
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json)
Hash identifier: xWAalol3r0dZigKV481hbOGlKHAU1oz0+kk4n47fVLk=
Subject key identifier: 04:1F:20:AB:C6:F9:6D:84:A3:32:E2:0F:D8:82:94:4D:8B:5F:9A:19
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
Manifest number: EE
Signing time: Thu 21 May 2026 06:29:07 +0000
Manifest this update: Thu 21 May 2026 06:29:07 +0000
Manifest next update: Thu 28 May 2026 06:29:07 +0000
Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: 1QUP73lO5KWBw4JWulCzvgJD2ups2e2QjBPUMMa/u9w=)
2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: kAGTtiStnHMpbONE8q36czkYvOAd/yxjeZDFDMyjrzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Validity
Not Before: May 21 06:29:07 2026 GMT
Not After : May 28 06:29:07 2026 GMT
Subject: CN=6a0ea633-0969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:c3:05:95:75:f9:1a:c6:33:b5:07:fa:9d:
0a:4d:d0:ee:73:a3:c5:1a:4a:91:ed:c4:e6:7f:bf:
ee:03:83:bf:db:69:c7:1c:b6:e6:a4:58:8e:a2:fb:
c2:3a:93:b4:a9:95:eb:ef:69:65:00:61:e3:e5:fc:
f4:41:48:42:aa:c5:ee:f9:95:a7:ba:40:5a:c6:0b:
16:cb:50:13:de:26:18:0f:63:ab:50:b9:1b:c7:ba:
12:2b:fa:cb:5c:89:a8:e7:b1:01:43:81:a3:2b:1d:
c2:0c:b0:02:3b:5f:3f:ef:d4:70:5c:dd:44:05:cd:
bc:8a:02:25:dd:4f:93:e5:19:06:33:03:38:fe:d3:
0a:67:09:5f:0e:19:81:a0:61:2a:0b:c1:6c:58:64:
e3:a4:ec:32:41:18:e8:84:9d:8b:16:99:40:df:59:
08:cd:17:33:70:b2:7f:a3:29:7c:70:fb:80:79:aa:
92:6d:09:74:7b:ed:f5:a3:57:36:07:3f:5a:c7:3b:
5b:55:3a:5e:e1:75:78:74:5a:13:99:cc:2e:b9:82:
9e:6d:ec:94:f8:68:cf:31:76:4a:6d:52:71:40:b0:
12:b4:e4:f3:e5:3b:a0:de:a2:0d:28:54:de:00:f9:
32:45:b9:0d:1e:08:9e:ba:2d:9b:2c:f6:da:0b:31:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:20:AB:C6:F9:6D:84:A3:32:E2:0F:D8:82:94:4D:8B:5F:9A:19
X509v3 Authority Key Identifier:
keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:76:a4:bf:af:07:d7:de:49:d5:b8:2b:a1:70:41:d3:bc:
f2:15:8f:db:95:5b:db:66:5f:8d:9a:09:6e:9e:16:40:f1:21:
26:1e:71:0c:df:3b:8a:53:70:15:1e:ae:9d:a6:5d:7a:90:4e:
0d:d2:b5:cc:82:98:10:f1:c3:04:58:9d:f5:37:63:57:ec:7f:
41:52:76:01:d7:62:31:52:6b:6a:67:0a:94:ba:24:5d:26:97:
93:a8:8a:f3:52:7f:42:c7:3c:90:4c:d8:66:c4:eb:77:e2:0a:
57:1d:22:25:68:a3:70:d8:50:3e:59:a4:0d:27:dc:e5:9d:1b:
5b:96:c8:07:a5:0a:77:4f:43:12:93:c4:b8:27:4d:5e:13:9d:
96:37:33:40:02:18:34:b4:48:bc:42:cc:53:6e:de:c4:57:ad:
be:67:e3:07:c8:6a:ad:ff:3f:fd:9f:7a:2d:a6:3b:45:5f:96:
14:d1:73:91:96:d9:e0:75:58:cb:da:99:09:28:01:9a:9e:26:
27:6b:03:f6:31:9f:c3:f5:59:8d:83:79:c7:37:10:5d:9d:b9:
48:fe:15:ec:22:db:75:23:19:2c:0f:8b:d3:ab:5c:e6:61:6c:
47:c3:26:73:7d:c3:cd:66:e9:a6:9f:69:33:d2:ed:fd:cc:03:
09:98:c6:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCQ0YxMTAvBgNVBAUTKDBDODU1OUQyMzNEQkZCQUZCRDEwMzIyMjk5ODVERjNE
RjkxMzQ4RkMwHhcNMjYwNTIxMDYyOTA3WhcNMjYwNTI4MDYyOTA3WjAYMRYwFAYD
VQQDEw02YTBlYTYzMy0wOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VbDBZV1+RrGM7UH+p0KTdDuc6PFGkqR7cTmf7/uA4O/22nHHLbmpFiOovvC
OpO0qZXr72llAGHj5fz0QUhCqsXu+ZWnukBaxgsWy1AT3iYYD2OrULkbx7oSK/rL
XImo57EBQ4GjKx3CDLACO18/79RwXN1EBc28igIl3U+T5RkGMwM4/tMKZwlfDhmB
oGEqC8FsWGTjpOwyQRjohJ2LFplA31kIzRczcLJ/oyl8cPuAeaqSbQl0e+31o1c2
Bz9axztbVTpe4XV4dFoTmcwuuYKebeyU+GjPMXZKbVJxQLAStOTz5Tug3qINKFTe
APkyRbkNHgieui2bLPbaCzHaXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQfIKvG
+W2EozLiD9iClE2LX5oZMB8GA1UdIwQYMBaAFAyFWdIz2/uvvRAyIpmF3z35E0j8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JDRi81RTc4QjYxNEVB
NzMxMUVGQUM4QkM5MTFDNEY5QUUwMi9ESVZaMGpQYi02LTlFRElpbVlYZlBma1RT
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0JDRi81RTc4QjYxNEVBNzMxMUVGQUM4QkM5MTFDNEY5QUUwMi9ESVZaMGpQYi02
LTlFRElpbVlYZlBma1RTUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFsJ2pL+vB9feSdW4K6FwQdO88hWP25Vb22ZfjZoJbp4WQPEhJh5xDN87ilNw
FR6unaZdepBODdK1zIKYEPHDBFid9TdjV+x/QVJ2AddiMVJramcKlLokXSaXk6iK
81J/Qsc8kEzYZsTrd+IKVx0iJWijcNhQPlmkDSfc5Z0bW5bIB6UKd09DEpPEuCdN
XhOdljczQAIYNLRIvELMU27exFetvmfjB8hqrf8//Z96LaY7RV+WFNFzkZbZ4HVY
y9qZCSgBmp4mJ2sD9jGfw/VZjYN5xzcQXZ25SP4V7CLbdSMZLA+L06tc5mFsR8Mm
c33DzWbppp9pM9Lt/cwDCZjGjw==
-----END CERTIFICATE-----
Generated at Thu May 21 13:21:52 2026 by rpki-client