
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier: C9F7mczJv+v6qffbzFVfObmpj6t9LJ69I7VaTuZvebM=
Subject key identifier: 7E:7E:90:6E:62:5E:FF:DC:0E:2A:DE:1E:B1:E7:3C:4B:A1:49:74:1E
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number: 24
Signing time: Thu 23 Jul 2026 10:54:53 +0000
Manifest this update: Thu 23 Jul 2026 10:54:53 +0000
Manifest next update: Thu 30 Jul 2026 10:54:53 +0000
Files and hashes: 1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: JgxC5B77fwA0KvoKtVGOBTBj3M/I9uZ+v1aoVcrZxEA=)
2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: Jul 23 10:54:53 2026 GMT
Not After : Jul 30 10:54:53 2026 GMT
Subject: CN=6a61f2fd-db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:fc:dd:b9:1d:07:0e:cf:9b:c5:52:57:cf:
3e:7a:ef:7b:ce:4a:ca:5d:da:58:d1:d3:9f:1e:19:
ec:5c:d8:e3:d5:ac:cc:0d:ec:35:4a:09:e4:71:5b:
cf:cd:fc:dc:7f:c6:2d:78:90:31:ef:a2:5d:1b:6e:
77:b6:f0:78:14:7a:19:aa:7e:60:a0:e1:1c:1f:69:
fa:9d:ca:03:c2:a7:ee:7d:73:9a:12:f6:69:9d:76:
04:74:ff:44:a8:63:48:83:bb:35:c7:bd:a7:40:26:
05:ae:0c:dc:c4:4a:1b:3c:1c:a1:3e:d1:b2:e9:1f:
53:c2:5d:0b:c9:8b:d8:84:99:3d:3f:7f:bd:fe:fb:
fb:98:a5:cc:30:c5:71:81:10:0a:f5:9d:be:ef:27:
71:a4:fb:3d:9b:33:36:8e:de:cb:5e:4c:aa:0c:11:
b4:13:19:a7:06:d7:87:e8:64:d9:65:32:64:71:a6:
e9:f4:bd:e2:c7:83:42:2c:1a:41:6a:02:1a:8f:b1:
22:de:81:e3:aa:c1:00:5a:69:f3:b3:bb:1c:ce:c1:
ed:16:41:4b:50:86:da:d8:b1:20:81:4b:8e:25:b5:
3d:76:1e:05:2c:d6:d8:01:98:86:63:f2:76:17:8a:
a6:b8:f5:02:54:82:fa:cb:0b:91:ab:65:92:24:bb:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7E:90:6E:62:5E:FF:DC:0E:2A:DE:1E:B1:E7:3C:4B:A1:49:74:1E
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e0:ca:81:31:ad:30:38:4c:ea:71:d5:34:96:84:c4:83:b7:
32:62:05:f1:a8:83:c5:ce:36:36:9c:43:14:46:04:24:d5:99:
bb:f9:a3:98:48:06:1d:b1:61:1b:04:ad:49:0c:55:16:f5:87:
08:30:ed:c6:70:29:2a:3c:08:e9:b4:fa:83:90:6b:c8:e4:eb:
3c:6b:fc:04:87:14:c7:9a:e4:2b:f5:37:53:9e:73:83:fa:4a:
5f:49:97:3a:ce:41:30:28:c8:f0:78:b6:c8:6a:24:8a:c6:1f:
15:e3:92:ca:96:28:b1:de:11:89:ce:7f:c9:1f:ec:ee:e8:42:
90:b7:12:af:37:0f:f3:43:53:70:46:c4:44:2f:cf:99:3e:4e:
9c:40:01:17:f6:99:5f:7b:87:1a:07:f5:f8:0e:b5:d0:54:6e:
cb:aa:c2:cc:02:c1:a2:19:25:d7:01:4c:25:d2:f1:13:f9:73:
e3:8f:e4:55:01:6f:48:29:14:d5:f9:12:e2:5c:73:0c:8e:e4:
f1:2a:ce:4a:0e:b4:4c:57:41:b5:d7:1c:6c:ab:28:ae:25:0b:
52:34:a4:3f:8c:d0:93:c5:b2:88:cd:75:4c:99:bb:dd:76:48:
15:21:d4:8a:f8:5d:30:d5:7b:3c:34:10:9a:9a:ca:a2:a4:83:
e2:d7:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:37 2026 by rpki-client