
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: JPyUqiH/TxWo7miWqi8sHtLLMfdCXkXoHuOHVn6o/f0=
Subject key identifier: F5:AA:B8:FC:38:69:19:DF:1D:BC:2A:03:B4:B4:20:77:C3:D0:1E:8A
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: 93
Signing time: Sat 13 Jun 2026 07:34:05 +0000
Manifest this update: Sat 13 Jun 2026 07:34:04 +0000
Manifest next update: Sat 20 Jun 2026 07:34:04 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: bQzCPjhCGzKAYZsdhSuaCTRlhMc+gh3M3RjJVgmuilA=)
2: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
4: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Jun 13 07:34:04 2026 GMT
Not After : Jun 20 07:34:04 2026 GMT
Subject: CN=6a2d07ec-5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:44:5e:c7:a6:ed:37:54:0f:0c:28:7b:9a:
95:e7:59:a1:4a:d1:15:e5:4d:ae:07:27:5d:d4:54:
cf:aa:e2:c7:69:53:9c:4d:30:16:a0:6c:e4:33:c1:
ae:b4:e2:35:5a:6d:49:3b:91:35:c6:a9:2c:7b:af:
e8:ae:71:33:cd:3d:77:64:4f:56:a2:80:6f:12:a6:
d6:88:bd:fd:b1:cb:01:55:36:a6:48:7b:44:f4:42:
ed:68:58:44:e1:e5:b0:a9:d5:9d:43:cb:90:8d:42:
72:1f:83:f0:92:2b:29:4e:90:eb:21:9a:09:0b:86:
e7:04:ef:0c:9e:e2:f3:5e:c7:ce:c3:78:4f:a1:41:
c0:f1:1e:1f:57:e4:94:96:6e:01:c6:7a:74:ac:15:
43:1d:27:c1:7d:51:86:88:e9:c6:c0:3d:f0:68:d3:
7d:26:e1:74:08:7e:d4:9e:2b:ea:cc:c3:76:21:74:
0a:e2:97:2d:2e:b0:08:79:6f:53:7b:1a:af:5f:e4:
f8:90:04:4f:dd:2d:18:c2:0b:a2:ee:f8:78:e8:c8:
9a:63:05:7d:15:94:7d:7f:fc:6e:2b:8d:3f:e6:ae:
46:0d:4c:c4:3f:0a:50:38:7e:95:67:8e:a5:3d:f4:
54:7f:4c:78:04:54:52:60:f8:b4:fd:0a:d5:87:8d:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:B8:FC:38:69:19:DF:1D:BC:2A:03:B4:B4:20:77:C3:D0:1E:8A
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:69:c6:cb:97:4e:19:16:f4:64:4e:f7:94:f7:a2:02:c5:
ea:96:00:1d:e5:6b:af:11:32:0d:17:1c:ac:f9:57:ae:93:79:
c5:de:87:e4:2c:04:12:98:39:49:04:ce:dd:78:0f:45:f8:65:
3f:cf:5c:24:c1:cc:4b:a9:fd:b0:d7:9c:60:7f:3a:34:30:93:
24:22:05:8c:48:92:bd:37:6f:bb:37:16:c7:68:ed:dd:5f:4e:
9c:55:fa:6a:37:9e:ee:c3:cc:92:16:d9:c0:c9:22:f0:aa:15:
84:96:03:e2:af:3e:a0:17:60:51:ef:8b:55:88:a4:de:8d:57:
7d:47:c3:fb:a7:27:b2:d1:84:f2:ff:f9:0c:36:65:11:e3:47:
fc:93:01:87:6e:e3:c4:11:ed:41:27:07:a7:ae:23:29:42:c6:
04:08:8f:d8:a1:9d:c2:e9:00:1a:80:e8:fb:76:41:f1:85:35:
8a:2f:df:63:79:29:04:2d:30:a6:37:5e:83:2d:d2:64:6c:74:
9a:b2:3b:b4:e2:7a:49:cc:7e:ee:8b:1d:66:cd:be:0e:af:9f:
24:0a:e9:af:24:c7:c6:13:aa:c9:e6:1d:ed:2f:03:c8:b1:79:
6b:78:09:bb:63:ca:3b:e3:37:86:b7:37:21:40:b3:8b:1e:51:
e1:24:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:46 2026 by rpki-client