
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier: ter8v9kZ+HswfhLu3snPvxS1f4IeFwbRURaOsK+4O8M=
Subject key identifier: 95:DB:C8:2E:04:F0:2F:1C:70:D5:4F:FC:EA:78:60:68:53:2F:57:F7
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 061C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number: 0605
Signing time: Wed 20 May 2026 22:57:43 +0000
Manifest this update: Wed 20 May 2026 22:57:43 +0000
Manifest next update: Wed 27 May 2026 22:57:43 +0000
Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: SASUGVtKWL2gbj1f1ooNsejREEQgCugGw4NXiyfB/XE=)
2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=)
3: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Validity
Not Before: May 20 22:57:43 2026 GMT
Not After : May 27 22:57:43 2026 GMT
Subject: CN=6a0e3c67-84bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:f1:4e:45:5d:c0:0f:ca:e0:c2:86:4a:7c:
99:e1:68:0e:14:dc:6e:69:80:ae:80:7c:b1:94:34:
24:c5:b7:6a:35:a6:41:f1:e8:55:e2:e3:48:3d:42:
b2:df:69:7a:58:27:f9:20:5d:bc:6d:80:ed:5c:0d:
ed:cf:77:0f:15:44:09:c3:dc:0c:2c:95:27:82:82:
f8:04:15:55:90:42:55:77:44:db:12:0b:51:b1:e0:
08:83:b6:55:49:05:d5:7f:bd:ff:d5:db:26:40:c4:
58:01:de:b9:03:c4:5e:c1:fe:e6:d6:7c:68:32:ac:
de:05:69:20:f3:b4:35:a1:72:14:84:68:d5:86:22:
08:c7:ce:83:3f:8b:c6:db:d9:fc:c9:67:48:05:95:
6c:10:0c:3e:5d:bb:f1:45:71:46:9a:f6:45:63:6d:
c3:4e:c2:d1:3b:c0:31:95:0a:74:44:dd:26:80:87:
8f:c2:15:da:16:bb:38:10:84:27:9c:cc:fa:66:14:
13:4f:c5:4b:59:bc:ec:4e:24:19:a3:49:6b:b8:68:
ab:d6:a7:ae:5f:79:a9:08:75:30:d5:5f:23:fc:e0:
25:d9:2c:7b:13:1c:f7:05:8a:39:07:a3:17:de:82:
81:7a:0c:5d:2f:70:ef:7c:4a:41:e6:da:55:5f:67:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:C8:2E:04:F0:2F:1C:70:D5:4F:FC:EA:78:60:68:53:2F:57:F7
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:1b:90:70:c0:41:7d:f3:12:3a:6c:b3:96:4b:3b:08:7c:
6f:a2:c8:9a:cb:ad:dc:14:d7:d2:db:b6:b2:41:0b:47:03:b5:
12:ca:45:5a:69:b4:a3:f9:f1:70:c8:80:7a:84:35:98:dd:b8:
45:1f:02:8a:e6:0b:52:9e:2d:20:4b:9e:3f:81:8d:06:01:6c:
52:2e:e1:d9:8a:d1:e0:35:b4:d4:b6:49:d1:c8:86:0d:09:66:
f3:45:af:cc:09:3f:4f:71:d5:f2:a1:af:76:86:b2:67:61:8f:
a2:3b:7e:7e:89:b6:37:02:42:60:e9:eb:8f:9c:18:e1:7b:10:
2a:0f:03:9f:41:ff:9f:b5:a4:9a:ed:b7:9d:7b:c3:c3:f5:02:
c9:df:1c:d1:05:9d:25:70:38:a7:62:ca:67:ae:e4:0c:78:04:
b9:5f:b6:e9:3c:a7:6b:be:47:bf:d3:d6:ab:d6:ef:65:b5:50:
8d:a7:43:62:36:16:e1:20:bb:71:33:cd:29:2c:fd:94:72:d9:
14:79:a7:7f:b3:2e:51:76:65:cf:85:e5:6e:f0:ea:c5:93:f7:
b3:06:4b:60:63:15:31:37:43:74:df:d7:13:0a:db:53:78:cd:
83:87:04:30:50:db:49:0a:0e:d8:d5:ee:53:f8:72:0b:61:d8:
da:24:3b:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3
REQyQzFENTMwHhcNMjYwNTIwMjI1NzQzWhcNMjYwNTI3MjI1NzQzWjAYMRYwFAYD
VQQDEw02YTBlM2M2Ny04NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjqbxTkVdwA/K4MKGSnyZ4WgOFNxuaYCugHyxlDQkxbdqNaZB8ehV4uNIPUKy
32l6WCf5IF28bYDtXA3tz3cPFUQJw9wMLJUngoL4BBVVkEJVd0TbEgtRseAIg7ZV
SQXVf73/1dsmQMRYAd65A8Rewf7m1nxoMqzeBWkg87Q1oXIUhGjVhiIIx86DP4vG
29n8yWdIBZVsEAw+XbvxRXFGmvZFY23DTsLRO8AxlQp0RN0mgIePwhXaFrs4EIQn
nMz6ZhQTT8VLWbzsTiQZo0lruGir1qeuX3mpCHUw1V8j/OAl2Sx7Exz3BYo5B6MX
3oKBegxdL3DvfEpB5tpVX2cLDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXbyC4E
8C8ccNVP/Op4YGhTL1f3MB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0
REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1
ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa0cbkHDAQX3zEjpss5ZLOwh8b6LImsut3BTX0tu2skELRwO1EspFWmm0o/nx
cMiAeoQ1mN24RR8CiuYLUp4tIEueP4GNBgFsUi7h2YrR4DW01LZJ0ciGDQlm80Wv
zAk/T3HV8qGvdoayZ2GPojt+fom2NwJCYOnrj5wY4XsQKg8Dn0H/n7Wkmu23nXvD
w/UCyd8c0QWdJXA4p2LKZ67kDHgEuV+26Tyna75Hv9PWq9bvZbVQjadDYjYW4SC7
cTPNKSz9lHLZFHmnf7MuUXZlz4XlbvDqxZP3swZLYGMVMTdDdN/XEwrbU3jNg4cE
MFDbSQoO2NXuU/hyC2HY2iQ79A==
-----END CERTIFICATE-----
Generated at Thu May 21 09:35:14 2026 by rpki-client