
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier: 1m8kok+ldhFpVkyslc1FKGDKyTihdSgCqdoNNAaI7uA=
Subject key identifier: B2:C0:C4:BB:E3:B1:3D:16:FE:8D:C0:EB:A0:9A:0C:B2:F8:69:69:4C
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial: 0C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number: 0C70
Signing time: Tue 06 Oct 2026 18:47:03 +0000
Manifest this update: Tue 06 Oct 2026 18:47:03 +0000
Manifest next update: Tue 13 Oct 2026 18:47:03 +0000
Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: R/9jcre/Z5dM3V2eYm6CvUh+NroA/3tJbiuv9LuVpcM=)
2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: 8POaocpMFP4OKfeekt39NHI2suyTClKvLejF+mBZsSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Validity
Not Before: Oct 6 18:47:03 2026 GMT
Not After : Oct 13 18:47:03 2026 GMT
Subject: CN=6ac54227-3a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:e4:96:42:f4:2c:3d:09:a3:ce:c0:05:27:
14:a1:9d:09:6b:e8:36:62:61:f4:4e:ad:d6:7c:d1:
85:02:c2:a7:64:d4:3b:6a:80:22:2c:27:84:8d:91:
ba:0b:64:23:25:50:35:b0:03:f3:34:6c:3c:27:de:
16:d1:a2:5b:c8:03:74:97:86:17:88:52:35:f6:66:
70:18:e5:f2:43:7a:0e:68:7d:6b:34:8a:80:ba:55:
0e:94:3e:16:9a:fe:d7:ec:63:d2:d1:f5:5e:2f:c8:
07:7b:25:a1:be:ae:03:86:d7:97:79:2c:7b:30:24:
7d:8f:e6:1f:9c:69:64:61:a4:f3:d1:0a:bc:5a:1b:
43:67:6b:6a:b4:8f:62:51:24:19:d6:f2:03:73:2d:
10:d1:49:6d:5d:59:4c:74:34:25:0a:b3:01:cc:b1:
b8:46:6f:f8:53:a0:48:4f:32:67:71:54:34:fd:b2:
b3:66:ea:3d:42:71:ba:ab:94:b6:9b:34:dd:c6:be:
e3:dd:7d:c5:8b:7f:42:02:b3:f7:07:9f:c0:16:82:
28:d1:e0:71:a3:15:ca:b7:c4:ee:62:fd:21:5c:f1:
c0:2d:74:1b:d5:16:3a:e6:74:3e:0f:cd:c9:6f:41:
f3:c1:78:43:fd:1b:c3:51:e7:16:0d:22:e7:19:a0:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:C4:BB:E3:B1:3D:16:FE:8D:C0:EB:A0:9A:0C:B2:F8:69:69:4C
X509v3 Authority Key Identifier:
keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:41:f3:39:e1:bc:6e:92:32:87:23:b1:0c:10:c7:99:40:
50:c2:39:fd:75:b7:5a:2d:25:8b:06:de:ca:16:28:86:e5:3f:
44:8f:e7:70:e5:b2:c5:50:0a:dd:22:d3:db:1b:a9:3b:75:d6:
e8:af:0a:90:0d:a0:aa:23:fa:1f:d5:73:c9:ec:25:e9:50:df:
79:84:04:04:18:b3:73:75:27:81:e8:c0:a4:b7:b8:e4:41:86:
60:7d:4e:59:87:5d:ca:58:a4:f0:53:f1:f1:9b:e6:0a:ae:da:
d0:27:e7:7d:cf:53:2a:67:24:0c:64:d7:2e:60:1e:45:a3:8d:
53:f4:58:5d:79:58:96:70:fe:31:93:b0:6b:c1:b0:bc:95:ae:
2c:b9:17:42:1a:c7:b3:40:35:fb:4d:11:2b:9e:e1:ee:00:11:
77:12:61:e8:39:cb:f5:67:ef:46:95:67:cd:7b:aa:41:a9:d1:
06:a8:6b:83:ec:95:82:d6:c5:93:fb:88:f3:34:35:a0:62:c0:
57:a0:46:64:1b:3b:85:c7:55:a7:33:a2:01:93:03:aa:6b:69:
c2:4c:10:16:8e:cc:ff:d7:43:e7:be:b4:99:56:40:f7:84:d9:
88:9c:87:b5:fe:83:ce:81:cc:26:0c:68:ab:5a:ec:d6:1b:47:
c4:d8:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:50:27 2026 by rpki-client