
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier: 5ig9yG2k5Bics3h1vpX3X5bsFIomPCgYH6Glyall6mg=
Subject key identifier: 9C:D4:8B:95:59:B0:D6:7F:84:32:87:5B:8D:27:E9:59:49:FD:7F:77
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number: 0C01
Signing time: Mon 02 Mar 2026 18:45:15 +0000
Manifest this update: Mon 02 Mar 2026 18:45:14 +0000
Manifest next update: Mon 09 Mar 2026 18:45:14 +0000
Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: mJHGWS/UMZqGjSFgBMkYal1aCvVT1DY6f5pkZ1jHXtQ=)
2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: 8POaocpMFP4OKfeekt39NHI2suyTClKvLejF+mBZsSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Validity
Not Before: Mar 2 18:45:14 2026 GMT
Not After : Mar 9 18:45:14 2026 GMT
Subject: CN=69a5dabb-e265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:42:d4:72:0b:4c:e0:f0:51:0c:cd:09:8b:e4:
19:bb:9b:67:0c:95:70:a1:1c:eb:6f:fd:31:d6:df:
7e:19:d3:7c:a4:09:e4:e3:f5:4c:8b:71:7f:e2:c0:
61:35:e8:55:9a:f6:1e:c1:d0:5f:f9:52:76:79:69:
18:2d:9f:b4:27:66:60:f0:ff:42:e7:26:aa:8d:e2:
f4:77:9d:1b:a7:99:41:c4:b4:34:5d:08:20:f5:1f:
1b:e2:21:58:8c:41:71:1e:fe:7c:51:d8:0e:bb:27:
33:1c:3c:e6:b1:f6:c4:a2:30:e1:c4:35:17:58:a0:
ee:62:96:99:f9:60:4b:a0:5b:07:28:0d:16:2c:38:
79:0e:19:07:b6:96:ad:41:d4:16:56:e6:66:e1:90:
f8:1c:4e:aa:64:fa:bc:ff:df:a0:70:5b:c8:f3:12:
64:36:cc:17:a9:32:26:8c:f8:ab:e6:d8:02:25:d4:
72:e2:68:5f:7a:74:21:54:b1:de:80:46:62:6d:2b:
7d:0e:c9:c7:ce:a3:df:ce:76:79:c5:5d:3c:23:fc:
4f:bb:88:23:5c:3d:03:ff:03:95:13:35:72:58:09:
ff:69:40:b4:87:96:2a:a1:22:98:bf:80:ef:ed:8f:
80:a2:54:3d:7d:98:ed:07:61:78:63:13:55:9f:8b:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:8B:95:59:B0:D6:7F:84:32:87:5B:8D:27:E9:59:49:FD:7F:77
X509v3 Authority Key Identifier:
keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:dd:a8:bf:5d:b0:f3:eb:54:4f:a3:78:60:81:46:9d:bd:
8a:7c:06:bb:b2:1b:9b:16:88:01:cb:69:a2:7a:47:39:69:15:
28:fb:a8:ec:7b:e1:b5:52:1c:d9:da:b3:42:c4:d9:e6:a0:bc:
9e:6a:30:53:06:64:3e:b6:85:a9:61:4d:57:c3:41:de:68:c7:
ce:ac:56:d8:df:25:b9:08:64:c6:4d:2d:4e:38:fa:e6:2c:4e:
4e:f7:86:c9:97:ec:01:2a:ee:6f:8a:b4:60:2d:a6:a4:48:37:
4b:1e:46:be:30:52:a3:2a:75:3f:b2:4a:8c:c3:72:68:e3:d7:
d2:2b:fd:2e:dd:67:ba:6a:bb:cf:51:48:63:94:c5:e3:86:0e:
9b:8c:15:a1:b0:9d:ca:43:5e:e9:31:6f:32:3b:34:83:48:7a:
fc:64:b9:be:04:1c:91:08:57:a9:fb:e4:30:4e:1d:72:39:8f:
4f:b1:37:0e:e5:06:f6:39:44:a7:bf:52:cd:73:20:2b:6a:07:
ef:58:2d:69:4c:fc:4e:9d:8d:aa:5b:81:03:92:11:3e:03:fb:
37:3e:61:f4:48:71:64:2c:94:b6:38:93:ee:0d:c8:3d:c5:b0:
aa:e2:c2:57:b5:5f:82:fc:7b:78:67:34:4c:0d:b5:06:0b:ee:
36:54:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:50 2026 by rpki-client