
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier: cuLdTAoNtMChYzwYtuk5unco0QleQBfGqotEjEHoUUA=
Subject key identifier: 00:62:72:D1:56:82:A2:08:89:41:CF:E7:B9:C6:3D:8B:9B:B6:E5:8F
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number: 03BF
Signing time: Sun 19 Apr 2026 00:33:26 +0000
Manifest this update: Sun 19 Apr 2026 00:33:26 +0000
Manifest next update: Sun 26 Apr 2026 00:33:26 +0000
Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: 6ClfFi2gvF+0QcFZ1D15hJxUyRxybrLJ0fBDfphNbNo=)
2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: in2SGcslKvdWmLFyOrq3QeVaymp0oqerQYbYxXUBafo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Validity
Not Before: Apr 19 00:33:26 2026 GMT
Not After : Apr 26 00:33:26 2026 GMT
Subject: CN=69e422d6-5709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:b5:10:1b:69:69:ee:3d:94:7d:b3:b1:e5:
f3:ff:d1:ed:36:fe:7a:e6:fa:8d:66:61:a1:41:55:
c0:eb:f4:6d:10:cf:62:1a:50:be:c0:f3:e2:41:b4:
1d:f8:77:1e:b5:84:f9:7f:2f:ad:27:b7:18:ec:ce:
d2:5d:bb:9e:f4:db:97:ce:5c:e9:2a:46:c1:a9:d2:
18:ce:3f:24:b6:c1:54:fe:4e:9d:61:0b:35:9a:04:
85:0f:ff:ef:e7:3a:35:19:da:88:93:8a:75:7c:7a:
4c:7d:9e:49:71:b9:cc:2d:37:b2:9b:82:c4:8e:10:
f7:3a:e7:16:f2:67:89:10:54:0e:2e:dd:de:eb:f7:
b5:68:7e:b9:86:b6:a7:53:66:15:72:a6:dc:72:c6:
9a:9b:e2:5c:a1:97:86:40:51:bd:89:1c:95:f6:1e:
ca:be:c8:e6:41:da:63:94:ee:7f:67:90:d4:03:20:
79:84:fc:98:02:8f:f5:67:e1:a3:35:cb:88:07:3a:
a5:8c:01:1b:2d:ac:ba:06:84:5e:62:d9:32:0e:a5:
c4:d0:19:0d:57:84:15:15:d1:99:87:07:1f:e6:1d:
b6:68:10:cf:c6:d2:ee:08:f4:b7:c6:18:15:59:42:
8a:85:35:c0:51:15:c0:63:57:31:2c:d1:50:93:eb:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:72:D1:56:82:A2:08:89:41:CF:E7:B9:C6:3D:8B:9B:B6:E5:8F
X509v3 Authority Key Identifier:
keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1b:00:fa:9c:ea:a9:0c:51:61:9f:b2:e7:d7:9b:0e:bc:db:
89:a0:e1:2c:97:af:8d:01:f5:e3:fd:f0:9e:ea:c7:57:10:b1:
00:8e:2d:57:d5:8c:5a:83:ed:a1:48:09:91:ca:19:f8:f9:e8:
d3:dc:8f:f6:d6:87:98:df:ea:65:dc:88:d1:40:1b:47:78:3e:
be:2d:15:f9:60:c1:57:84:16:19:4c:85:05:ef:b2:e5:ff:ee:
1f:c1:fd:0a:ee:81:05:ef:52:5e:8f:38:19:20:f3:6b:f9:69:
3c:69:68:41:3d:54:71:06:56:fd:ff:67:ff:22:0b:56:bb:66:
5c:70:4d:53:77:96:1f:c1:52:a3:13:d4:cd:49:4c:35:98:68:
14:19:5a:d3:b8:01:84:a1:49:02:45:2c:ac:19:a4:d3:87:55:
9c:db:36:1e:42:c5:d5:81:53:89:09:c4:89:68:aa:81:c4:cd:
71:c1:fd:76:40:9b:f0:03:1b:ee:b3:95:7c:c1:c7:63:63:1c:
b9:51:00:97:02:a6:cc:2a:14:61:2d:5e:1e:69:41:2d:19:57:
f7:ea:f7:1d:e8:71:6d:7d:3d:cc:25:14:23:a6:f0:8e:9e:47:
68:b8:58:29:76:c1:45:15:53:64:ee:88:58:84:ee:f7:39:dd:
f5:a3:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:17 2026 by rpki-client