
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: 1aQcb41yrYJFhH7vqGw5IM67AGo417xvlyKyS2QucLg=
Subject key identifier: 87:EC:3F:1C:2A:C3:C5:BD:02:23:F2:46:AD:08:46:04:B9:B2:40:D4
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 21
Signing time: Fri 17 Jul 2026 10:13:17 +0000
Manifest this update: Fri 17 Jul 2026 10:13:16 +0000
Manifest next update: Fri 24 Jul 2026 10:13:16 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: XPUhmPTn7NQrenjKv3ilIyn3P+L01kMboVmz8m/FmbM=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Jul 17 10:13:16 2026 GMT
Not After : Jul 24 10:13:16 2026 GMT
Subject: CN=6a5a003d-29a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:36:ca:ce:9c:66:12:9d:56:e2:f9:af:f6:
25:7f:c1:47:d1:3c:6b:11:97:84:9c:ed:65:8b:3f:
18:df:9b:f2:4e:ea:3e:d2:2f:1b:bb:96:a3:2e:10:
ef:2b:d0:75:3f:3b:6e:ed:2c:5f:99:58:dd:f0:d1:
1b:b6:11:d5:8d:58:24:28:24:d9:b3:ab:f3:47:28:
9f:f4:cd:70:a8:d2:03:8a:f9:86:21:00:d7:a4:3b:
d0:2f:f2:47:31:9c:85:05:d8:fd:77:06:7d:3d:b2:
d4:71:22:9e:4c:2a:35:7e:f5:1e:57:51:a4:e3:39:
67:38:b6:ac:49:15:c3:42:a1:0b:fd:5f:9b:74:5b:
ee:ee:87:c3:a3:d5:ee:bd:aa:24:73:4f:36:aa:f7:
96:1c:4f:f2:be:55:5d:1c:82:aa:fd:f1:35:b1:a5:
c3:8c:c0:2d:e0:f2:6d:77:5b:87:14:26:61:39:1f:
ec:51:b4:d7:5e:ef:0a:69:92:5e:bb:28:19:1a:53:
27:56:3c:11:f4:f4:ba:d8:cb:6a:48:8c:02:e6:16:
92:4b:d7:67:fa:6a:13:71:9f:4f:6f:4c:94:9d:77:
45:ab:2e:04:cc:6f:95:98:a1:58:be:4f:25:d9:99:
69:e8:13:18:f5:27:b2:e1:89:89:68:1e:c3:14:e2:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:3F:1C:2A:C3:C5:BD:02:23:F2:46:AD:08:46:04:B9:B2:40:D4
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:8a:d2:90:13:4f:9a:7f:e6:a9:13:41:27:8f:43:9d:78:
8b:9c:80:cb:3f:42:b5:5b:18:27:7b:51:4e:46:47:f8:06:4e:
e4:86:2a:b8:89:86:0f:07:87:69:73:6a:dd:f8:c6:18:f4:d8:
a4:6a:5e:36:5c:3c:ce:da:3f:a9:51:d3:4e:eb:7e:c1:5a:2c:
5b:89:06:94:c6:f1:0d:dc:68:42:96:2b:73:07:88:43:05:a3:
82:8c:f3:7b:e3:53:65:08:36:6e:a6:cf:88:34:69:63:09:fe:
cf:42:6d:7e:43:92:81:ed:45:b2:40:0c:c8:d1:6b:3e:ba:a9:
94:4c:bf:94:e9:f7:da:61:93:07:a0:46:2b:ad:69:38:f4:b1:
c8:be:cb:60:93:fc:d7:7c:ea:88:82:7c:52:0b:60:67:8c:46:
d0:a4:1d:37:84:a7:dc:17:2c:ed:84:17:94:4e:22:02:88:01:
0c:f2:86:54:4a:a3:19:c4:3e:cd:65:5e:b4:68:e6:47:74:1b:
eb:45:97:a3:70:dd:a6:cf:e8:9b:da:e6:be:7e:c0:94:af:48:
11:f9:16:e9:f7:5d:f4:3c:f8:36:00:41:9b:5b:ca:be:8e:3e:
4b:f8:27:2e:b8:6b:da:c0:b7:06:49:9a:1d:2d:78:d4:dc:bc:
ec:b1:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:50 2026 by rpki-client