
$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
File: DsmozWa374HQeaCEKyY5Zf50-NA.mft (raw, json)
Hash identifier: cc3LbfEzjCPb6eiYqlGD/u+5Kd9RPUCqqr3zvlcaT20=
Subject key identifier: FE:7A:19:18:98:A1:C2:B0:6A:5A:DF:AB:61:9F:53:68:8A:C6:88:48
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Certificate issuer: /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
Manifest number: 0D
Signing time: Mon 11 May 2026 09:19:45 +0000
Manifest this update: Mon 11 May 2026 09:19:45 +0000
Manifest next update: Mon 18 May 2026 09:19:45 +0000
Files and hashes: 1: DsmozWa374HQeaCEKyY5Zf50-NA.crl (hash: 09piqHGXpNq2xAl960XRnj4NmasI4rOAwgNTRdfMe48=)
2: 5A98E30A42CB11F1992134BCC5833773.roa (hash: 1GzxVrWXwmq6D+IOsW7P45S3VHfpVtuLEfB3vhPmPmc=)
3: FE7346D642CC11F1A52BA276C6833773.roa (hash: U80wdjKrFdkd4k7mDaI1dER/kEU7/YWh7Nwr30a+PjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Validity
Not Before: May 11 09:19:45 2026 GMT
Not After : May 18 09:19:45 2026 GMT
Subject: CN=6a019f31-a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:20:e5:03:ba:fa:2c:cf:29:5b:5b:fc:e9:
81:10:1e:cf:9f:f8:78:c1:24:54:dc:97:36:74:e5:
64:c6:e7:01:f7:61:11:2b:64:0c:ce:ed:8e:e8:e7:
1f:a4:3e:cd:87:24:80:51:f6:2b:47:b6:d5:d8:b1:
d3:17:5e:87:b5:36:4f:55:3b:a5:2d:ab:71:ce:98:
43:dd:a3:bf:9e:d2:0a:75:d4:77:f5:ee:8a:9f:13:
30:00:1d:6a:dc:f3:02:1c:04:14:66:2c:f8:c1:90:
fe:b7:be:ee:2b:41:5a:90:0a:0a:b2:30:db:a9:d3:
1d:8d:b5:4f:c6:df:86:e2:0c:90:80:a0:d5:98:6f:
56:01:3c:35:a5:a1:5c:ec:de:23:5a:b3:d5:27:13:
e2:33:71:d1:59:ff:06:f9:8e:df:5c:b4:7a:c4:7f:
4c:16:46:3c:cc:dd:26:c4:fe:25:78:bc:6b:74:12:
c6:53:3b:e0:f4:a4:23:ff:21:70:c7:bb:f3:b6:b1:
91:20:96:e1:ed:cf:61:50:14:2d:df:22:6f:33:0e:
6c:6b:8b:20:0e:e7:77:56:d3:3c:66:f9:d0:15:46:
e2:12:9e:1e:1b:bb:75:7d:74:68:ae:8e:29:91:9a:
ad:c9:db:c7:4c:55:d3:bc:e9:07:81:ea:df:61:8a:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:19:18:98:A1:C2:B0:6A:5A:DF:AB:61:9F:53:68:8A:C6:88:48
X509v3 Authority Key Identifier:
keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d0:83:1b:32:31:36:9c:ec:35:54:7e:80:e1:1c:dc:93:85:
82:46:7b:60:f5:61:d5:a7:cc:57:49:32:34:c3:85:29:e4:fe:
3c:a5:0c:41:12:b1:58:c3:22:f9:1b:0c:f5:9c:95:c8:7d:47:
c9:20:f8:95:ac:bf:76:0d:fe:7c:da:f5:2c:5f:19:7d:a6:94:
42:43:21:8d:0e:6f:9b:ff:d3:96:63:38:12:4f:93:4a:f9:c0:
36:5a:93:1a:5d:77:32:46:65:9f:71:5b:59:07:84:8e:d3:3c:
98:4d:4c:13:d5:70:b3:6c:55:f6:4b:3c:23:c4:57:46:fb:ba:
61:29:15:bb:51:3a:30:02:fc:83:36:17:b3:9e:22:e5:f4:cb:
6f:e3:c6:9e:45:fd:47:10:f8:92:e5:e5:ae:d1:51:eb:ec:53:
80:57:01:49:84:1f:da:95:b4:95:76:ea:3b:72:00:48:1b:61:
5c:a9:e3:38:07:54:8c:59:59:bb:bf:65:71:34:8f:fa:d9:46:
fc:d5:e2:26:54:f8:0f:bc:b5:08:7a:0b:e5:eb:a1:1e:e9:16:
f5:d2:35:38:2a:60:8e:dc:5b:29:25:bf:1b:22:fc:58:84:7e:
4d:71:65:3f:c3:04:95:62:d9:6e:1a:0d:c6:88:8d:22:af:7d:
92:74:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:33 2026 by rpki-client