
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: 4IGZpdAGbwszkwNHqE542+3aUH3ZzyXPBgj6gV8c/VQ=
Subject key identifier: D6:23:60:E5:03:F3:07:76:D8:C4:D5:2F:8D:AB:6D:30:1B:4D:00:69
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: 85
Signing time: Tue 19 May 2026 07:29:08 +0000
Manifest this update: Tue 19 May 2026 07:29:08 +0000
Manifest next update: Tue 26 May 2026 07:29:08 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: avx8u3lhdn9t1Z4+9c7WbJBuJS0Lm+r9cLhd6eZVvuE=)
2: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: 0idLIxOamxpOhUGhRED9KgyjbGEjlf8TTsjVHp7uchk=)
3: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: obQ1muZzlSAR/yzoM3A2VB9QL7USa5r6753HXKfwqfg=)
4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: Xqj+ZL/qDvuXT5tU1wBoIGdlE5RCVHT+rKP7QOQndAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 07:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: May 19 07:29:08 2026 GMT
Not After : May 26 07:29:08 2026 GMT
Subject: CN=6a0c1144-7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:46:d2:4d:5d:bb:7b:8d:14:1c:6c:29:e4:
56:68:34:09:f7:0a:10:60:d1:18:f3:1a:61:05:1b:
6a:e8:fb:69:b6:12:46:ac:e9:da:35:79:cb:fe:2f:
05:14:91:94:95:69:9e:a3:1e:cd:4c:2e:54:c5:b7:
2f:09:d7:74:c6:dc:f9:fe:8c:f1:91:b7:58:38:89:
ec:c5:f1:7a:08:33:70:57:65:ab:13:11:e4:30:69:
6b:f6:11:63:1d:2d:bb:d5:bc:5b:9c:12:2f:d6:d1:
cb:c8:38:d6:35:3a:88:63:a3:0a:b1:b9:88:21:09:
97:32:90:16:06:3a:f8:f4:54:b8:dc:1b:14:2f:d1:
6f:c3:47:50:e7:e4:24:dd:89:aa:5d:93:f9:66:e1:
b8:f4:0a:03:ce:46:64:63:e0:ba:8e:e5:c6:e9:21:
17:c6:ff:01:17:71:f8:4b:59:6d:56:19:90:4e:85:
ec:32:ce:92:c9:3e:77:f3:8a:63:13:b3:59:2b:5e:
a7:04:44:7d:12:1f:84:4e:49:7a:96:ba:79:ba:fa:
8b:dd:60:d3:b5:2c:d9:56:d8:2d:44:66:7c:22:ed:
b7:b9:52:cd:a1:4b:20:75:46:cd:ad:9a:70:14:32:
09:9c:91:18:23:7a:d6:b8:05:86:2b:2d:4f:d3:4f:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:60:E5:03:F3:07:76:D8:C4:D5:2F:8D:AB:6D:30:1B:4D:00:69
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7c:85:a5:57:0a:d5:dd:59:77:7b:c7:82:c6:f2:73:da:1b:
04:4a:c9:e0:78:69:f4:6f:df:f8:8a:e9:a7:9a:c2:e5:31:4c:
dc:10:7c:bf:5b:d0:0e:83:42:f4:c5:d1:de:c7:f5:16:66:36:
dc:28:c5:7a:9a:88:d4:76:1e:2f:b2:20:66:bf:a2:20:98:03:
26:5b:dc:38:53:22:ed:6b:50:f2:03:23:7e:c1:3a:32:fb:ee:
c8:8a:eb:6d:e3:0e:85:4e:c1:12:64:cb:2a:14:a1:16:9d:a4:
8c:ff:36:48:22:f0:a1:b3:f4:4d:08:dd:cc:95:92:4d:89:89:
4a:47:1a:6c:40:77:da:a4:26:33:92:f9:90:62:2e:44:26:1f:
31:80:ce:9e:26:88:68:f5:ac:b9:32:9d:9c:29:e1:e5:e9:be:
45:13:0d:f0:f7:68:a9:df:3f:ff:53:15:2f:d9:d1:b1:1b:c8:
37:15:75:75:9a:ca:ca:31:fb:53:d5:d3:c1:96:35:38:bf:db:
4f:73:41:3d:38:a2:25:d6:b7:ae:40:72:5e:c5:42:7a:32:81:
b3:fa:29:33:cf:37:78:40:76:30:ed:8e:50:f1:0f:ff:f4:52:
5d:d9:d8:5a:f3:5d:e7:5f:c0:7b:e0:44:d9:38:54:a0:94:2e:
67:d7:95:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwQ0MxMTAvBgNVBAUTKDBEQ0FGQUMxNDVCMjJGMTU2MDc4MDE2NkNEMUYxNTE1
MDRFRUY4QTEwHhcNMjYwNTE5MDcyOTA4WhcNMjYwNTI2MDcyOTA4WjAYMRYwFAYD
VQQDEw02YTBjMTE0NC03ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcFG0k1du3uNFBxsKeRWaDQJ9woQYNEY8xphBRtq6PtpthJGrOnaNXnL/i8F
FJGUlWmeox7NTC5UxbcvCdd0xtz5/ozxkbdYOInsxfF6CDNwV2WrExHkMGlr9hFj
HS271bxbnBIv1tHLyDjWNTqIY6MKsbmIIQmXMpAWBjr49FS43BsUL9Fvw0dQ5+Qk
3YmqXZP5ZuG49AoDzkZkY+C6juXG6SEXxv8BF3H4S1ltVhmQToXsMs6SyT5384pj
E7NZK16nBER9Eh+ETkl6lrp5uvqL3WDTtSzZVtgtRGZ8Iu23uVLNoUsgdUbNrZpw
FDIJnJEYI3rWuAWGKy1P009gaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYjYOUD
8wd22MTVL42rbTAbTQBpMB8GA1UdIwQYMBaAFA3K+sFFsi8VYHgBZs0fFRUE7vih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBDQy84RkNDQzdGODhG
NTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4VmdlQUZtelI4VkZRVHUt
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1LRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4
VmdlQUZtelI4VkZRVHUtS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADnyFpVcK1d1Zd3vHgsbyc9obBErJ4Hhp9G/f+Irpp5rC5TFM3BB8v1vQDoNC
9MXR3sf1FmY23CjFepqI1HYeL7IgZr+iIJgDJlvcOFMi7WtQ8gMjfsE6MvvuyIrr
beMOhU7BEmTLKhShFp2kjP82SCLwobP0TQjdzJWSTYmJSkcabEB32qQmM5L5kGIu
RCYfMYDOniaIaPWsuTKdnCnh5em+RRMN8Pdoqd8//1MVL9nRsRvINxV1dZrKyjH7
U9XTwZY1OL/bT3NBPTiiJda3rkByXsVCejKBs/opM883eEB2MO2OUPEP//RSXdnY
WvNd51/Ae+BE2ThUoJQuZ9eVNg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:12 2026 by rpki-client