
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json)
Hash identifier: 5dz0/MxekjFn7iSyXBleAEeqb1x67ajHEnR4XFyWPls=
Subject key identifier: 1B:43:1D:46:8E:11:17:F7:99:77:06:95:D4:B6:60:66:75:57:B3:15
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
Manifest number: 0AE8
Signing time: Thu 10 Sep 2026 19:20:29 +0000
Manifest this update: Thu 10 Sep 2026 19:20:28 +0000
Manifest next update: Thu 17 Sep 2026 19:20:28 +0000
Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: xVTNp+wv6C56RgPtBUqh52VvJkTCYZ7/ItJ02ik+eQQ=)
2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Validity
Not Before: Sep 10 19:20:28 2026 GMT
Not After : Sep 17 19:20:28 2026 GMT
Subject: CN=6aa302fc-dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:5c:36:2e:d2:2b:af:50:95:66:d4:78:42:
b9:bb:09:94:ee:98:b6:1b:2a:61:0c:cb:da:20:fc:
ca:93:56:fb:a6:61:55:2f:3f:a7:94:8e:88:19:77:
08:6d:05:c9:3e:f5:55:20:05:b6:c6:98:1c:f8:fa:
9d:62:02:84:e0:16:58:91:35:86:77:82:4b:2c:06:
58:6e:2d:ae:34:ae:cc:76:dc:5c:e9:57:f6:6d:fe:
88:43:5a:6b:a8:44:eb:d9:9b:b2:c0:8f:71:ab:e7:
fe:6d:b0:b5:2e:da:a5:70:82:1a:e9:92:c0:7c:d9:
d9:ca:68:ed:e8:8a:b0:cf:12:7a:02:08:4c:05:05:
ae:4d:8a:25:b2:74:db:6e:2a:a4:3c:4f:ff:0f:12:
32:b8:9d:f0:7e:bc:65:77:db:36:2c:4d:71:78:6c:
3a:a6:8e:9b:44:c8:4e:cd:dc:ce:bd:53:cb:44:04:
9d:d6:bb:50:5f:15:31:76:18:11:a8:a6:9f:f0:2e:
9f:07:b9:70:43:0b:98:16:00:44:21:20:0e:72:45:
85:c6:f2:a1:c0:e7:9e:71:5b:e4:93:2d:00:7b:1e:
ea:84:7d:48:28:15:5f:75:c1:d7:db:f7:ac:b3:6a:
cb:7b:83:4c:36:79:4c:ca:ad:ed:90:2b:7d:da:f3:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:1D:46:8E:11:17:F7:99:77:06:95:D4:B6:60:66:75:57:B3:15
X509v3 Authority Key Identifier:
keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:3a:92:14:8a:42:e2:86:dd:8a:9b:9a:81:b1:46:08:ba:
e4:c8:f7:3a:38:de:9e:9e:3a:c3:1b:06:79:3b:ca:22:9f:a3:
f0:e7:7b:aa:2f:3d:75:59:63:4f:5e:76:15:b4:68:07:aa:3b:
da:4a:99:81:64:56:6c:80:de:9a:c0:e0:fb:03:de:9e:ef:2a:
e2:5c:bc:31:4f:5d:8e:da:c7:68:2c:71:27:5d:3f:8a:21:bd:
b6:5c:97:9a:a6:4d:80:1b:25:8d:5f:ab:67:b1:90:5f:e3:7c:
24:a0:c9:0e:d9:13:24:26:32:08:76:09:4e:54:ba:31:76:e4:
12:2b:56:bc:85:2e:5a:59:31:9c:04:3d:1a:8d:66:08:2f:f7:
6c:9b:0c:e9:7e:69:18:61:c2:1c:34:f6:6d:8f:4d:e8:ac:e6:
bd:a1:bd:b3:98:9e:27:a1:42:5a:4c:1f:9d:9a:1e:96:c1:34:
39:6c:6c:64:97:81:c8:2f:68:85:e7:94:1c:58:a2:00:7c:90:
73:5e:c9:9a:0e:69:7a:fd:ea:29:1a:33:9d:77:86:1c:17:e8:
c2:06:97:e3:07:e4:dd:55:65:ee:cb:08:b2:66:42:ec:02:26:
cb:7e:90:de:c9:e6:c7:ea:42:db:40:96:75:c0:7a:33:ac:45:
73:6e:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:08:27 2026 by rpki-client