
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json)
Hash identifier: elJuqLrnYZ2devlm9R54kIiOTViaRFyg6BomC+o1ypA=
Subject key identifier: 43:17:C9:9E:5E:C7:52:8D:86:7C:FF:6E:6A:93:F4:29:31:E6:03:33
Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
Manifest number: E0
Signing time: Sun 03 May 2026 06:49:38 +0000
Manifest this update: Sun 03 May 2026 06:49:38 +0000
Manifest next update: Sun 10 May 2026 06:49:38 +0000
Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: ZCNNthBtW/D6qPKiKy9RWfHksl+0DTCnYApZ/fK0Noo=)
2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: xU7kwYs59YnLCTdqLFIu2qc0IllPQRF7pPQXAgvdANE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Validity
Not Before: May 3 06:49:38 2026 GMT
Not After : May 10 06:49:38 2026 GMT
Subject: CN=69f6f002-5d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:35:c0:e4:36:de:7e:9e:c6:c0:6c:23:7f:
20:5f:28:f9:42:c8:3d:69:b0:ef:a9:2d:32:d9:7f:
46:c4:aa:aa:1e:50:18:c3:8a:67:b8:58:d9:27:e6:
57:3e:ab:3d:d6:bc:ad:31:bd:be:1a:29:d9:15:39:
e6:dd:a1:b6:5e:c2:9a:5b:c4:31:eb:80:4e:13:f6:
45:7f:9c:85:98:8d:bd:bd:72:7d:35:a0:ac:60:de:
05:06:f1:8a:bf:e5:b4:fe:37:97:6e:dd:07:e8:a0:
9a:de:1a:f4:8c:35:57:82:33:22:6e:f1:bb:f1:7c:
9e:12:e9:f9:1a:e1:53:11:d0:ae:a5:76:5a:5d:01:
39:c8:bc:99:a6:7b:b2:d4:98:37:37:27:9d:90:a6:
9d:9b:55:c8:88:52:4d:0a:17:52:d0:a5:4b:29:47:
3e:27:cf:5e:a6:67:a0:f4:62:c1:60:a8:f5:dd:82:
4e:0f:a3:08:da:1f:81:5e:e9:6e:ab:07:4d:d5:60:
3b:b6:f5:c6:58:04:73:3e:a2:11:65:6e:b2:61:f9:
9e:be:80:ae:25:10:df:d8:ed:8a:cd:61:03:bb:f5:
d8:28:17:07:ac:1f:ef:5c:3e:86:34:1b:35:c8:23:
e7:80:de:3a:0b:2b:97:8a:3c:62:ab:0a:7c:4d:cd:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:C9:9E:5E:C7:52:8D:86:7C:FF:6E:6A:93:F4:29:31:E6:03:33
X509v3 Authority Key Identifier:
keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:7f:05:77:cc:ad:ca:aa:35:a0:69:4f:80:bf:11:07:6c:0d:
f9:0c:a0:61:0a:8e:a0:14:e9:13:0a:7f:f7:ff:9f:9b:7b:3e:
93:03:47:f7:1c:d2:0c:47:84:a8:d9:fc:a9:7f:3d:6e:39:b4:
dc:4f:94:be:14:6b:04:b9:c7:ad:0b:eb:34:fa:21:65:89:ab:
e5:53:59:50:ac:68:a1:8c:2e:2f:e8:ef:29:cc:3f:b9:92:5c:
28:a5:af:17:a9:d7:e0:7f:41:1b:4d:a6:ec:3c:f7:70:1e:5f:
3e:40:a9:60:a4:a8:88:55:d7:2e:51:96:56:25:79:82:08:bb:
bd:be:9a:81:62:5a:47:11:33:0d:95:8a:fe:33:e5:f6:7f:97:
3d:59:7b:a1:aa:df:7c:8c:85:6b:b8:16:72:f2:7c:dc:d0:39:
ae:2d:8f:d0:d5:d6:cf:05:ac:24:5b:9d:14:28:1f:51:6e:9a:
89:68:ce:92:6d:06:2f:67:6e:fc:41:f3:11:03:ea:d6:ca:5b:
63:03:60:d2:73:42:c9:de:3b:bd:3c:b0:be:3c:37:78:70:71:
38:85:93:06:4f:61:d0:b2:0f:aa:7f:65:6f:2b:67:fc:2d:bb:
4e:6a:46:b5:5c:86:99:e1:24:da:d1:19:98:99:48:10:8f:32:
cc:9d:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 05:48:28 2026 by rpki-client