
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File: DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier: JtZnxsb7rwCifjMGnxMNRin7u7/4p4E5IIFLT7Sp4T4=
Subject key identifier: 03:95:83:1C:16:7A:F6:0E:0D:A9:E0:A5:BB:7B:2F:B8:8A:06:BF:68
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer: /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number: 5E
Signing time: Sat 17 Oct 2026 08:53:12 +0000
Manifest this update: Sat 17 Oct 2026 08:53:11 +0000
Manifest next update: Sat 24 Oct 2026 08:53:11 +0000
Files and hashes: 1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: o11VdritJgMJdo1iRyg2f/2MTpePOBqPXc0GIz8zM94=)
2: 5A98E30A42CB11F1992134BCC5833773.roa (hash: A2UYdaAyeRv93KkABaSgrqSGjF16Qsj6+LJRZzldEFU=)
3: FE7346D642CC11F1A52BA276C6833773.roa (hash: tvwf4DAv3iIkKDVBaLvU4xQwNZROIguZpPcMUL1yZRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Validity
Not Before: Oct 17 08:53:11 2026 GMT
Not After : Oct 24 08:53:11 2026 GMT
Subject: CN=6ad33778-91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:87:68:67:ec:d2:ea:e3:ef:13:07:89:d4:
e6:ef:8f:eb:fd:f4:fe:f8:5c:58:75:5a:1d:c6:68:
5b:88:50:f1:c0:ce:ad:75:7f:1c:4a:10:33:a9:f8:
d7:54:95:c3:8b:02:b1:50:ce:69:f5:5e:2d:f9:54:
f9:99:ea:f5:8b:1b:81:1a:63:c9:f4:d5:b1:a6:61:
33:8d:49:ea:aa:53:b8:99:44:5e:35:a1:51:af:f5:
50:79:77:da:d2:60:75:c0:c7:26:03:db:c7:fa:20:
b8:47:96:0e:a8:0d:2e:1a:e8:78:c8:4d:84:55:60:
2b:11:04:b5:2e:01:10:b6:25:da:15:8e:b0:9c:f2:
aa:76:5a:1f:5c:e7:59:d5:43:a9:c2:a8:50:6f:db:
3a:9a:99:ac:48:9b:9a:51:6e:df:5c:61:77:42:40:
f5:0c:e3:19:ec:9c:71:3d:7c:8c:fa:c0:27:e0:4f:
b1:7a:8b:1b:47:ec:f8:c7:fa:45:67:18:73:36:f5:
79:09:9c:fc:b8:7a:68:70:60:ca:9d:38:ae:e4:34:
36:7a:05:fd:53:64:57:c8:99:e3:2f:42:16:56:19:
52:9b:8f:22:8d:53:06:36:24:78:99:3a:86:0a:f1:
56:db:27:a5:6a:f1:d9:6c:6f:73:d0:15:bf:bc:7f:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:83:1C:16:7A:F6:0E:0D:A9:E0:A5:BB:7B:2F:B8:8A:06:BF:68
X509v3 Authority Key Identifier:
keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:a5:87:f9:18:59:36:85:c7:7c:12:07:95:ac:d6:31:37:
14:3d:b7:c7:8e:24:b8:4c:7f:b7:6f:05:ca:67:3f:07:de:5b:
53:86:ed:40:a8:37:58:ef:3b:34:55:00:f5:d8:e9:82:87:0b:
08:74:be:1f:97:e3:e5:4f:a8:a7:d0:a2:8d:c8:c1:d8:1a:52:
ad:5f:e2:ba:ac:5a:b9:72:1d:31:f0:9d:ce:e4:dc:97:93:68:
b0:82:ab:00:59:1f:ee:b5:8f:4c:bc:81:97:00:2d:9b:08:ff:
9f:14:f5:2e:c2:82:23:de:bc:ae:bf:f9:f2:d7:56:2d:20:51:
7d:b1:1f:4c:7d:e5:73:f1:c8:10:1a:3b:63:92:4a:fa:6b:fc:
18:91:f5:93:a6:bd:a6:29:aa:91:01:9c:3b:7e:18:55:1f:f4:
41:38:14:9b:ab:7b:f7:88:75:58:55:14:3e:e7:ee:3f:64:a9:
e9:4c:af:dc:9c:16:8c:ab:77:28:04:05:1f:5b:a3:39:31:49:
32:be:e6:d0:15:5b:57:08:dd:67:a3:12:0c:2d:14:b7:3e:0c:
1c:6d:33:f1:cc:4a:2f:d5:de:d7:d6:a3:24:bc:77:e1:5a:93:
ca:84:70:32:64:d5:aa:be:f6:5b:5f:d1:f6:73:68:55:0d:1f:
df:e3:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:21:42 2026 by rpki-client