
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
File: DNjeYk5eS0zpjdodRx4ImBlywHs.mft (raw, json)
Hash identifier: Ngp+o/plLvj3o/zjkRfoAGH755K/gMDoPZUwW+PQtB0=
Subject key identifier: 5E:2D:1C:BD:6E:04:7B:6E:4E:7D:13:F0:6F:9F:00:63:C4:20:54:03
Authority key identifier: 0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
Certificate issuer: /CN=A912B051/serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
Manifest number: 6F
Signing time: Tue 27 Oct 2026 08:15:09 +0000
Manifest this update: Tue 27 Oct 2026 08:15:09 +0000
Manifest next update: Tue 03 Nov 2026 08:15:09 +0000
Files and hashes: 1: DNjeYk5eS0zpjdodRx4ImBlywHs.crl (hash: Z5InGw4dD59ZqB/iW79yYFSeJFJsznlPyhjKfjRj1tU=)
2: 3821514E2B4811F19B7264C192833773.roa (hash: hG/7oeyJS10l2sxhKCzDceTLaNr/x0/0JVKwO3GFk10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B051, serialNumber=0CD8DE624E5E4B4CE98DDA1D471E08981972C07B
Validity
Not Before: Oct 27 08:15:09 2026 GMT
Not After : Nov 3 08:15:09 2026 GMT
Subject: CN=6ae05d8d-78a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:13:cb:d6:22:36:c5:db:fc:cc:ca:29:26:
39:b7:98:cd:36:ba:b2:15:b5:99:f3:1f:19:60:78:
d9:e7:0b:b8:2c:99:9e:7f:e1:4d:ab:c8:2f:b3:9d:
00:9e:dd:07:0e:23:00:91:e6:d5:f3:bc:0c:ca:72:
88:e6:5f:07:ba:1f:ab:2a:f7:1c:49:10:53:9b:54:
00:1c:44:bd:05:0e:39:97:20:81:e7:2f:88:a6:da:
94:3a:e1:76:4c:c9:9d:44:7a:16:ed:10:fe:b3:2b:
ea:32:14:c1:bb:53:17:cd:a4:64:9a:9a:f8:68:60:
76:81:6d:68:3f:6c:89:d7:b5:06:4d:59:0a:aa:96:
48:28:c5:7e:c5:76:6e:32:66:77:4a:9e:54:c4:69:
f9:46:16:2e:c8:6b:ce:09:a5:04:68:8f:17:6e:70:
c8:c3:bd:84:34:03:ce:67:ef:6a:4f:1c:75:a6:84:
5f:fc:94:e3:ec:d2:75:85:9f:85:09:53:4f:12:1d:
fd:6f:90:0b:66:39:d6:66:4f:62:05:d4:52:11:01:
fd:1e:7d:e2:d7:47:a9:95:11:dd:32:88:69:bf:44:
67:a6:11:aa:55:fe:fb:15:c8:c5:b6:39:d3:36:69:
38:7a:20:c8:a5:ac:55:1c:7e:29:3f:75:7e:66:3f:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:1C:BD:6E:04:7B:6E:4E:7D:13:F0:6F:9F:00:63:C4:20:54:03
X509v3 Authority Key Identifier:
keyid:0C:D8:DE:62:4E:5E:4B:4C:E9:8D:DA:1D:47:1E:08:98:19:72:C0:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNjeYk5eS0zpjdodRx4ImBlywHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B051/CE7671702B4711F1809CDE0E92833773/DNjeYk5eS0zpjdodRx4ImBlywHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:dc:1a:1f:51:21:ce:c4:c1:64:7e:14:5b:74:bf:84:4a:
85:4e:63:6e:11:3a:26:b4:aa:c7:ea:d7:b9:c3:e3:74:95:64:
fb:d2:ed:8b:84:99:97:05:96:ee:7d:64:5c:8c:c9:0c:59:9f:
c4:62:eb:f5:a6:2c:13:7c:73:b6:62:55:bc:38:52:22:f8:88:
00:75:d4:d9:14:93:d8:8e:f9:ec:25:64:19:2b:43:34:65:b8:
21:43:b7:15:18:b0:c3:bc:8c:72:45:17:66:e5:3d:52:e0:01:
2b:1c:d2:5e:bc:54:7c:0e:59:0a:8a:e1:28:77:5e:90:8e:c5:
d4:3b:20:5d:ca:16:40:4f:b0:8f:d6:35:8f:44:31:9c:9a:d1:
e1:00:0f:f8:19:ba:cf:b1:80:c1:69:ed:52:10:14:85:4e:71:
71:21:56:d0:ad:1e:ba:ac:40:6a:7f:a8:43:28:f0:61:be:3e:
53:82:a0:38:a9:23:52:84:78:c9:3c:eb:8e:63:f3:50:d5:68:
1f:8b:29:a0:92:f5:ee:42:75:7c:9c:1e:4d:e8:60:d0:dc:6a:
8b:56:85:59:f4:41:b0:27:c9:a1:0c:f8:6b:a9:10:a5:c5:10:
94:49:15:22:da:3c:42:43:8c:a1:bf:71:88:85:b9:5b:ac:bc:
ed:7c:16:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:24:44 2026 by rpki-client