
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File: DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier: YsdSN91/E3Vb3USnRRzFnk4fJbBVCCqIRIzzpY1Fhsk=
Subject key identifier: D9:C6:3E:48:6E:E8:98:04:0B:19:33:9F:0C:53:FD:61:EB:7D:D1:B3
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer: /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number: 5C
Signing time: Wed 23 Sep 2026 07:54:54 +0000
Manifest this update: Wed 23 Sep 2026 07:54:53 +0000
Manifest next update: Wed 30 Sep 2026 07:54:53 +0000
Files and hashes: 1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: ENZcB1sWMg5R38gP2mu1O1+JZkno9T48oS8Y/3LNLdk=)
2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Validity
Not Before: Sep 23 07:54:53 2026 GMT
Not After : Sep 30 07:54:53 2026 GMT
Subject: CN=6ab385ce-4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:13:0e:16:d4:bf:6f:15:6d:df:39:ea:3d:
eb:1b:e0:47:0b:9e:26:08:f2:e1:83:7e:b7:b2:7b:
d2:fe:4b:67:71:61:ab:11:4d:b8:61:bd:3f:12:27:
c7:0e:66:ab:05:6d:1c:54:e9:19:23:3d:47:33:33:
38:97:1c:21:42:e5:3d:7e:94:9c:fb:70:b6:ef:8e:
8c:16:69:68:d0:05:6f:81:9d:5e:de:e1:ca:05:7b:
f5:e3:8e:b2:a1:ec:b2:d3:d8:31:8f:e0:df:b6:be:
eb:72:44:f5:7b:3e:8e:2a:7a:6b:f2:92:d4:b8:ce:
0d:66:69:50:e0:da:1f:83:d6:50:53:88:cf:ff:96:
85:b7:78:94:b6:31:72:17:5b:a1:b6:8b:8a:04:a0:
d3:3d:c0:b9:1a:d6:4b:21:9f:74:a2:c8:41:9a:a8:
72:21:18:49:d7:b7:5d:32:fb:b9:ff:50:cd:23:52:
51:f0:07:2b:10:25:5f:07:5b:d6:a3:3b:96:2e:a2:
e4:29:09:e7:5c:a1:02:dc:0b:4c:56:34:63:86:61:
13:fc:a7:c5:a9:74:e8:eb:c7:a2:9b:43:45:99:73:
d8:f3:dc:b9:21:ae:50:24:ed:3c:b7:95:fc:22:bf:
1c:95:3c:e3:34:66:7a:e8:e3:71:21:e3:90:6d:08:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:3E:48:6E:E8:98:04:0B:19:33:9F:0C:53:FD:61:EB:7D:D1:B3
X509v3 Authority Key Identifier:
keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e7:21:e1:ed:b3:f4:df:13:0b:3b:3e:29:d3:2a:6e:00:fe:
db:09:4e:9c:b5:62:30:7c:e6:1c:86:c7:a6:e7:6f:19:97:d8:
92:dc:90:a1:53:02:d2:cf:8f:f4:38:34:7e:88:06:77:01:69:
51:c1:45:7d:9c:35:78:c3:ad:8c:20:a1:a5:ba:9c:4e:03:15:
ef:3e:79:0c:9e:00:32:a7:03:87:4c:02:21:ff:66:15:70:53:
08:78:e4:b3:7e:74:a5:bd:d9:c9:77:39:5c:86:ad:df:d6:c3:
0b:c8:6b:6b:0e:ce:0c:63:ad:3f:d7:e5:6c:16:41:f6:91:0c:
6c:f7:19:8f:47:05:85:c1:71:06:d7:8c:1c:09:e9:c4:1d:98:
b0:94:e6:3a:b5:4e:c6:6c:35:f6:b0:b9:8b:11:d6:69:5f:0a:
fa:d6:78:3a:ab:c9:ef:78:5a:64:38:41:9d:e7:7e:eb:63:30:
46:8d:d3:42:95:73:d6:83:fb:bb:99:94:5d:1f:33:c7:da:1a:
40:cc:bb:7b:42:dd:61:b4:33:12:4f:de:80:f2:7c:23:c8:42:
3d:38:01:f2:98:d4:b4:91:ee:3a:cc:ca:e1:23:29:84:ab:93:
60:84:06:80:3c:28:2a:f9:39:27:35:22:4c:a6:80:8a:e0:09:
9c:12:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:10:50 2026 by rpki-client