
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier: kgM0+wITwP47ElmzJ7Cw22huKbgxtF5a02fQMRrAWeQ=
Subject key identifier: 19:DA:80:5B:A8:27:6F:FD:23:A6:19:77:52:8A:CA:DE:BF:4E:21:90
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number: 69
Signing time: Sun 01 Mar 2026 09:23:51 +0000
Manifest this update: Sun 01 Mar 2026 09:23:50 +0000
Manifest next update: Sun 08 Mar 2026 09:23:50 +0000
Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: dEKcCsrWaMT/bV8ZPHMPZjnuueyp5esEhmNsV/jWhVA=)
2: 72966E18019F11F1812044E0666F56BC.roa (hash: 2MoHcOWt/dHynsLwXmXXFNIvBcOSLbHs8TMxVfngE0w=)
3: 608BD4EA019C11F18EFB8EA7666F56BC.roa (hash: zR0UxD/7uVtUzaOHpSeFcY0uRr2MZvP1wbeC2a/OK8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Mar 1 09:23:50 2026 GMT
Not After : Mar 8 09:23:50 2026 GMT
Subject: CN=69a405a7-404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:30:a6:30:41:98:5d:34:b4:cc:94:36:d0:
35:84:0e:79:a6:4c:16:17:04:0a:08:56:cb:ad:29:
02:19:fe:a5:d5:34:e8:b2:f9:44:1d:8c:09:48:cc:
91:e6:9c:2d:b0:45:5d:14:4f:10:16:14:dc:f4:9c:
0e:7a:8e:2a:1e:7a:d8:5a:b7:c2:3d:97:f3:80:8e:
4f:b3:31:4a:92:e0:7f:20:1e:51:1a:1a:5b:52:7a:
e8:dd:3e:85:ee:36:20:6c:8f:e4:4e:b1:42:63:70:
e3:cb:2c:8c:48:4e:73:98:31:67:ff:e3:27:41:2f:
2a:a7:03:43:68:e6:11:dd:d1:32:9b:d5:95:be:08:
3c:8b:88:2f:32:26:be:61:c6:8b:65:33:8e:85:0c:
2b:ff:14:bb:1a:e5:b5:8c:a5:56:84:84:b4:30:42:
5b:b5:87:b2:5e:8e:2f:1c:38:b4:1c:ec:69:a6:11:
1f:d8:b9:c6:88:2a:4d:cb:c4:2c:ca:18:f1:42:ba:
40:27:2b:cf:de:a1:ec:75:d8:a4:c6:99:b6:d9:fa:
ba:21:16:ce:a5:7e:c9:7c:3b:14:3d:78:2d:6c:b5:
8c:a0:90:55:56:fe:a9:69:47:d8:aa:fd:63:b1:cc:
90:1d:5b:e7:38:3e:26:a1:ed:4b:f7:1b:3f:55:fe:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:80:5B:A8:27:6F:FD:23:A6:19:77:52:8A:CA:DE:BF:4E:21:90
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:04:44:ba:ba:18:08:72:9b:2f:7d:fa:f0:7b:5a:99:aa:
8a:e8:4b:db:cf:71:79:08:a8:b6:f4:31:28:d0:06:91:57:ba:
75:4e:ef:f3:7f:36:ea:09:b7:41:50:13:4a:ee:0c:ff:99:ec:
03:8b:0d:e9:be:cd:81:c4:70:1e:67:f2:d2:e0:74:31:0b:2b:
b2:01:40:56:ee:c0:08:61:6f:9e:2d:02:9f:4f:3a:10:df:98:
01:da:18:fb:bc:7f:ce:1a:32:24:41:aa:5f:5a:b0:3e:15:56:
6d:78:96:53:3f:7c:6f:cc:10:62:09:d5:32:d3:5d:06:99:6d:
cd:a2:b3:d7:e1:15:15:b7:9a:44:04:02:ac:0d:c6:f0:38:76:
a7:47:97:25:f8:db:78:52:de:b3:35:9a:48:66:08:61:e6:47:
6b:11:09:4d:69:06:79:1f:02:5f:3e:47:0b:59:3a:c9:68:4b:
6d:d8:53:6e:61:20:fb:b6:bd:87:9b:82:e1:40:9d:48:b2:a7:
ac:f6:2b:00:4b:a1:87:a5:fb:aa:1e:dc:53:e0:95:90:a9:d0:
19:38:18:07:76:75:77:4c:b4:34:71:07:91:a4:14:88:e7:00:
9e:df:48:99:50:74:74:85:f3:93:dc:0d:c9:f2:e0:66:4b:74:
aa:08:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:03 2026 by rpki-client