
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File: dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier: AENN0jePhQqN5OoFHeSXe0w9znOxzxlRr/O27vchFR4=
Subject key identifier: 0A:7C:D5:E4:69:20:96:92:02:EC:8F:5A:40:BA:89:88:D1:05:FC:B9
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number: 0802
Signing time: Tue 10 Nov 2026 21:18:14 +0000
Manifest this update: Tue 10 Nov 2026 21:18:14 +0000
Manifest next update: Tue 17 Nov 2026 21:18:14 +0000
Files and hashes: 1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: RRlEx86adXc31xxNOd+8nBnY85uEknTAF/NGCOeacWM=)
2: 068953907C0411F1A78C011690A30FBC.roa (hash: w5YjcHS/MK18ZP9iJMcSrCe3g3iEDBbEXUJzeIg9XZw=)
3: 3FD07A88D42011F1A733CE073266CEF9.roa (hash: Ih1q3SO1hXYNPJ3MPccYrMA8UbXp9p8yQrtqwXteZSQ=)
4: 3F2D6C76D42011F1A733CE073266CEF9.roa (hash: OLCBk5USAN8qyFHGrFG9PV43y5dQVVc61sSMw16qYA0=)
5: 405C57ECD42011F1A733CE073266CEF9.roa (hash: tAhANf9Z2gnEo8loOzH6VmoXI5yFsDn0EODS/m5WnpM=)
6: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: miNX+ihIAMVGdmuQAkCqPB0jM4UCC/1lv8ogOOKBb5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 20:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Nov 10 21:18:14 2026 GMT
Not After : Nov 17 21:18:14 2026 GMT
Subject: CN=6af38a16-25fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:a6:ee:7d:83:42:1c:11:59:35:de:96:28:
fc:e3:f2:c2:46:63:f2:15:be:16:1b:14:3e:87:1e:
32:6a:ca:31:a0:d4:99:e3:08:80:5b:5b:2e:e5:6c:
70:f7:c9:69:71:a5:ef:bb:cc:ef:e5:7f:6d:3d:ba:
09:16:c7:e1:47:85:55:53:15:f5:06:bb:6b:fc:44:
be:d6:15:70:5e:d4:28:3d:6e:b5:40:43:6b:f8:cd:
15:51:ac:60:be:ba:5a:08:52:81:79:9f:2f:52:53:
6f:dc:44:0e:f6:f5:b6:5e:60:c0:32:a1:aa:94:a8:
99:4d:c8:29:c8:44:fe:c7:17:5e:f9:c2:1e:2f:36:
2c:47:81:e4:3c:bf:fe:59:1f:b9:5a:27:88:cd:19:
68:b0:1a:55:72:5b:36:0c:54:00:a4:b0:b6:89:b6:
ec:af:a5:c8:bc:b1:84:8e:d8:8a:9f:4e:db:e7:5a:
be:47:4f:aa:cd:05:5d:d1:4a:3d:a4:b7:e4:33:67:
cd:c5:ee:b3:e7:ef:70:65:5e:a8:8c:a3:02:ed:a7:
84:73:e3:7b:14:1e:57:77:55:d8:70:01:f3:14:6e:
92:b3:8b:1e:33:f8:0e:af:9d:03:d7:0b:c9:01:f5:
5d:e1:80:45:c9:4e:dd:a6:82:62:39:e6:03:f4:25:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:D5:E4:69:20:96:92:02:EC:8F:5A:40:BA:89:88:D1:05:FC:B9
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:50:49:49:f3:35:0a:fc:ce:b4:73:2b:05:5d:2d:7e:97:dc:
a8:2d:61:54:e0:2d:dd:91:71:f1:27:40:60:ed:f7:1d:67:6a:
a3:b2:e0:6d:d2:cc:21:9a:95:7a:81:8f:fa:8e:71:96:aa:de:
10:5f:2e:6f:11:8f:77:a8:99:76:7f:46:24:79:94:fb:12:c6:
cd:ad:71:78:64:44:ba:1a:05:cc:a3:3c:a7:18:41:b8:63:67:
f5:9c:25:00:57:84:8c:9e:38:a1:e9:ee:13:94:66:50:76:d0:
bc:36:8c:98:a5:25:00:f9:03:e4:9c:43:f6:7d:ee:e6:94:2c:
be:0f:ad:1b:dc:9d:58:08:ac:bb:f0:f9:e4:51:4e:2f:69:44:
70:66:34:85:95:b1:a3:47:24:58:51:2f:99:46:a8:2f:4d:33:
d7:b8:81:31:e6:d1:03:bc:5f:29:2b:48:51:36:c7:c1:61:12:
00:c0:58:0d:9e:70:d4:61:dd:34:e2:30:81:f4:9c:9d:6f:30:
ae:77:3e:7a:dc:8c:5e:ec:a3:b0:1b:9b:68:9a:85:46:88:6e:
ce:88:f1:64:b0:b1:4f:78:5e:f6:b0:56:47:11:bb:91:16:b7:
b6:2e:1c:2a:66:52:c5:f3:0d:a9:42:74:1f:89:b2:c3:34:2a:
9c:95:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:54:08 2026 by rpki-client