
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json)
Hash identifier: UZsAdFkPNL6YOuIS5SfMddxdE26qBJecPO8YniRDos0=
Subject key identifier: 71:70:5E:C5:84:0A:0B:0F:06:E9:3F:E9:31:96:D9:8E:66:63:C6:19
Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82
Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
Manifest number: 0CE8
Signing time: Thu 16 Apr 2026 18:14:51 +0000
Manifest this update: Thu 16 Apr 2026 18:14:51 +0000
Manifest next update: Thu 23 Apr 2026 18:14:51 +0000
Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: p/X/BqEC/+2GAJKRys2b+eEAR2CfddEXRc8HyFYhenQ=)
2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: J461cEphYF9ExJLG4WmmjdszJJ1c691Yg3Tpfr+lnes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl
rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682
Validity
Not Before: Apr 16 18:14:51 2026 GMT
Not After : Apr 23 18:14:51 2026 GMT
Subject: CN=69e1271b-8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:0a:b2:0c:f5:7a:40:d8:f0:32:79:c0:44:
75:0c:ca:ba:bf:ff:8e:af:76:82:3f:17:4f:2c:5d:
f9:be:0d:f2:62:9e:32:29:f6:d5:53:81:a1:11:42:
4f:ad:9d:c8:03:b9:f9:1a:53:0c:23:03:94:16:e4:
36:ca:26:ac:34:4d:8c:6f:25:4a:87:22:4b:d3:3c:
ef:c9:9f:5a:66:b6:58:b9:9d:38:4a:98:04:3d:57:
1c:ec:ae:50:29:2a:b6:d0:36:23:cf:64:79:c6:84:
df:63:7e:1c:ec:f5:41:d7:b6:03:91:33:9e:99:51:
25:04:5c:00:e8:aa:58:48:09:19:1f:d8:a7:c3:d5:
d9:7b:4a:99:56:6e:b5:e6:25:e2:96:03:f7:03:26:
f3:33:71:fc:c1:3f:cb:63:39:84:3d:8c:5b:1a:1d:
d0:01:6f:36:1c:75:01:a1:eb:ba:db:da:ac:1d:04:
42:86:b0:c7:6a:0a:c0:36:33:12:ee:e7:fa:8b:b4:
81:e7:82:ca:35:8c:e1:7f:e1:48:ce:db:64:74:88:
aa:58:f3:71:a2:d7:24:23:4e:a5:00:37:33:ee:5d:
29:ba:87:cc:ba:a3:de:5a:0d:15:02:0b:32:84:fa:
27:b8:f6:4e:31:45:df:d5:f5:31:e4:9c:a5:61:0f:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:5E:C5:84:0A:0B:0F:06:E9:3F:E9:31:96:D9:8E:66:63:C6:19
X509v3 Authority Key Identifier:
keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:7e:2e:58:d2:03:5a:99:ae:1f:c7:76:b6:b1:c2:95:9d:
e7:92:35:ac:7e:d5:02:c8:29:d2:4a:d0:0a:e9:db:d9:20:ca:
a0:71:54:c9:60:d9:e3:5b:89:b5:b3:0e:fa:82:5b:90:bd:bb:
23:7c:5f:45:4d:6c:e4:d1:d5:cb:14:de:97:21:b6:b3:c9:35:
ff:b9:41:fc:eb:17:b5:d2:bc:37:be:50:d5:ba:48:b1:c3:ef:
37:64:08:09:b0:c0:81:1b:10:12:d6:73:45:b2:e4:e6:f8:ba:
57:31:ba:56:64:62:6a:b0:9d:4e:e0:e0:d8:94:2a:b7:76:df:
39:99:16:3d:61:44:37:95:9c:71:15:cd:23:6e:44:9f:06:2c:
2d:f0:6b:a4:2e:dc:8d:1f:d5:f1:eb:3a:39:9c:07:1c:1f:89:
bb:27:8d:84:3a:98:22:5e:f2:96:22:92:22:72:e3:3a:98:ac:
30:94:4d:ae:62:19:b1:28:70:75:2a:2a:0e:ac:7a:ca:55:92:
fe:9b:dd:2d:ef:84:4d:00:41:94:cd:27:d8:3d:18:fb:29:c9:
64:46:ee:a4:ab:9e:72:b5:be:49:f5:77:ad:5a:63:5d:6a:0b:
87:bd:fd:11:86:00:1d:51:cf:4f:b8:cc:11:5d:74:78:26:19:
a9:04:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:37 2026 by rpki-client