
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: uPrT7DtX1mmsZ90MTVTiV5GxIleBmS8nZOxIUvhhEQY=
Subject key identifier: 6A:5B:73:9F:B7:A2:D1:C8:51:CD:AF:5E:34:EC:20:10:78:56:64:0A
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 11
Signing time: Sat 13 Jun 2026 09:09:06 +0000
Manifest this update: Sat 13 Jun 2026 09:09:06 +0000
Manifest next update: Sat 20 Jun 2026 09:09:06 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: 4Ymj3c9fbWIfxFDl21NyY6CAWorjjWrBx51GIbpu8D0=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Jun 13 09:09:06 2026 GMT
Not After : Jun 20 09:09:06 2026 GMT
Subject: CN=6a2d1e32-fe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:4e:5e:fd:87:85:99:6b:6c:74:82:7d:64:
9b:8e:fd:a1:e4:3e:08:f5:f7:4f:62:51:81:51:50:
d4:6b:25:fb:ef:aa:42:25:14:59:20:7f:1a:83:da:
fd:13:f9:4e:8d:b6:d7:21:91:90:97:51:13:37:08:
02:b1:df:bb:55:2b:93:d1:b4:89:3e:b1:70:37:b7:
22:79:b8:28:97:40:e2:86:1e:31:52:e6:3e:11:08:
34:38:c6:54:39:b3:79:9d:d4:5f:b9:e7:a9:f8:61:
71:d5:6d:c8:2b:64:77:30:38:3f:98:ee:c5:29:3e:
87:d5:5e:df:18:d3:3c:13:89:a7:70:93:ef:57:e9:
9f:53:f2:13:13:09:56:d0:2f:13:50:de:f7:db:d0:
e9:1e:09:56:78:48:a6:c6:fd:be:68:b5:c5:aa:fe:
98:06:9d:eb:f3:5d:bc:02:7a:18:14:e0:35:a9:4c:
8d:ef:2a:71:00:52:94:f7:fd:26:82:e9:4a:78:8a:
81:f8:3c:e8:1d:ac:3f:47:64:ad:c7:96:87:f0:51:
b6:15:63:e6:2f:ca:82:b3:4c:11:38:01:1c:9b:6d:
1a:a7:2a:ac:30:d7:96:20:28:2d:fc:de:31:38:79:
59:17:b4:39:35:19:e0:e3:6f:d9:a3:08:ad:1a:ac:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:73:9F:B7:A2:D1:C8:51:CD:AF:5E:34:EC:20:10:78:56:64:0A
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:08:f2:c5:a9:d0:68:ba:a9:98:4d:e0:10:75:84:c4:ad:
7a:f7:76:97:1d:07:77:48:e1:f5:25:b6:a2:b1:47:e3:5e:f2:
47:90:e3:1b:bd:ec:7a:c6:97:a8:24:8b:0d:c3:ab:f8:f1:60:
d4:93:51:e9:91:a5:d5:28:22:91:e9:90:b1:43:90:22:6a:be:
63:47:54:2f:0a:b3:99:0b:db:05:73:3b:94:9b:22:78:31:8f:
59:8a:a3:48:fd:63:3e:79:2c:a3:de:34:09:12:a3:6e:91:89:
dc:6e:4a:5f:66:06:65:58:6f:f2:0a:d0:f3:fa:3f:14:b4:97:
ee:41:b7:b1:b9:61:5a:46:9e:27:6d:b2:5f:3d:3c:49:f7:a5:
1c:fc:5c:2c:96:09:05:42:c4:4f:84:59:66:5f:26:23:b6:bc:
47:cf:ea:f3:19:3d:3d:39:50:bb:36:9b:24:43:1a:7f:c8:13:
6d:91:dd:35:4b:b8:31:69:d1:ef:d0:b3:a6:04:f5:bd:ba:f9:
0b:5d:7c:59:19:9f:ee:06:97:ec:4e:53:74:08:69:5c:64:05:
97:c7:3f:a5:ed:27:25:98:20:8e:6b:4b:6c:36:f9:0e:3f:eb:
5f:da:99:44:82:aa:93:86:cc:20:fb:66:9d:92:6a:87:79:6f:
b4:08:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:47 2026 by rpki-client