
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: PM5DXHFZN9Q4DTlbkujjF56LTESoiQn3or4+Ut6Zs9I=
Subject key identifier: B4:D2:77:50:5A:53:C4:8E:BC:B7:46:21:6C:CE:F6:C2:C0:DA:73:FB
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 4E
Signing time: Tue 13 Oct 2026 09:06:04 +0000
Manifest this update: Tue 13 Oct 2026 09:06:03 +0000
Manifest next update: Tue 20 Oct 2026 09:06:03 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: +Uqk+N4Z+xhsncJ5vjAVmA1GM+0NMR7Gd5Dv814Mfyo=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Oct 13 09:06:03 2026 GMT
Not After : Oct 20 09:06:03 2026 GMT
Subject: CN=6acdf47c-4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:88:6f:fc:0a:61:67:3d:04:98:52:39:9e:
66:3c:49:80:3e:56:8d:b5:c7:d1:07:d1:4f:b8:fd:
5b:e7:3f:e1:57:de:a0:86:fe:35:20:17:7d:16:77:
2b:83:6f:fa:bd:21:1d:3b:12:ae:6f:66:32:9b:5d:
22:d5:98:de:85:4c:71:86:01:b1:d8:ef:2f:97:29:
08:5b:07:3a:9b:31:f3:cc:e4:4e:ca:35:7d:d5:65:
d6:79:16:ae:43:93:91:10:dd:c3:df:2d:4f:ac:38:
06:db:58:4f:be:01:e3:fa:40:11:3e:11:8b:93:9c:
d9:3d:47:d6:e2:af:00:b7:86:de:15:1b:14:5f:61:
75:a6:02:23:5a:10:41:a7:c2:21:1c:b3:fd:b7:f6:
60:f5:57:6e:c2:bd:cf:7c:05:8c:ea:7b:f1:b2:86:
be:a2:3c:65:82:fc:6c:ff:13:ab:80:53:bd:57:e0:
c3:01:7b:1a:8e:65:eb:35:03:2b:08:58:53:fa:68:
9c:e8:3d:4d:ba:3a:1d:c4:75:ea:19:19:67:02:25:
88:42:cd:57:fb:0d:b1:23:f5:c7:87:ad:95:1a:70:
92:ed:02:b7:24:f0:c8:ae:5c:13:ea:81:ff:cf:c7:
03:a9:69:70:2b:36:25:fb:de:c2:c3:3b:c4:ae:4a:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:77:50:5A:53:C4:8E:BC:B7:46:21:6C:CE:F6:C2:C0:DA:73:FB
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:51:fc:36:5a:5b:1c:cd:8f:d0:83:d9:67:b7:4d:23:25:
50:f9:79:7e:84:67:2b:7d:93:b2:39:a9:52:16:84:13:1a:09:
2a:47:a7:c0:32:0d:d0:1c:cf:b0:97:d6:e5:75:10:c8:51:47:
8f:88:b1:2e:69:39:1b:fa:e6:1a:d3:cf:d0:c0:0a:37:bb:a6:
8d:b9:ae:f7:b2:02:a9:7d:e8:40:f6:e1:aa:93:c9:f0:90:62:
8e:5f:55:33:47:ba:3b:86:2c:b3:c8:39:03:5b:61:b8:83:1a:
ae:d1:2d:83:94:01:26:12:6b:9a:82:9b:16:b2:1c:ab:f0:d7:
3e:77:3d:83:10:4a:c0:91:d4:a5:87:01:04:df:d0:89:0c:1a:
7f:e4:b9:5f:47:02:3b:ad:25:97:d1:bf:e2:2c:47:46:82:bb:
90:f4:2b:e7:aa:4c:05:49:9a:d3:4e:0d:e5:df:70:d4:21:fc:
f6:1b:11:f3:21:d4:6f:b7:86:bf:56:1a:1a:d8:ac:6e:46:02:
61:d0:44:ac:3c:16:11:3c:43:c6:bb:85:18:8e:1c:56:c5:b4:
e2:a0:57:4f:60:a2:27:64:1f:5e:8a:1a:22:c1:ba:97:48:0a:
a7:df:b5:17:d1:57:d1:22:02:3b:95:d4:ff:57:da:41:d5:95:
c7:e3:47:42
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
REQ0QzExMC8GA1UEBRMoMEQyRkIzNTVDQkRGMEQwMUFBMDU1MjdCQzQ3MTI4RTUw
QkIzNUFCMDAeFw0yNjEwMTMwOTA2MDNaFw0yNjEwMjAwOTA2MDNaMBgxFjAUBgNV
BAMTDTZhY2RmNDdjLTQzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMXohv/AphZz0EmFI5nmY8SYA+Vo21x9EH0U+4/VvnP+FX3qCG/jUgF30WdyuD
b/q9IR07Eq5vZjKbXSLVmN6FTHGGAbHY7y+XKQhbBzqbMfPM5E7KNX3VZdZ5Fq5D
k5EQ3cPfLU+sOAbbWE++AeP6QBE+EYuTnNk9R9birwC3ht4VGxRfYXWmAiNaEEGn
wiEcs/239mD1V27Cvc98BYzqe/Gyhr6iPGWC/Gz/E6uAU71X4MMBexqOZes1AysI
WFP6aJzoPU26Oh3EdeoZGWcCJYhCzVf7DbEj9ceHrZUacJLtArck8MiuXBPqgf/P
xwOpaXArNiX73sLDO8SuShA/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtNJ3UFpT
xI68t0YhbM72wsDac/swHwYDVR0jBBgwFoAUDS+zVcvfDQGqBVJ7xHEo5QuzWrAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERDRDL0U0RjM1NTZDNEY1
MDExRjFCMDhDODdFNUJDODMzNzczL0RTLXpWY3ZmRFFHcUJWSjd4SEVvNVF1eldy
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRFMtelZjdmZEUUdxQlZKN3hIRW81UXV6V3JBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE
RDRDL0U0RjM1NTZDNEY1MDExRjFCMDhDODdFNUJDODMzNzczL0RTLXpWY3ZmRFFH
cUJWSjd4SEVvNVF1eldyQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAselH8NlpbHM2P0IPZZ7dNIyVQ+Xl+hGcrfZOyOalSFoQTGgkqR6fAMg3QHM+w
l9bldRDIUUePiLEuaTkb+uYa08/QwAo3u6aNua73sgKpfehA9uGqk8nwkGKOX1Uz
R7o7hiyzyDkDW2G4gxqu0S2DlAEmEmuagpsWshyr8Nc+dz2DEErAkdSlhwEE39CJ
DBp/5LlfRwI7rSWX0b/iLEdGgruQ9CvnqkwFSZrTTg3l33DUIfz2GxHzIdRvt4a/
Vhoa2KxuRgJh0ESsPBYRPEPGu4UYjhxWxbTioFdPYKInZB9eihoiwbqXSAqn37UX
0VfRIgI7ldT/V9pB1ZXH40dC
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:21:07 2026 by rpki-client