
$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File: DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier: jr8b1wk1KgfD42WMMQbhJUeMoUDH2pXOXaeSTrZlKmk=
Subject key identifier: F1:4F:58:E8:35:80:6C:5D:BB:2A:F5:82:51:99:4B:4C:80:86:CE:6B
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer: /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 10:44:47 +0000
Manifest this update: Thu 23 Jul 2026 10:44:46 +0000
Manifest next update: Thu 30 Jul 2026 10:44:46 +0000
Files and hashes: 1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: zKg/MJReKUIYZB7m1peTqNvNJDY5bvPZFoA1Ccp9Mt8=)
2: FE7346D642CC11F1A52BA276C6833773.roa (hash: U80wdjKrFdkd4k7mDaI1dER/kEU7/YWh7Nwr30a+PjI=)
3: 5A98E30A42CB11F1992134BCC5833773.roa (hash: 1GzxVrWXwmq6D+IOsW7P45S3VHfpVtuLEfB3vhPmPmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Validity
Not Before: Jul 23 10:44:46 2026 GMT
Not After : Jul 30 10:44:46 2026 GMT
Subject: CN=6a61f09e-2cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:69:46:ed:1b:cb:1d:7a:37:77:61:64:c4:
e2:53:a7:c3:ff:11:06:82:2a:a8:66:d9:39:ee:43:
67:0d:18:1e:81:75:89:1b:b1:bb:63:be:50:66:ba:
33:f6:72:89:14:6c:05:79:4d:4e:69:a5:11:e1:a9:
3a:3e:6e:51:15:97:08:c7:f6:ec:99:12:9b:e6:13:
f7:93:de:7c:cb:aa:10:0c:9c:28:bf:06:d9:c2:4e:
f0:d6:08:03:2c:1d:d5:5f:27:3e:83:0a:cd:bb:fa:
eb:79:0a:fb:9a:62:87:ee:42:59:8e:50:b6:77:15:
ea:87:d6:94:69:1e:7f:84:da:26:a6:24:10:9e:71:
2a:bc:96:4c:af:36:07:a9:71:0b:32:b3:d2:2d:9d:
26:f5:3b:04:f6:e9:b8:e8:5a:55:4e:2e:be:1e:15:
13:30:70:ea:ed:f6:0b:56:01:76:c2:6c:6b:ce:1b:
01:e9:52:ea:1c:f8:62:e2:48:ed:87:9d:cc:68:24:
64:83:60:72:d1:f4:d1:40:5e:cd:76:a3:21:ae:3b:
79:b3:e5:26:6c:8b:1b:f0:db:18:19:d0:c6:5f:cb:
a7:e4:cc:f1:00:ee:50:1a:de:74:aa:b9:4e:7e:2c:
43:cf:e1:5a:f7:06:aa:3a:b9:ac:3f:fc:08:cd:2a:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:58:E8:35:80:6C:5D:BB:2A:F5:82:51:99:4B:4C:80:86:CE:6B
X509v3 Authority Key Identifier:
keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:62:43:5a:01:06:6d:59:85:8a:fe:7e:10:79:43:fc:00:f7:
68:31:ae:f0:7c:5b:fb:a4:8a:79:49:d8:e8:2d:cd:6b:8a:53:
26:65:3f:ba:b7:4b:cb:55:85:60:d0:77:37:a8:02:b9:aa:66:
59:78:96:0c:87:e9:2f:23:3b:dc:54:d1:33:4d:8b:03:ac:cc:
0a:2f:16:ab:0e:ed:32:05:7e:34:de:8b:b3:42:60:01:b7:3c:
29:ee:5c:0a:4c:a9:3f:2a:74:7b:03:0a:cf:2c:9d:e0:41:18:
1b:11:7d:57:0d:c6:26:78:e3:4e:4d:82:93:46:3d:34:8a:95:
38:08:3c:37:d8:1e:1c:d5:81:bf:4a:66:54:4a:3b:97:45:11:
48:76:c6:e5:1f:f3:6d:07:3b:26:d1:66:12:d4:20:71:96:11:
ae:3a:a4:57:92:58:8e:bb:82:df:0e:44:77:68:01:c3:7e:53:
58:2e:09:12:9e:cc:4c:f0:ab:ca:bd:2b:05:13:13:c3:67:b8:
bc:e3:9b:f0:89:5c:81:cf:67:1f:04:a9:9b:89:32:3c:38:f4:
9f:d3:7e:9c:b0:f4:07:8f:10:92:1c:24:c3:30:9c:55:31:b8:
e1:59:30:07:0d:ac:d8:18:32:fd:1a:54:b0:16:41:55:b4:e5:
99:6d:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:43 2026 by rpki-client