
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
File: vDUKYanj3h4eWJC-0L6KhxJP3LE.mft (raw, json)
Hash identifier: vHlYmaGDNsQ+DdngdoDuLpMh/D08xgATibLn/UTHDLc=
Subject key identifier: 71:A8:07:A1:0C:FA:C8:D7:C8:56:A5:9A:B4:EC:81:AE:34:79:6C:AA
Authority key identifier: BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
Certificate issuer: /CN=A91FC3D0/serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
Manifest number: 2F
Signing time: Wed 19 Aug 2026 09:26:38 +0000
Manifest this update: Wed 19 Aug 2026 09:26:37 +0000
Manifest next update: Wed 26 Aug 2026 09:26:37 +0000
Files and hashes: 1: vDUKYanj3h4eWJC-0L6KhxJP3LE.crl (hash: 1+4+MGaU0VSk2ThiKH0Tan/xb/j+bnNiivcueK8wfGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl
rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
Validity
Not Before: Aug 19 09:26:37 2026 GMT
Not After : Aug 26 09:26:37 2026 GMT
Subject: CN=6a8576ce-568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:fd:3e:8a:9e:2b:9a:db:fb:a5:d7:a4:5a:
cb:ba:0a:9e:26:70:fb:58:95:7f:4e:42:b8:b4:ef:
cd:57:0c:1c:71:c9:db:4c:66:4b:70:c8:c9:02:bb:
c5:7d:17:ba:d5:5d:48:a4:61:34:7e:7f:3f:20:a8:
16:73:2c:3b:f8:73:57:39:37:44:e5:f7:1a:f8:75:
96:5d:2b:0f:6d:27:b0:00:61:45:66:73:93:61:4c:
ec:98:a6:ab:0a:63:e8:da:22:30:f1:ec:63:e5:df:
ff:58:e6:23:da:74:f8:aa:cf:e0:ce:eb:d3:b6:03:
0e:66:86:37:b2:30:de:0c:5d:dc:66:9a:ed:e5:ca:
29:04:3a:ff:93:ae:ed:32:0c:96:ed:39:31:5e:6f:
11:35:6a:de:53:4b:61:91:7c:51:e1:ed:d1:0d:f5:
53:ff:9a:40:24:2f:a0:06:15:98:0c:4c:68:3d:e4:
0b:cf:a2:d8:25:05:44:d1:dd:54:f5:db:90:1b:ad:
2e:5b:4d:f9:16:37:37:d5:a6:91:7f:8e:02:ca:cf:
1f:30:ec:0c:d7:eb:b6:64:89:79:e2:6c:ee:4d:ff:
7b:ab:64:8c:c3:dd:13:02:46:6b:02:dd:4b:32:19:
f4:9c:4c:49:dc:e7:32:29:f3:d4:4d:c6:15:ec:70:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:07:A1:0C:FA:C8:D7:C8:56:A5:9A:B4:EC:81:AE:34:79:6C:AA
X509v3 Authority Key Identifier:
keyid:BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5d:fa:32:c0:a3:67:1e:35:7f:fa:1b:91:ae:dd:f0:48:d0:
ad:de:ab:dc:48:4e:64:a0:78:08:8f:08:18:63:9b:d2:da:39:
4c:31:8a:8d:0e:fd:fa:3a:8e:8d:95:03:90:98:c6:c4:6b:14:
71:6a:38:16:91:27:d2:55:76:18:1d:71:83:ad:2c:c9:4a:fb:
0d:96:2f:04:b4:54:41:ad:e8:4c:a6:b1:c8:92:6e:60:9b:6c:
dd:85:93:d9:e3:0c:e4:85:60:ae:d7:bf:7c:79:fd:29:e0:21:
1e:b2:40:e4:2e:fa:3a:c5:4f:9f:51:87:c0:99:f8:bd:28:bc:
d2:53:34:c8:de:53:e8:f7:6e:e0:7a:9f:55:10:17:3f:e1:8d:
41:62:02:57:8d:c5:2d:a6:23:32:7a:93:5c:b1:5f:e8:25:d2:
76:8b:f5:39:29:48:dc:d4:eb:a2:13:e7:21:81:1d:18:cc:ed:
60:34:e3:a3:be:75:af:9e:20:5b:3c:45:4a:4e:7c:ff:a3:6f:
23:e8:3b:0d:5b:06:36:ad:89:88:df:a2:03:55:ba:9d:33:6c:
f2:20:22:8b:d9:9f:83:f2:c0:23:5f:43:0c:d7:09:72:49:c0:
ed:84:43:3a:48:df:76:fe:f9:2e:d1:ce:9a:df:31:86:48:81:
62:fa:d1:c1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QzNEMDExMC8GA1UEBRMoQkMzNTBBNjFBOUUzREUxRTFFNTg5MEJFRDBCRThBODcx
MjRGRENCMTAeFw0yNjA4MTkwOTI2MzdaFw0yNjA4MjYwOTI2MzdaMBgxFjAUBgNV
BAMTDTZhODU3NmNlLTU2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqpv0+ip4rmtv7pdekWsu6Cp4mcPtYlX9OQri0781XDBxxydtMZktwyMkCu8V9
F7rVXUikYTR+fz8gqBZzLDv4c1c5N0Tl9xr4dZZdKw9tJ7AAYUVmc5NhTOyYpqsK
Y+jaIjDx7GPl3/9Y5iPadPiqz+DO69O2Aw5mhjeyMN4MXdxmmu3lyikEOv+Tru0y
DJbtOTFebxE1at5TS2GRfFHh7dEN9VP/mkAkL6AGFZgMTGg95AvPotglBUTR3VT1
25AbrS5bTfkWNzfVppF/jgLKzx8w7AzX67ZkiXnibO5N/3urZIzD3RMCRmsC3Usy
GfScTEnc5zIp89RNxhXscO7JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcagHoQz6
yNfIVqWatOyBrjR5bKowHwYDVR0jBBgwFoAUvDUKYanj3h4eWJC+0L6KhxJP3LEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDM0QwL0IwOUIyRjRDNTQ0
NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0ZVdKQy0wTDZLaHhKUDNM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdkRVS1lhbmozaDRlV0pDLTBMNktoeEpQM0xFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
M0QwL0IwOUIyRjRDNTQ0NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0
ZVdKQy0wTDZLaHhKUDNMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDFXfoywKNnHjV/+huRrt3wSNCt3qvcSE5koHgIjwgYY5vS2jlMMYqNDv36Oo6N
lQOQmMbEaxRxajgWkSfSVXYYHXGDrSzJSvsNli8EtFRBrehMprHIkm5gm2zdhZPZ
4wzkhWCu1798ef0p4CEeskDkLvo6xU+fUYfAmfi9KLzSUzTI3lPo927gep9VEBc/
4Y1BYgJXjcUtpiMyepNcsV/oJdJ2i/U5KUjc1OuiE+chgR0YzO1gNOOjvnWvniBb
PEVKTnz/o28j6DsNWwY2rYmI36IDVbqdM2zyICKL2Z+D8sAjX0MM1wlyScDthEM6
SN92/vku0c6a3zGGSIFi+tHB
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:00 2026 by rpki-client