
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier: Xn5KXUxNxSw9rhk+NenoNFuteZRmbycWVB/zxgJPyJc=
Subject key identifier: 83:A3:86:5E:14:05:25:D9:44:F3:2A:D9:CE:74:7C:0B:D7:05:E8:80
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number: 6B
Signing time: Sun 31 May 2026 20:42:51 +0000
Manifest this update: Sun 31 May 2026 20:42:51 +0000
Manifest next update: Sun 07 Jun 2026 20:42:51 +0000
Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: Svb525GSGCvlzaLIXOl5FHnnxVxpGxG5llDTu+D6fGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 20:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Validity
Not Before: May 31 20:42:51 2026 GMT
Not After : Jun 7 20:42:51 2026 GMT
Subject: CN=6a1c9d4b-a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:f1:6b:34:80:e9:df:3c:27:40:7c:f3:f6:
fe:bf:23:69:b8:67:5a:75:ed:a1:0c:02:79:0e:5c:
96:f0:ab:5a:19:69:77:eb:d6:0d:83:df:dc:f1:a9:
ea:65:6c:0f:5b:3f:e1:7d:13:c3:26:c6:fb:28:bc:
59:0c:71:ca:35:00:69:e4:d4:60:9a:e7:ca:47:c6:
f4:cb:66:7b:a0:f8:d0:98:b1:5c:cd:72:a6:33:e5:
bb:35:12:47:33:2e:6c:b6:32:b9:05:2a:16:37:8d:
ad:3a:68:a1:98:ae:fd:2f:71:c6:13:94:70:be:59:
83:7f:0c:04:cb:24:71:21:95:b8:54:61:a3:6c:0e:
35:5b:b6:7d:ed:d5:e2:59:b2:46:91:92:d3:56:13:
bc:17:aa:b3:2b:3f:cf:18:60:b1:7e:b5:dd:80:55:
80:a6:ed:aa:bb:3d:ce:93:08:0b:f0:a2:5d:63:84:
01:ba:bb:8b:bf:5c:45:9c:70:13:97:11:36:3a:d6:
c0:dd:04:f8:00:57:0c:05:9e:df:a5:b1:bc:cf:7e:
77:59:12:fc:d5:0b:2d:58:b0:6a:e4:ac:7c:3c:2b:
80:13:b6:38:ce:4c:ef:6e:ef:84:10:76:55:c2:15:
6f:79:30:c1:a9:49:c1:fa:72:fc:e3:35:d6:73:31:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:86:5E:14:05:25:D9:44:F3:2A:D9:CE:74:7C:0B:D7:05:E8:80
X509v3 Authority Key Identifier:
keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:c7:f1:c3:9e:47:a2:c2:f0:61:26:4a:7d:84:94:d8:56:
e0:37:d7:e0:2e:41:c1:91:10:40:e8:19:86:e5:f0:1a:4d:b8:
7f:aa:4e:dd:71:a4:57:6d:1e:c1:01:f1:35:eb:a0:b5:94:a4:
e2:9c:30:15:9d:5b:e7:e9:f3:15:c9:45:0a:91:a7:7e:cc:f5:
5a:fc:a7:1f:73:ce:f5:9d:3e:71:78:08:56:31:d6:cb:a8:b0:
27:82:95:1c:3f:0f:50:7d:73:d7:c3:0c:93:7c:d0:62:d0:57:
c9:18:30:26:6c:d0:79:5b:6f:1a:3c:ed:a3:67:f1:bf:93:24:
5e:25:5b:bd:5a:32:a8:51:6e:83:08:2d:af:bd:3d:bb:1e:c6:
44:47:ad:97:25:a5:2e:dc:75:a3:b2:78:b1:0d:05:f0:09:18:
0f:b8:41:d0:fc:10:4a:f7:de:33:d4:38:0a:10:43:00:0d:4a:
6e:7a:bc:74:09:68:06:61:9f:8b:d5:f7:49:e2:8f:29:61:5d:
b8:9d:50:67:1b:5f:c0:16:50:23:f5:ee:e7:7f:34:e4:16:d1:
21:33:3f:a7:16:0a:63:a3:8c:1b:c6:d0:29:27:d8:a9:c5:c1:
81:b2:f5:8b:f2:34:a9:d8:e9:8c:b1:17:ca:48:0e:37:82:28:
c4:09:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:28 2026 by rpki-client