
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier: Im6CR9xBbvWBFm7T3WsqUAfjgzZhx1nZaTZRhbQXCNE=
Subject key identifier: 71:68:FA:12:7B:A0:40:DC:E5:BD:B6:20:7C:54:28:23:F2:13:06:65
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number: 01E6
Signing time: Mon 21 Sep 2026 03:28:32 +0000
Manifest this update: Mon 21 Sep 2026 03:28:31 +0000
Manifest next update: Mon 28 Sep 2026 03:28:31 +0000
Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: SIV8Y5h+VcDq5nw2pNWRGkH95hfZXS0Y9E2A7FFtCvI=)
2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 05ZHy6hO3wsV4N6+mrX/VlbtT5elT4sh4fwh+jsjFMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: Sep 21 03:28:31 2026 GMT
Not After : Sep 28 03:28:31 2026 GMT
Subject: CN=6ab0a460-8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:18:c9:48:99:62:28:b9:dc:b7:10:6b:cd:
14:ef:8c:a2:4e:eb:d2:ec:dd:4a:10:af:4e:b3:30:
e0:d8:f6:8c:50:31:16:17:30:a9:51:8c:fa:e0:f5:
b8:a7:e9:28:81:4d:83:5a:18:3c:71:fc:b6:55:b5:
7b:36:85:b1:a5:d7:0e:0a:ea:9e:87:0f:52:dd:b3:
ce:5c:a2:79:35:8a:93:51:0d:be:7d:5a:17:18:69:
d3:3f:90:d0:b6:d8:29:5b:23:49:99:6c:04:c7:76:
37:70:78:44:44:bf:3e:f1:42:15:88:3f:45:e1:29:
39:74:86:9f:48:89:c9:b0:16:a4:cc:40:60:74:59:
43:83:30:08:1d:c2:3e:3a:c9:82:5a:34:73:7d:74:
ad:01:c2:ce:dc:68:44:d8:78:cd:5a:ef:8c:d4:0f:
bd:21:29:09:59:77:13:ac:50:84:85:65:ba:23:ea:
e4:85:20:45:e1:a3:ee:92:cc:4f:7f:b8:ae:16:fd:
33:33:85:21:2d:ca:ce:cd:be:21:5f:61:ce:7f:2f:
5f:4a:19:d8:6e:0b:f9:3a:e3:ad:f0:96:9d:d2:35:
48:30:11:95:ab:41:0f:02:2e:71:31:27:a2:1a:45:
0b:c2:7a:97:9a:d1:a2:65:2f:f7:0a:1b:be:e4:48:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:FA:12:7B:A0:40:DC:E5:BD:B6:20:7C:54:28:23:F2:13:06:65
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:cd:d3:77:8b:a6:46:39:4c:02:b1:a6:4f:7b:d7:4e:67:
d9:50:da:32:ef:ac:de:0e:d9:37:79:d5:19:2e:06:5d:91:16:
c6:9b:df:96:48:bf:d8:23:a7:26:53:42:21:b9:1b:bf:6d:b5:
b7:ed:b0:e5:89:4b:9c:0e:79:b5:f2:fd:7e:ab:94:b1:5d:de:
a2:54:e4:9a:45:19:21:6d:7b:4d:55:2d:96:bf:7f:0c:c1:48:
41:2f:39:a4:fe:e5:d1:b6:aa:7d:3b:16:fc:ce:e3:3b:6a:bd:
e7:cb:0b:29:80:25:e3:14:dd:bc:e1:66:e9:92:51:2e:33:97:
13:68:58:bf:25:aa:7a:a5:7a:85:a6:bf:22:00:34:49:28:42:
bb:b5:f4:88:7f:01:77:73:75:2a:8a:0d:00:de:5f:47:48:dd:
43:67:c6:12:0e:fd:f7:cb:e6:a9:02:78:5e:18:85:29:5e:df:
96:c4:58:0f:27:d4:f5:8d:86:f7:2f:43:59:bc:92:21:ac:3e:
7f:6d:8a:2e:dd:f2:e5:d8:95:74:57:10:de:52:d7:00:73:9e:
be:c0:68:0d:62:02:3c:3a:2c:ad:2b:3d:eb:01:91:e3:f8:00:
07:38:2f:49:f2:1e:58:4a:4d:76:65:e9:78:84:f4:9b:b7:8c:
ed:32:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:55:38 2026 by rpki-client