
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier: 7gr+41Rl3SLL3z330whLFmsipVhP3MOdvy/sUtkaJ+k=
Subject key identifier: 15:28:93:3E:89:CC:DA:97:ED:A5:D6:13:53:26:0C:87:B5:41:69:B5
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial: 0A14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number: 0A0C
Signing time: Tue 18 Aug 2026 20:04:46 +0000
Manifest this update: Tue 18 Aug 2026 20:04:45 +0000
Manifest next update: Tue 25 Aug 2026 20:04:45 +0000
Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: l246a9PbxXL1/KbhrEqzEs+fUY+NtN0gtIbM72mKdYo=)
2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: Odh6PwT4fG9VLouXcIwHNY2NadEY9PU7kLIfNQ4Io5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Validity
Not Before: Aug 18 20:04:45 2026 GMT
Not After : Aug 25 20:04:45 2026 GMT
Subject: CN=6a84bade-0f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:e0:62:13:b1:0e:c3:b0:8a:9b:9e:71:74:
04:e1:ea:88:70:a0:e3:be:33:d6:25:8f:9e:d1:9a:
22:43:87:77:10:c1:1c:f1:4d:56:46:10:30:19:ea:
3e:7e:0d:78:08:be:2d:2b:ee:3e:ed:ab:86:a5:17:
d3:18:dc:1e:11:a2:ef:7c:49:49:f5:65:d7:00:b0:
ac:38:f6:e8:1c:a4:27:78:63:df:f2:82:d8:76:57:
d3:15:a8:07:59:79:e6:67:36:34:eb:b7:a9:bb:4e:
94:fd:8c:36:ad:3e:60:27:32:46:23:90:69:69:12:
13:ca:e2:6c:9f:25:f7:55:67:ac:ee:b4:dd:a7:49:
b2:72:b0:a3:89:fa:81:9b:bb:7a:30:a6:be:9a:8c:
c3:b0:59:de:27:16:cc:b7:6f:16:7d:63:f6:85:7e:
5b:8c:4a:ce:b2:1e:82:e5:3d:18:71:c8:f4:d8:c7:
b8:d7:c8:b9:72:48:9b:3e:36:6a:c2:33:79:73:e7:
b7:73:df:0c:03:b5:f6:2a:b5:f4:62:97:c5:1d:ad:
b9:f8:1f:4e:75:7b:f2:ea:2f:0d:50:77:3a:fe:02:
d8:06:99:d0:99:e2:29:4f:37:14:fb:a6:f5:15:5c:
40:55:30:72:cb:bd:da:88:2e:0a:4e:a9:94:b4:f1:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:93:3E:89:CC:DA:97:ED:A5:D6:13:53:26:0C:87:B5:41:69:B5
X509v3 Authority Key Identifier:
keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:57:4d:22:f7:d7:b8:b9:da:8c:4e:0f:26:85:90:75:eb:
35:3f:87:67:3c:97:00:a5:b3:4e:78:8d:72:0e:38:13:7d:1b:
aa:e5:0e:d8:2b:dc:82:41:9a:5b:b4:1c:b8:66:59:94:43:e7:
9e:40:3c:47:f0:26:0b:66:50:b2:bc:a5:78:b2:05:32:5a:2b:
2a:b7:e2:47:65:38:db:1d:d8:3d:af:89:35:f4:12:f8:47:c0:
f9:52:db:bf:72:29:18:1b:24:d4:8e:70:8a:c9:88:e3:c1:d3:
93:ec:55:4f:dd:83:93:79:00:e8:f6:88:20:85:a9:ac:3f:3d:
8b:66:23:35:53:54:d5:2c:0e:67:49:86:dc:da:50:35:f1:64:
cf:73:8d:68:96:11:52:65:40:74:f1:18:18:7b:ae:a8:91:54:
be:eb:db:ba:8a:8b:4b:ef:a2:6f:16:1b:69:f9:02:76:61:91:
e1:b0:df:33:03:6d:c2:46:eb:5b:e2:8a:95:f0:81:65:22:12:
c5:c5:7e:e3:09:b1:77:28:36:8e:17:ac:cb:31:b0:03:19:61:
72:af:4f:c6:5d:81:0e:1a:20:34:41:49:e5:b3:2b:0c:b5:dd:
a2:9e:82:68:e3:f7:ff:7b:52:39:8b:24:7a:8d:18:eb:ad:fc:
ee:90:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:03 2026 by rpki-client