
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json)
Hash identifier: K+ZD5zr3nSUZJ3zFsyZ0vYahwGknM/90k5tS52ighJs=
Subject key identifier: D3:C5:01:9F:B5:54:57:DA:2F:10:9E:32:14:80:CE:B9:74:DA:AE:2F
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial: 14FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
Manifest number: 14D9
Signing time: Wed 20 May 2026 16:51:16 +0000
Manifest this update: Wed 20 May 2026 16:51:15 +0000
Manifest next update: Wed 27 May 2026 16:51:15 +0000
Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: D6DsZ9AOBMXmvq1+SiBdPyN757IAgFibe98MV9S0NDw=)
2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: ArAdPL5/SlWszByBzcRsUxhCmIodCbyw1Zs/9kQ6QAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5370 (0x14fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Validity
Not Before: May 20 16:51:15 2026 GMT
Not After : May 27 16:51:15 2026 GMT
Subject: CN=6a0de684-51e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:a2:08:17:de:36:cc:09:ce:15:60:62:0c:
b4:d3:88:34:e3:3b:a7:af:08:4c:30:2d:09:10:36:
5e:c7:44:87:2e:7a:9c:c4:51:0c:a1:3f:6e:92:a5:
aa:91:7c:6b:0b:1d:e2:4e:b6:21:12:d0:f2:a6:be:
d6:6d:17:58:24:a7:da:7f:81:10:c1:9e:47:60:86:
1e:2d:fb:6b:ec:1f:a7:21:a6:0f:d4:95:c9:d9:aa:
97:f5:e2:0c:fe:53:fd:bc:f0:48:1d:3e:3a:b3:36:
9b:fb:98:c7:c7:38:eb:44:04:82:ce:ad:74:59:c2:
98:19:78:25:0a:f5:19:5f:6d:39:98:0f:f0:26:9c:
be:cc:a1:4c:9b:fe:fd:15:e7:b4:92:ae:76:52:31:
03:70:b7:d2:15:95:f9:86:d8:d7:d7:e6:07:71:77:
70:5f:f3:5d:e7:8e:f5:b8:f9:63:fc:31:8c:df:0d:
d6:74:03:3f:f9:d3:7b:26:93:e2:13:fb:12:77:77:
e7:1d:fd:8c:56:a3:61:8a:d7:9a:8a:df:eb:07:e3:
35:98:c7:c5:86:75:79:d6:98:a9:3c:38:4e:49:ce:
dc:8c:ba:15:9c:a7:00:84:6b:44:ae:9f:6d:9a:00:
11:59:fb:63:f8:e5:00:5b:df:a7:ec:be:bc:49:ce:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:01:9F:B5:54:57:DA:2F:10:9E:32:14:80:CE:B9:74:DA:AE:2F
X509v3 Authority Key Identifier:
keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:6d:35:aa:57:f3:41:a3:52:4f:a9:66:5a:e2:5e:ad:94:
7d:6e:d4:b0:5a:3e:c6:bb:b0:9f:33:b4:ed:47:30:06:b6:52:
9a:6b:05:ed:8f:8c:d4:02:fa:e8:0e:88:6d:e0:7b:27:35:06:
11:f7:53:24:1d:d7:77:e3:b9:0e:52:6b:f5:2b:74:99:60:eb:
4e:fc:bd:11:1f:25:da:78:f0:f9:af:94:f6:4d:d6:9f:32:49:
a6:ca:a6:2b:b1:4a:ec:11:fd:a6:eb:ee:6a:ed:11:54:2d:ef:
5f:73:7b:49:54:9b:99:4b:b8:95:cd:25:12:da:0a:d0:8d:b5:
55:b1:ee:d0:18:07:e3:bd:3e:53:25:ce:99:64:06:26:51:40:
ea:46:e3:be:78:ec:54:f2:50:87:67:44:11:cd:b6:81:e4:e7:
3a:dd:1d:8b:e0:9d:bd:1c:16:da:e2:4e:a4:61:ce:ad:4a:53:
fb:62:a8:cc:e3:69:5c:f3:91:c6:16:71:b9:cb:d9:b3:8f:c0:
75:a8:2e:62:06:2f:d5:f4:ea:dc:72:a9:4b:51:44:29:a5:f8:
4d:ed:2b:0e:d5:96:f8:8e:45:2a:e7:07:64:b6:64:87:6d:b0:
dc:50:81:88:80:40:3a:f7:56:4e:cb:2a:26:99:1b:6a:1f:db:
be:0a:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:52 2026 by rpki-client