
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: TIAzvs5QzIloTIvitC4eJJzbW13sMgeBTdec5B7AFwY=
Subject key identifier: 1F:A8:A7:EF:7B:F5:5A:2B:5D:99:C6:C0:C6:FC:DD:44:12:E9:6D:5A
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 45
Signing time: Fri 25 Sep 2026 08:34:17 +0000
Manifest this update: Fri 25 Sep 2026 08:34:16 +0000
Manifest next update: Fri 02 Oct 2026 08:34:16 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: m13y5nTsOyO+Nd9PpsjeO8xY5yPB4rKSueYU0sDfK2o=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Sep 25 08:34:16 2026 GMT
Not After : Oct 2 08:34:16 2026 GMT
Subject: CN=6ab63209-5d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:76:57:dc:c5:90:21:48:a3:b0:2f:2e:ab:
1e:8f:c8:7a:40:50:54:35:19:df:d0:ac:b3:86:73:
a0:9a:4d:12:7f:e6:1d:19:fd:58:d0:d3:67:42:85:
2f:42:e5:02:b2:5d:b8:32:5a:85:67:70:23:02:ed:
fa:fe:fa:00:1f:da:8f:30:c8:35:ff:38:46:d1:63:
04:58:4e:cd:f3:9f:16:b4:0d:60:fd:b0:16:f9:6d:
dc:72:9d:7c:e7:6d:15:d3:de:53:a1:82:18:b5:b3:
02:66:04:9d:57:bf:30:bf:5e:d5:dd:49:00:75:35:
6c:00:b9:23:7c:06:8d:d3:3c:4d:3b:40:5d:5e:06:
54:0b:91:f0:23:96:1d:9b:34:5e:b2:03:64:66:21:
d8:29:4c:b6:3a:9c:55:5b:31:7d:f6:72:62:30:5a:
d3:b6:99:b6:30:90:9c:ae:dd:14:27:f9:b1:dd:82:
41:52:4e:a7:6d:1b:cf:2d:03:bd:35:98:cb:f0:9d:
91:50:37:e4:4d:e2:f7:bf:74:98:b7:2f:fc:f6:db:
8f:8b:b5:e0:dc:99:10:13:b8:83:59:a3:85:ac:2b:
8b:5d:78:22:a1:ec:08:a6:09:15:d5:93:53:15:ae:
06:f1:d4:9f:46:c9:74:ae:61:a7:79:5f:e7:31:46:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:A7:EF:7B:F5:5A:2B:5D:99:C6:C0:C6:FC:DD:44:12:E9:6D:5A
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:d8:b7:78:7f:a6:51:5f:00:c5:e9:33:46:9b:96:a6:8b:
f1:45:77:94:58:9c:a9:da:e6:b2:9a:a7:77:5b:40:6a:b0:4a:
36:39:a0:28:15:6f:f7:36:c1:e5:0c:0f:fe:64:18:f7:65:89:
72:22:f1:ec:31:4a:f7:e1:3b:c5:bb:f2:cb:42:20:0b:a3:21:
47:d5:d7:b7:bc:d9:4e:19:bd:10:90:c6:f3:09:d0:7a:75:46:
2b:5e:7c:6f:86:17:4a:bb:ac:cf:47:e9:ae:9c:f3:bf:c3:d9:
5d:e1:58:35:65:b9:6a:fa:f5:7c:91:d8:0d:0e:f4:1b:fe:e2:
a5:50:ef:b4:21:5b:98:ab:7d:a1:1f:e4:5b:f9:49:80:1f:f0:
73:cf:3a:21:96:ff:08:52:f6:b8:51:f1:4b:2a:43:1b:c0:04:
5a:56:c7:f9:f4:dc:8a:4d:5e:79:7f:98:58:63:06:37:5d:c5:
0b:2e:c0:69:51:1c:22:a5:0a:28:32:e9:d1:d2:2f:7e:dd:98:
46:de:3f:de:56:0b:24:70:e4:a6:fd:bc:05:f2:98:c1:42:ba:
a9:34:2b:01:53:92:4f:80:03:57:50:07:d0:f6:16:3b:9a:c5:
e3:37:b8:1c:4f:fe:3d:fd:ec:f9:dc:44:ed:ac:68:22:6e:0b:
37:f1:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:44:52 2026 by rpki-client