
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier: u1DzzVkRjSweTDWNdEj1Pnvd3q9+WdPZylH3gVHU0k0=
Subject key identifier: 29:6B:19:33:F9:8B:BA:01:00:7A:69:95:77:6F:7C:AE:41:37:EB:04
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number: 0611
Signing time: Fri 12 Jun 2026 22:54:36 +0000
Manifest this update: Fri 12 Jun 2026 22:54:35 +0000
Manifest next update: Fri 19 Jun 2026 22:54:35 +0000
Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: 74cgyCzd8Qpzpqcyl6j9ihL/8z5ZFb3JYeOBrkc9Md4=)
2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=)
3: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Validity
Not Before: Jun 12 22:54:35 2026 GMT
Not After : Jun 19 22:54:35 2026 GMT
Subject: CN=6a2c8e2c-d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:2f:73:f5:a6:f5:f2:1c:d0:58:78:f5:02:
f7:59:df:88:5e:7e:b0:7e:71:cb:0a:db:1f:ca:3c:
b8:0d:13:8c:8a:39:0f:e5:60:95:6c:a7:d9:6e:87:
33:ad:95:9b:e1:68:3d:27:5b:bc:2f:a3:d4:41:c5:
8d:7a:01:67:c8:49:f6:14:22:9f:08:0b:72:b4:b4:
ee:d2:07:e6:aa:37:5b:64:fb:58:9d:77:18:55:50:
7f:f6:bd:53:25:2c:56:7d:8c:01:49:f7:cc:f2:76:
98:a6:52:ae:0e:0a:cd:d0:37:95:e2:4d:ba:c1:f6:
04:b3:f6:9d:95:68:02:63:38:2e:33:29:01:03:f1:
0b:d9:58:51:ca:9c:b0:72:12:ae:9b:a9:00:b5:03:
20:2d:e1:84:83:e2:7c:32:8f:f4:ec:a8:26:9b:d6:
d3:5f:eb:49:b3:ac:f6:0f:40:b4:ed:69:fb:00:d7:
a3:a7:c8:6b:b0:1a:8e:4e:a8:95:7a:cf:71:92:ac:
7f:6b:9f:e2:da:91:db:e9:0c:8b:e0:b2:9a:a6:9e:
3c:d1:29:4b:48:c1:38:22:25:f0:a5:a4:95:4b:16:
34:8f:2f:93:a3:99:9e:82:ae:d8:79:4d:d1:24:3d:
0f:ae:66:c8:de:fc:75:85:f8:71:68:9b:e1:42:76:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:19:33:F9:8B:BA:01:00:7A:69:95:77:6F:7C:AE:41:37:EB:04
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:8f:4c:ae:cf:f7:04:d9:3f:41:71:66:5f:80:d9:9b:2e:d9:
4a:c7:fe:c5:6c:e9:05:e7:e9:50:42:0b:3d:63:dc:99:b8:38:
3f:89:e2:12:cb:10:50:53:f3:16:3c:15:a2:0b:d8:ad:32:67:
64:07:0a:38:ca:76:84:fc:4f:54:f3:ef:38:48:2d:c2:6e:0c:
3f:13:ec:90:d0:ae:22:0b:95:ca:0d:ad:2d:de:d6:6a:8d:34:
41:14:4d:07:16:79:a1:d2:f0:be:3e:76:c8:c9:39:06:14:66:
fb:4d:db:f1:d3:f5:ad:78:90:95:94:92:e9:42:c6:7b:25:a8:
8a:96:cb:80:c6:f2:c0:bf:2b:e5:0a:9c:fc:8c:c2:60:3f:2e:
71:6c:4a:52:54:6e:7b:11:e3:70:c8:1f:06:92:b9:32:8a:b7:
49:19:99:92:b9:41:f0:be:65:bc:ba:21:4e:0b:55:13:12:66:
51:ed:4b:21:50:fc:f4:6a:55:9e:22:4d:22:db:c4:d0:26:f8:
bf:0d:68:04:59:f6:4e:66:80:73:38:5d:5f:dc:e4:dd:ce:3c:
be:e5:62:72:37:55:0f:f1:eb:f9:a9:3e:0d:63:99:4d:52:6a:
bd:71:e8:d8:12:ae:12:ac:92:ae:90:d1:72:d5:af:56:c5:e8:
09:81:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:14:30 2026 by rpki-client