
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier: ZOjOvIIIl1lINGC/2S4o0sa5xbDb/DKa9atOl8coGgM=
Subject key identifier: F9:E4:6F:22:82:83:7E:4E:2B:9A:5A:3D:3B:7D:12:C4:46:80:13:74
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number: 7D
Signing time: Sun 05 Apr 2026 07:10:38 +0000
Manifest this update: Sun 05 Apr 2026 07:10:37 +0000
Manifest next update: Sun 12 Apr 2026 07:10:37 +0000
Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: QQMmutlCPdG8f/JuHUIGj83mOFP+TTPsKXVJ9k+KL7Q=)
2: 608BD4EA019C11F18EFB8EA7666F56BC.roa (hash: ECO9MOD3//reRSgefojthsyvnTjQPLzyXslUjMb1MpQ=)
3: 72966E18019F11F1812044E0666F56BC.roa (hash: m14/qNg21Wg8M4DQJi5IqEzpTMWONljmqq0VZXGjYCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Apr 5 07:10:37 2026 GMT
Not After : Apr 12 07:10:37 2026 GMT
Subject: CN=69d20aee-52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:d9:6e:3b:e5:c8:b6:23:8e:25:32:47:f7:
a2:de:25:3b:b4:a3:73:6b:4f:23:53:28:55:4d:a0:
1c:c6:97:d4:d2:47:47:98:b6:26:8e:5e:d4:28:4f:
c1:01:c2:92:89:0a:15:a5:fa:47:78:d1:df:64:3a:
a4:2e:b6:32:46:73:08:c4:c6:f3:b7:c0:b1:46:b4:
4a:8f:e5:63:7c:ae:48:bb:6d:76:7d:c7:4a:1e:65:
fb:ff:c0:57:04:3b:24:be:46:6a:0f:f4:c0:e6:5a:
af:72:b7:77:08:f3:72:49:2d:da:54:1b:29:8c:94:
4c:a8:c7:06:1c:f0:55:cd:83:5d:de:70:d5:8b:ad:
00:6d:c5:02:14:80:65:d5:b3:63:e6:ae:98:0b:4b:
f4:56:d0:70:4e:38:57:18:54:dc:56:73:34:82:d2:
b1:cf:9b:a7:6b:5f:0a:c1:a6:d5:bf:f9:6d:6a:c5:
2f:89:d1:10:4d:b5:84:bd:85:26:6c:34:8d:3d:14:
a8:99:51:07:ea:e2:49:f7:ed:74:73:06:86:a4:af:
88:8e:18:1c:79:fe:17:11:46:7f:14:ae:ba:ca:b8:
a6:cf:87:f8:0e:c6:21:a7:65:bc:e7:49:6d:c4:c5:
71:02:9b:92:d4:4d:f5:06:05:09:18:d6:92:38:a7:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:6F:22:82:83:7E:4E:2B:9A:5A:3D:3B:7D:12:C4:46:80:13:74
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:f5:54:9b:56:96:11:e9:29:17:65:ef:2e:f7:4c:99:4f:
34:0a:e0:8e:e9:8e:df:36:3b:e9:21:c5:da:cb:8e:5d:a1:f2:
72:0b:65:f8:c2:50:6d:da:da:05:f6:33:6c:4c:2d:f2:e1:83:
b6:d1:e3:fd:ba:16:0f:10:81:0a:f5:5c:a4:ba:30:ec:6f:d8:
df:37:cf:62:80:b7:17:44:89:95:fd:6a:56:f9:83:23:3a:14:
33:57:c7:90:b8:7a:44:17:1a:82:70:9a:09:b2:f9:96:c8:bd:
4e:f0:cf:40:c4:e6:ca:d9:72:65:48:7a:09:ac:32:f9:89:83:
60:f5:18:52:dd:3b:25:c6:cb:cb:a7:d2:f1:55:44:cb:52:ea:
dc:ee:52:75:81:3d:f1:78:d3:61:66:f6:a6:99:eb:6f:48:70:
d2:d9:cf:b3:b6:90:77:15:29:01:56:b1:a9:34:16:a2:34:70:
61:f9:80:d8:a3:16:d4:7f:ea:dd:a8:48:ca:75:92:74:dd:73:
67:dc:3f:f1:e0:58:04:c2:2c:84:fe:69:6a:a4:c0:89:7c:73:
f8:e7:12:e4:cf:b4:22:e0:5b:bb:4a:75:2c:c2:bb:0c:5a:e8:
03:1f:df:94:45:5c:24:bb:04:ee:55:37:40:12:74:35:23:a0:
ef:7e:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:36 2026 by rpki-client