:81:fd:c0:a1:
3d:c3:82:fc:eb:1b:be:18:4c:bd:ad:f8:f2:51:4f:ca:6b:3b:
55:a1:45:4d:70:02:7b:78:46:f3:74:1d:67:ec:58:ce:ea:de:
e2:59:1c:13:6d:2d:02:e9:f3:57:ca:85:d1:6a:3b:7a:1c:45:
d1:c4:66:d7:1c:e7:13:eb:30:df:f1:8c:63:35:63:f8:cf:87:
7e:98:61:08:15:3e:50:95:c3:23:08:a9:4b:b7:73:6b:47:09:
b1:4c:2b:4a:92:4e:6d:6e:d7:0f:ea:e8:59:7e:a0:60:34:df:
7d:42:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:36:52 2026 by rpki-client