
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: fDYA0YE6DDuxAjteXwQn2dXtxQDUOR6iLO1GfVoMF6s=
Subject key identifier: F3:7C:D1:03:83:EE:C4:D2:AA:E7:4C:E2:0A:67:8B:F0:CD:14:61:93
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 014E
Signing time: Sat 23 May 2026 05:21:39 +0000
Manifest this update: Sat 23 May 2026 05:21:39 +0000
Manifest next update: Sat 30 May 2026 05:21:39 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: RTuQ4s3tBOwOGZMdVIIkYk5BwgnRNJQ98fmM1NnsqN4=)
2: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
3: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: May 23 05:21:39 2026 GMT
Not After : May 30 05:21:39 2026 GMT
Subject: CN=6a113963-1abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:aa:0d:d1:39:72:cc:d5:7c:f5:f2:73:b7:
74:44:33:cc:49:61:b5:15:8b:f1:c6:ec:ae:b9:b0:
c3:fb:3b:3b:de:e6:b1:55:80:8a:e4:25:15:e9:3a:
7b:62:2b:af:97:e0:dc:84:0b:ab:72:16:90:69:fe:
e7:fb:ef:a8:dc:6c:6b:4a:84:9f:10:1b:02:9d:d0:
92:9d:61:ea:93:41:8a:70:cf:5b:57:fc:1e:b1:df:
71:22:cf:20:8d:fa:88:41:c5:a8:07:c0:92:c8:44:
bc:fc:74:4c:7a:26:8c:ac:d8:66:1e:23:9b:31:e1:
b4:e4:32:e9:0f:b0:99:93:65:d3:51:b0:e0:bd:9a:
90:ce:91:e0:ef:42:6d:20:74:79:63:b9:1e:2a:ed:
e2:db:03:4f:a4:af:89:d2:6c:7b:57:f9:28:3e:de:
64:c3:c2:3e:e9:8c:a1:67:0b:cf:ab:7f:ce:6b:90:
cd:b2:a4:d7:a9:b1:13:7f:b3:d3:e3:a8:a2:44:d4:
f8:46:26:82:9f:30:06:6c:e5:4a:07:bc:37:ef:7c:
51:33:00:4e:48:fc:d5:50:1f:3d:76:0d:b4:62:bd:
88:3e:21:dc:a4:b1:76:f0:4c:35:d6:bf:4a:06:21:
eb:23:29:4c:63:b9:da:1d:a1:91:03:46:27:96:e5:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:D1:03:83:EE:C4:D2:AA:E7:4C:E2:0A:67:8B:F0:CD:14:61:93
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:5a:9c:6d:19:62:be:39:24:6e:a3:02:3f:a3:3c:7e:d5:f9:
da:88:26:75:d4:db:5b:0b:48:5d:b0:e9:ee:73:36:08:3e:17:
e0:ba:78:75:fb:8f:35:e3:91:f1:d0:e3:a7:28:ef:87:70:21:
7b:7b:41:03:33:e6:8e:9a:d4:19:df:2c:b3:99:05:6d:e0:69:
d5:78:d5:0d:b6:68:05:b5:14:06:0e:1e:96:2d:ba:6b:3c:54:
59:7a:22:ac:16:b5:42:45:df:7f:e2:ad:e8:f2:e4:46:54:f2:
5d:4e:23:0a:24:59:f2:bd:3f:85:6f:78:91:5c:88:19:64:00:
2d:44:c2:7c:11:75:f8:6a:9a:6a:d2:1e:3c:0c:7e:d7:a7:b5:
06:59:f9:84:59:f8:9c:a5:d4:fa:3e:87:f0:b5:5f:e1:7c:6c:
3e:a5:f8:73:93:56:3e:10:4c:3f:da:ee:df:14:61:18:f3:81:
a3:e3:47:c5:1b:7a:83:aa:b5:fd:c5:03:b3:c9:b7:17:8a:7b:
25:c8:10:01:67:1b:71:71:b6:e4:60:78:9d:e7:88:a5:5e:29:
c6:a6:fc:f9:c2:22:81:a2:04:c6:f1:f5:fb:c1:4f:6d:7d:dd:
58:13:63:ac:12:ff:24:9b:96:8c:ff:3f:30:31:4d:2a:b3:9b:
15:8b:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:10 2026 by rpki-client