
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File: DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier: Al7mE2FkZMpEFI1cHn0Ldo1oSVj0+Y7ey3Uud5Bt0uo=
Subject key identifier: 11:DC:53:50:52:4F:F2:57:A1:1F:E0:3B:BE:98:A5:72:AA:64:2D:F4
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer: /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number: 53
Signing time: Fri 25 Sep 2026 08:24:15 +0000
Manifest this update: Fri 25 Sep 2026 08:24:15 +0000
Manifest next update: Fri 02 Oct 2026 08:24:15 +0000
Files and hashes: 1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: P3hhGiSrUmXECSNvJKRhI8IbuwyT9qx8xJYXcTzF6+c=)
2: FE7346D642CC11F1A52BA276C6833773.roa (hash: tvwf4DAv3iIkKDVBaLvU4xQwNZROIguZpPcMUL1yZRw=)
3: 5A98E30A42CB11F1992134BCC5833773.roa (hash: A2UYdaAyeRv93KkABaSgrqSGjF16Qsj6+LJRZzldEFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Validity
Not Before: Sep 25 08:24:15 2026 GMT
Not After : Oct 2 08:24:15 2026 GMT
Subject: CN=6ab62faf-ca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:b9:31:04:c3:b1:28:d0:d0:51:64:d2:e4:
40:1b:3b:5a:10:bb:08:86:f2:18:de:84:e6:15:99:
2c:47:a8:b9:4e:a1:95:43:97:1d:3f:8a:82:e8:5d:
e2:6b:f0:91:16:ba:3c:a0:e4:17:91:ff:7f:5d:10:
c0:29:23:eb:d6:fe:59:4c:da:45:26:a6:36:55:4c:
b7:86:62:a2:00:7f:4a:26:ab:37:7a:34:5b:ab:4d:
d2:b2:26:07:e9:5d:be:79:44:17:3c:ef:37:e3:8e:
86:99:2e:77:01:41:d6:d0:15:12:e2:49:06:97:77:
ef:1c:a4:49:e6:82:37:fa:77:62:ef:3f:05:11:55:
d5:8e:54:d9:af:bf:33:80:b9:75:8d:60:f7:3d:8e:
ee:0d:35:d9:8b:15:46:44:62:67:f3:15:1f:2d:7b:
50:a0:58:b5:7c:d1:ab:1f:5f:0c:53:8d:99:3c:93:
f2:d3:98:da:31:34:e9:67:91:9e:a9:36:1d:25:61:
6e:f9:60:4c:c0:ff:ec:c4:c5:3b:b8:13:56:86:bd:
02:d1:c5:57:79:79:c8:c8:c2:1e:46:3a:12:c0:83:
16:eb:6a:52:3f:42:8b:78:d9:70:92:84:18:55:c0:
71:c7:20:f5:85:d6:ec:96:c9:78:56:32:f1:54:e4:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:53:50:52:4F:F2:57:A1:1F:E0:3B:BE:98:A5:72:AA:64:2D:F4
X509v3 Authority Key Identifier:
keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:12:93:78:aa:a6:6c:59:34:4f:85:a9:0c:04:95:76:fa:
c2:ff:dd:87:0c:29:68:56:95:0a:3b:59:6e:0d:38:cd:5b:6b:
d2:40:54:21:0d:b0:e7:03:a7:29:2e:64:81:12:32:7e:0e:3d:
59:80:e3:8c:47:95:e9:85:af:cc:a7:df:1c:e5:a6:f7:1e:2e:
1d:f1:c1:ad:45:9e:0e:f9:20:35:c1:63:af:7f:90:2f:75:c7:
a7:8f:e9:92:4d:21:e1:e1:f1:2e:c9:83:ec:97:d7:61:4d:ee:
da:82:68:5c:71:73:55:14:64:70:e9:93:7a:38:81:2a:9b:d3:
ee:81:8a:c7:88:0b:40:53:12:ba:6a:9e:b2:9c:1a:f8:ba:d2:
9c:5b:84:b3:83:57:55:a9:5f:33:6f:c9:fa:88:6a:68:5b:4f:
32:1e:79:2b:6d:d6:b5:57:58:3c:5c:ca:6a:e5:cf:9a:97:fd:
94:01:36:08:7e:ab:8c:df:cf:01:1b:c2:2c:f8:20:c6:c7:3c:
54:5b:2b:b3:d8:8e:57:51:47:ad:af:08:3f:d4:f6:f6:f8:35:
5e:4d:6b:6a:ea:eb:6d:64:72:34:62:0e:9d:46:c8:f8:f6:cb:
30:44:ab:8d:6d:d0:86:04:48:63:8d:56:24:c6:62:5a:7e:d3:
91:40:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:10:10 2026 by rpki-client