
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: 0tAhCNIjiRAQVtSljq+luDbLyaiNwPCXCRHA1S3Qhy8=
Subject key identifier: 86:87:4E:B5:D1:16:AC:49:54:08:2A:C2:3A:36:1F:E4:A1:D5:5D:E9
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 55
Signing time: Tue 27 Oct 2026 08:32:19 +0000
Manifest this update: Tue 27 Oct 2026 08:32:18 +0000
Manifest next update: Tue 03 Nov 2026 08:32:18 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: b1GEaXW0GUKk88Hy29RnUCp/Or1D7l6kxUvd9+IYbbw=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Oct 27 08:32:18 2026 GMT
Not After : Nov 3 08:32:18 2026 GMT
Subject: CN=6ae06192-3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:c7:a7:dc:fd:61:6b:a1:a8:e3:af:0b:26:
19:bf:bf:e6:17:d9:4b:10:f5:87:8c:10:cf:c9:e2:
95:f9:02:6d:e9:9d:4a:89:b8:d2:8c:57:b8:7c:29:
f3:9b:01:95:10:26:a2:9f:a5:55:7f:ea:a3:e1:b8:
70:d7:25:03:6d:12:36:0f:ce:a7:0a:3b:f9:b9:0f:
95:db:48:60:67:33:cb:a7:e4:62:eb:fc:32:28:1c:
06:1c:59:50:b2:4c:2f:ff:5b:14:82:31:42:43:dc:
8f:c7:47:f1:5b:27:5a:d0:2c:4e:63:e6:26:f0:03:
9e:18:61:92:e8:c4:04:98:ab:e0:b3:00:ef:eb:13:
b0:b1:f9:25:86:12:41:56:a7:77:e1:23:23:d8:29:
7a:c2:f2:4a:18:76:1e:97:ed:8d:23:d3:8f:5e:fd:
d4:77:73:44:11:8d:ce:f3:56:0f:a0:29:7d:7c:cf:
2f:b5:d8:6c:96:85:39:ec:13:21:ed:29:1e:fc:c8:
3a:2b:9b:ee:3f:c4:74:1b:31:28:e0:e8:ee:b4:d0:
8a:85:18:9b:24:60:2a:9a:57:ef:9a:58:91:65:6b:
ed:10:44:d0:dd:33:bf:e3:92:61:32:fa:57:43:c4:
f5:39:9e:4d:24:4d:59:ce:b2:7a:f3:c2:e7:9c:c5:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:4E:B5:D1:16:AC:49:54:08:2A:C2:3A:36:1F:E4:A1:D5:5D:E9
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:b6:ec:e6:04:04:4b:03:1c:21:00:03:e8:6b:68:5a:6a:
eb:50:f6:c9:70:f3:ac:db:84:07:4c:77:bc:f7:c0:5e:16:c9:
79:03:59:80:0f:1c:c2:6c:c2:5b:46:ab:51:55:c7:13:4a:0f:
4d:1e:cc:28:8f:6c:b1:cf:cd:71:d3:f5:2f:ba:7d:89:c8:ce:
e3:43:be:2c:cf:29:a1:aa:d3:f2:e1:51:90:7f:f7:ef:93:e8:
d3:2e:6f:79:b2:c1:4a:ea:fe:36:f2:29:96:74:fb:19:1c:7b:
49:03:33:e4:ba:11:b2:96:5e:bf:b4:f3:55:15:45:d1:1b:9e:
d5:f2:51:af:dd:e6:cd:cb:15:c9:bf:35:6f:0f:3f:a7:d7:26:
8f:a2:31:a5:4c:eb:11:65:ff:5a:54:56:b8:db:7e:82:40:dc:
57:e3:f9:2f:71:ca:08:4f:07:b6:4c:fc:95:53:ae:68:b7:2d:
77:8b:ca:b5:22:2c:1e:0d:04:fb:86:53:3b:54:d1:9d:f6:a5:
30:a0:55:f9:b6:7f:a5:8f:7d:8b:a2:9d:77:58:af:96:c0:b3:
ec:84:27:94:2f:e5:5c:70:bf:fd:33:53:5e:de:9e:3b:bb:8d:
c7:82:53:83:c3:e7:cc:46:70:9f:97:e5:68:47:df:f1:c4:b3:
ed:85:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:25 2026 by rpki-client