
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier: Kw56AJZgXIxqHQkvMuBeEdFbQLYtFr3RBRVLHNScHro=
Subject key identifier: 31:04:6B:F1:EA:30:9A:B5:48:FB:41:FA:D1:87:CE:7C:14:71:EC:3E
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial: 357A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number: 356C
Signing time: Fri 24 Jul 2026 15:18:44 +0000
Manifest this update: Fri 24 Jul 2026 15:18:43 +0000
Manifest next update: Fri 31 Jul 2026 15:18:43 +0000
Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: KUN9li9ymozK2pPN7o/0Dfl4lqie45R8Vg/0V67zvj4=)
2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Validity
Not Before: Jul 24 15:18:43 2026 GMT
Not After : Jul 31 15:18:43 2026 GMT
Subject: CN=6a638254-6018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:02:1a:07:81:4f:f1:17:d3:2e:61:48:32:
07:0c:c0:ea:e9:ed:d0:01:6f:c3:aa:f5:54:9e:b8:
46:6b:b8:0b:89:4c:58:93:c0:78:ad:7e:ea:bf:c0:
66:f1:e9:65:e5:98:b0:16:d7:7e:21:53:f4:50:56:
6e:0b:6a:58:6d:34:32:b7:ab:10:b1:cf:26:80:00:
7c:66:55:22:a9:9c:c7:db:e4:8a:88:5b:0f:0d:3f:
5c:8e:06:c5:5e:18:88:88:dd:ff:99:15:a4:96:5d:
bc:dc:f3:88:da:38:50:7b:2b:27:39:70:79:d0:64:
db:72:fc:2f:2a:78:aa:67:19:4c:31:da:2a:ab:2a:
50:d7:5b:38:d4:f0:a6:09:94:33:15:97:62:7b:70:
b2:a6:59:27:56:3b:b2:99:05:7e:a4:01:48:7b:03:
8e:e3:7a:00:dc:12:6a:31:f8:3d:df:09:f5:34:3c:
16:6d:40:a5:0a:ed:39:0c:57:45:e7:bd:86:db:7c:
40:34:3a:6c:97:f2:f5:20:f1:23:09:3e:cd:1f:ac:
ae:93:33:0b:58:90:35:d5:81:0c:c4:99:b5:74:ff:
62:97:66:09:5a:87:6b:2a:a2:04:8c:eb:2b:75:6e:
71:c2:73:b7:3a:e3:dc:47:d8:18:68:3b:f1:9a:53:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:6B:F1:EA:30:9A:B5:48:FB:41:FA:D1:87:CE:7C:14:71:EC:3E
X509v3 Authority Key Identifier:
keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:1a:a8:ca:aa:4b:a7:75:67:e2:11:7f:42:34:52:cf:e7:
88:e7:d7:f9:53:70:bb:1e:9e:9d:50:30:79:52:b1:0e:c3:d1:
d5:2d:b5:4c:a7:a8:b3:44:27:fb:70:ff:22:a6:19:61:8e:e5:
17:c0:50:ff:56:40:6c:41:4f:1d:4a:cf:42:2c:38:dd:0a:95:
d3:f5:cb:0c:99:05:dc:d8:04:31:69:07:cd:e9:47:a0:d8:8e:
2f:4a:4a:f0:5c:bb:7b:62:86:0d:7a:66:7f:a7:c8:26:9d:91:
79:a9:ef:aa:3b:3e:20:45:87:ac:0e:90:51:05:cb:4e:41:bb:
ba:e7:42:21:bb:ab:98:dd:e6:e8:d8:e7:ae:93:8a:b0:11:28:
fa:bf:2d:de:51:6d:27:96:0d:cf:72:db:3a:1c:35:43:e8:22:
4f:7b:57:73:cf:6a:d3:03:74:e0:88:d0:49:44:79:8a:3a:68:
fc:96:66:8e:41:06:de:bb:11:03:bc:52:31:fc:b4:f2:46:4d:
56:4e:18:22:3a:02:ab:19:1d:6e:9c:06:da:d1:2e:3f:24:69:
b0:8a:7c:e4:45:81:f1:f1:c0:82:cd:39:9b:dd:b2:ff:98:67:
23:69:55:fa:cf:29:27:54:24:9c:b0:dc:44:2d:05:a4:2b:e1:
e2:10:10:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3
MjhBNENEQTYwHhcNMjYwNzI0MTUxODQzWhcNMjYwNzMxMTUxODQzWjAYMRYwFAYD
VQQDEw02YTYzODI1NC02MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAitkCGgeBT/EX0y5hSDIHDMDq6e3QAW/DqvVUnrhGa7gLiUxYk8B4rX7qv8Bm
8ell5ZiwFtd+IVP0UFZuC2pYbTQyt6sQsc8mgAB8ZlUiqZzH2+SKiFsPDT9cjgbF
XhiIiN3/mRWkll283POI2jhQeysnOXB50GTbcvwvKniqZxlMMdoqqypQ11s41PCm
CZQzFZdie3CyplknVjuymQV+pAFIewOO43oA3BJqMfg93wn1NDwWbUClCu05DFdF
572G23xANDpsl/L1IPEjCT7NH6yukzMLWJA11YEMxJm1dP9il2YJWodrKqIEjOsr
dW5xwnO3OuPcR9gYaDvxmlORzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEEa/Hq
MJq1SPtB+tGHznwUcew+MB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE
QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK
T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlA8aqMqqS6d1Z+IRf0I0Us/niOfX+VNwux6enVAweVKxDsPR1S21TKeos0Qn
+3D/IqYZYY7lF8BQ/1ZAbEFPHUrPQiw43QqV0/XLDJkF3NgEMWkHzelHoNiOL0pK
8Fy7e2KGDXpmf6fIJp2Reanvqjs+IEWHrA6QUQXLTkG7uudCIburmN3m6NjnrpOK
sBEo+r8t3lFtJ5YNz3LbOhw1Q+giT3tXc89q0wN04IjQSUR5ijpo/JZmjkEG3rsR
A7xSMfy08kZNVk4YIjoCqxkdbpwG2tEuPyRpsIp85EWB8fHAgs05m92y/5hnI2lV
+s8pJ1QknLDcRC0FpCvh4hAQbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:37 2026 by rpki-client