
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier: bja0f4q0dn68plV2IWnhbsVai3COBTjhwzkq4ZfnlDQ=
Subject key identifier: B6:5F:E0:01:DC:66:91:08:A5:0F:AF:D6:9B:08:34:C6:EB:0F:B9:48
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial: 0C63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number: 0C57
Signing time: Tue 18 Aug 2026 18:58:13 +0000
Manifest this update: Tue 18 Aug 2026 18:58:13 +0000
Manifest next update: Tue 25 Aug 2026 18:58:13 +0000
Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: SGh1aRruoOVCVLgrXrKXKCeb9NRBONQu53m1TKoNrlA=)
2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: 8POaocpMFP4OKfeekt39NHI2suyTClKvLejF+mBZsSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Validity
Not Before: Aug 18 18:58:13 2026 GMT
Not After : Aug 25 18:58:13 2026 GMT
Subject: CN=6a84ab45-827e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:6c:3c:00:1a:e1:2c:02:fa:c9:c9:ad:81:
d3:80:d1:0e:2a:cf:62:9a:3e:73:b8:58:e6:d0:f7:
4b:11:be:ae:f7:03:da:79:8f:7e:e8:a8:1b:a5:35:
d3:0a:e2:42:05:ec:b7:fc:5b:72:d7:48:57:db:c7:
8b:c9:16:69:4d:72:30:91:f5:ee:9b:20:fc:48:f5:
ba:a9:37:fd:1f:e7:bd:64:1e:af:0a:1d:5c:e6:81:
ac:47:86:80:65:83:0c:a4:46:92:7e:c7:59:f0:52:
5b:d5:06:68:9e:e4:35:0c:47:fe:8d:33:83:99:49:
82:0f:c9:eb:4c:03:79:12:8e:07:15:fc:1b:3f:fd:
a3:16:67:f2:a7:f1:36:44:6a:2b:b5:eb:d3:d4:f0:
68:51:e4:1a:4b:46:8b:f6:d6:3e:28:2a:aa:a5:c9:
53:a7:2e:61:e6:f3:29:f3:f9:9a:80:30:25:09:e8:
ea:b1:a8:f8:b7:34:af:be:73:1d:a6:34:e2:0e:ee:
6f:8d:ab:be:7f:6f:5e:00:b3:03:30:39:21:8e:ef:
76:3d:b3:67:d9:ca:15:03:28:dc:3c:07:d2:3a:de:
17:48:4f:0b:58:9e:10:59:86:93:9b:9a:0b:dd:18:
cb:b0:f6:e2:4a:78:e7:f8:b2:6c:10:4a:0d:7c:a3:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:E0:01:DC:66:91:08:A5:0F:AF:D6:9B:08:34:C6:EB:0F:B9:48
X509v3 Authority Key Identifier:
keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:12:27:e4:2c:c9:14:30:d6:60:f7:c1:5c:25:89:6e:b5:b0:
f1:e7:56:5f:e0:9c:b7:8b:89:c0:44:58:43:0f:e7:33:81:e5:
9d:55:ee:07:04:99:48:a0:04:a0:cc:e4:8b:79:af:93:da:dc:
fd:f7:3a:76:a5:df:e3:81:8f:e7:07:79:f5:04:53:76:d9:f7:
23:6e:c7:21:25:7a:9b:08:bc:5e:cd:7d:a3:ed:43:63:39:98:
c0:80:ec:74:ab:15:3c:8c:fc:71:90:c4:91:c9:3f:07:35:ec:
ab:39:e0:ab:ba:19:c4:84:cd:cc:12:92:54:ae:ba:48:54:da:
40:fd:f9:89:aa:da:ce:30:07:b5:d7:06:a8:5a:6b:7f:40:d6:
54:5f:9d:65:65:9d:f2:e5:26:4b:76:f9:49:7d:66:ce:5d:e0:
4a:bb:c2:f2:09:dc:9d:6f:ed:e3:15:bb:7d:65:8c:52:a9:4d:
ba:e5:60:2d:9b:75:fe:f6:d4:6a:78:a6:a5:3d:b6:22:61:18:
7d:6c:32:a7:b1:5a:2f:6d:23:f3:eb:9e:e6:a7:31:f1:9f:83:
11:eb:26:1b:fe:1b:54:61:e9:8a:a6:4a:09:dd:37:eb:02:67:
77:0a:d6:06:5e:59:00:78:b6:f6:61:ce:df:15:f3:a7:a3:70:
d2:c0:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:51 2026 by rpki-client