
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
File: DNjeYk5eS0zpjdodRx4ImBlywHs.mft (raw, json)
Hash identifier: 53J8t/Ve1IhUuLOeYnjO3GdGHYtZdL4QHNT6GUnvuiw=
Subject key identifier: 7A:F4:53:D2:39:64:08:DD:D2:13:8F:0C:E2:14:BA:83:11:BF:AD:09
Authority key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Certificate issuer: /CN=A912B051/serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
Manifest number: 1E
Signing time: Tue 19 May 2026 08:49:10 +0000
Manifest this update: Tue 19 May 2026 08:49:10 +0000
Manifest next update: Tue 26 May 2026 08:49:10 +0000
Files and hashes: 1: DNjeYk5eS0zpjdodRx4ImBlywHs.crl (hash: Pq9XiqKk4GN4/O8vM5heNW2y7DYw1/Nu+pM82VBXhnA=)
2: 3821514E2B4811F19B7264C192833773.roa (hash: hG/7oeyJS10l2sxhKCzDceTLaNr/x0/0JVKwO3GFk10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Validity
Not Before: May 19 08:49:10 2026 GMT
Not After : May 26 08:49:10 2026 GMT
Subject: CN=6a0c2406-825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:1e:b9:c4:d1:49:69:1a:d6:70:18:e6:a5:
02:26:26:f2:a2:10:ca:ce:d5:a5:9c:f2:34:80:40:
01:33:e6:fc:64:34:d1:e7:3a:c9:19:95:db:30:dc:
72:1a:3d:50:71:1c:74:26:b2:c2:e6:bc:20:6b:b7:
86:be:0f:49:c5:20:2a:b1:41:e6:d6:83:2c:06:82:
fd:74:d9:26:91:d5:cb:12:05:5c:7c:d5:77:05:35:
32:dd:c2:a0:bc:f1:7f:97:59:3a:b4:28:dd:7d:24:
82:97:f7:ee:a6:97:15:45:32:a5:01:67:ad:cc:4d:
0a:b0:05:c3:dd:18:03:98:85:08:b5:79:fa:a1:ff:
57:7e:ba:46:d0:2e:64:11:b8:ec:5d:6b:b6:92:cd:
6c:89:8b:39:36:80:41:72:ba:3c:9a:a0:1a:84:3d:
ff:53:ef:e4:1f:f8:d9:58:70:84:ac:f8:d8:f6:2f:
0e:8a:9d:8a:0b:52:d3:e0:81:e4:c5:00:0e:51:25:
ac:a5:31:ec:fb:7e:b2:ce:8b:3d:f7:6e:6e:3b:f2:
86:21:27:b9:ef:81:34:e4:2a:30:29:18:94:f1:c2:
f1:bd:49:15:55:ec:0a:1a:bb:35:65:9a:8c:65:11:
f8:1d:ac:03:61:b4:6f:42:71:77:33:0d:3c:bf:4c:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:53:D2:39:64:08:DD:D2:13:8F:0C:E2:14:BA:83:11:BF:AD:09
X509v3 Authority Key Identifier:
keyid:0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:5e:92:92:ed:f8:0c:55:06:fe:1b:eb:33:f6:88:ab:16:
78:24:eb:8f:bc:b7:23:b7:a5:0a:81:5d:a9:a1:d5:50:64:37:
3c:01:40:5d:4f:19:37:eb:55:9c:a7:f6:ea:b9:6e:ac:6f:24:
44:fb:44:8d:f5:28:c3:b6:ec:f1:aa:31:91:5c:4b:ab:74:08:
0d:6d:8b:1e:71:24:83:1c:2f:c8:a2:bb:6d:06:fe:ea:a8:8f:
cb:4f:bc:b1:57:43:f0:27:a5:f5:ab:36:94:55:1d:08:c8:f3:
f0:6b:d9:e6:5b:52:43:31:2f:65:bd:f6:03:d7:d8:1f:83:ef:
ca:c7:0f:e1:12:17:f8:2a:82:4c:92:61:b3:6f:50:2f:ed:de:
c6:28:fd:04:fd:57:d7:00:1d:42:f9:4d:83:66:fe:36:c1:6a:
5d:82:a9:92:8e:73:03:13:2d:59:0a:f3:23:18:bd:49:8f:a0:
e7:42:e6:55:0e:fc:94:57:f7:4e:8f:da:90:44:18:bc:9e:e0:
af:5b:c8:ea:47:6b:2e:14:bd:5c:8d:b6:58:e4:63:54:3b:2f:
b9:2a:b4:1e:6f:d4:b2:15:0f:a5:d0:d1:29:f4:f6:88:d0:7b:
a6:bc:59:43:67:10:13:9c:f5:9c:0a:4b:b3:04:e3:10:7b:92:
d8:db:7e:cc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QjA1MTExMC8GA1UEBRMoMENEOERFNjI0RTVFNEI0Q0U5OEREQTFENDcxRTA4OTgx
OTcyQzA3QjAeFw0yNjA1MTkwODQ5MTBaFw0yNjA1MjYwODQ5MTBaMBgxFjAUBgNV
BAMTDTZhMGMyNDA2LTgyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGXR65xNFJaRrWcBjmpQImJvKiEMrO1aWc8jSAQAEz5vxkNNHnOskZldsw3HIa
PVBxHHQmssLmvCBrt4a+D0nFICqxQebWgywGgv102SaR1csSBVx81XcFNTLdwqC8
8X+XWTq0KN19JIKX9+6mlxVFMqUBZ63MTQqwBcPdGAOYhQi1efqh/1d+ukbQLmQR
uOxda7aSzWyJizk2gEFyujyaoBqEPf9T7+Qf+NlYcISs+Nj2Lw6KnYoLUtPggeTF
AA5RJaylMez7frLOiz33bm478oYhJ7nvgTTkKjApGJTxwvG9SRVV7AoauzVlmoxl
EfgdrANhtG9CcXczDTy/TH3tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUevRT0jlk
CN3SE48M4hS6gxG/rQkwHwYDVR0jBBgwFoAUDNjeYk5eS0zpjdodRx4ImBlywHsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMDUxL0NFNzY3MTcwMkI0
NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6cGpkb2RSeDRJbUJseXdI
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRE5qZVlrNWVTMHpwamRvZFJ4NEltQmx5d0hzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC
MDUxL0NFNzY3MTcwMkI0NzExRjE4MDlDREUwRTkyODMzNzczL0ROamVZazVlUzB6
cGpkb2RSeDRJbUJseXdIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5dF6Sku34DFUG/hvrM/aIqxZ4JOuPvLcjt6UKgV2podVQZDc8AUBdTxk361Wc
p/bquW6sbyRE+0SN9SjDtuzxqjGRXEurdAgNbYsecSSDHC/IorttBv7qqI/LT7yx
V0PwJ6X1qzaUVR0IyPPwa9nmW1JDMS9lvfYD19gfg+/Kxw/hEhf4KoJMkmGzb1Av
7d7GKP0E/VfXAB1C+U2DZv42wWpdgqmSjnMDEy1ZCvMjGL1Jj6DnQuZVDvyUV/dO
j9qQRBi8nuCvW8jqR2suFL1cjbZY5GNUOy+5KrQeb9SyFQ+l0NEp9PaI0HumvFlD
ZxATnPWcCkuzBOMQe5LY237M
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:48 2026 by rpki-client