
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier: UnSo1g4wFVb19if9oeaId7fDq4tbXxuCyfNZnJGmBDo=
Subject key identifier: 27:2A:C6:E6:EF:2B:65:6F:46:B9:BD:93:99:5A:FB:D8:E5:FF:CC:8B
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number: 86
Signing time: Sun 19 Apr 2026 07:20:01 +0000
Manifest this update: Sun 19 Apr 2026 07:20:00 +0000
Manifest next update: Sun 26 Apr 2026 07:20:00 +0000
Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: 2ZyNMmMbDHTHiYEpSGlO34riJ3gmP9JPbiaDRKj3gOw=)
2: 608BD4EA019C11F18EFB8EA7666F56BC.roa (hash: ECO9MOD3//reRSgefojthsyvnTjQPLzyXslUjMb1MpQ=)
3: 72966E18019F11F1812044E0666F56BC.roa (hash: u+qbVowvdxjMxvJonhb+j3Cw0O9VVP0RG0wUl0S5BLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Apr 19 07:20:00 2026 GMT
Not After : Apr 26 07:20:00 2026 GMT
Subject: CN=69e48221-bb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c6:4d:16:d6:b2:d8:08:5b:fa:b8:14:3b:15:
57:f3:84:22:13:e0:74:cb:a7:9d:96:3b:9b:2f:ee:
3f:87:db:29:15:95:f6:d6:da:61:f5:a5:08:e2:68:
e5:18:08:7b:64:f2:a5:2e:f1:46:74:cd:08:07:f0:
9d:af:6e:6d:d7:e6:03:93:45:6d:94:25:89:d9:58:
54:1a:1a:a0:f9:35:ed:03:49:04:68:ab:6b:06:11:
d2:08:80:e5:28:0b:39:35:e1:68:9f:65:95:8c:e2:
6a:f9:d0:84:b7:51:d0:af:c5:99:b8:63:ec:0d:dc:
44:fd:c1:c7:6b:24:b7:b7:7e:a0:43:5a:57:f3:03:
d7:23:75:20:b4:b3:7f:a6:ba:85:be:96:a6:c8:a3:
f5:b6:52:69:f3:c2:38:39:2d:61:cb:c7:af:22:62:
51:5d:f5:68:c1:ec:c7:6b:99:b5:7c:dc:47:a1:b2:
f3:de:a1:7a:b6:ae:64:40:44:37:f6:47:42:03:e1:
db:f9:e8:45:70:66:7f:25:cb:b1:a3:5f:06:3b:d0:
dd:48:6e:1c:76:ca:c1:7d:f2:05:be:29:0c:7c:4a:
c7:ca:bb:7a:0f:40:35:7d:db:5f:f7:ba:6c:1d:f1:
65:a8:27:10:b3:3e:4d:40:89:4d:20:27:bb:27:bc:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:C6:E6:EF:2B:65:6F:46:B9:BD:93:99:5A:FB:D8:E5:FF:CC:8B
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:20:66:d9:f0:82:84:bf:47:0c:62:8f:9e:08:a9:11:43:
25:05:b7:a8:2b:62:27:c2:79:bc:2a:bc:a8:68:a2:42:cb:8c:
27:eb:12:93:4c:20:24:1c:18:86:11:fa:da:39:d8:b4:22:f1:
64:71:03:1a:dc:0a:98:0b:99:5d:c1:f7:ea:9e:89:0e:70:00:
c6:3e:4f:76:46:69:a0:1d:f3:f6:7f:10:87:a5:1c:ac:64:8f:
e5:84:40:35:66:ed:3a:8d:2e:72:0f:93:6d:7a:12:09:90:d7:
0f:dc:e7:ac:2a:33:44:53:92:e8:16:12:ba:ac:20:7b:28:7b:
01:73:27:ea:69:89:d2:eb:36:c9:c1:e1:36:d4:97:88:83:f1:
63:c5:07:94:96:4a:94:c3:df:0d:0f:7e:9a:0a:8a:c4:22:5d:
8b:14:7f:a3:be:b8:e2:d8:31:5d:ad:96:eb:0e:7f:25:1d:74:
19:a5:d1:f5:f1:f6:f0:97:df:b6:a8:22:d5:a6:ba:06:02:bb:
be:02:12:11:a3:16:03:a7:1b:65:96:cd:db:b8:00:45:df:fe:
e3:ca:29:2c:27:da:72:c8:bc:bf:4c:2e:6a:a7:5b:46:f1:d1:
88:df:08:d4:16:ff:80:d7:22:44:31:dd:29:06:7e:60:7e:b7:
5a:8b:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:17 2026 by rpki-client