
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
File: DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json)
Hash identifier: m7tJ/94vu9dMFt4fXcTQAjPGDRFpleG1oIN0o9BzcUI=
Subject key identifier: A4:3B:6A:81:BB:F4:B9:7D:DC:7E:7C:4C:19:3B:1C:50:80:D3:E9:3A
Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
Certificate issuer: /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
Manifest number: 18
Signing time: Mon 11 May 2026 09:11:02 +0000
Manifest this update: Mon 11 May 2026 09:11:02 +0000
Manifest next update: Mon 18 May 2026 09:11:02 +0000
Files and hashes: 1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: mGkFuYtTE9hkPElYddKwfcB3ri8WGci9RaRHpwPS+z4=)
2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17
Validity
Not Before: May 11 09:11:02 2026 GMT
Not After : May 18 09:11:02 2026 GMT
Subject: CN=6a019d26-e8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:9b:84:97:43:61:48:ff:a0:d2:e9:4d:00:
58:93:16:13:4a:40:b1:cf:cf:3a:03:cf:d8:95:20:
05:50:60:67:67:f8:aa:27:f5:3c:d6:56:f4:c2:81:
fb:2e:59:f0:28:4b:20:9b:11:4b:27:7d:15:7c:38:
6d:ac:3d:59:3d:d7:9b:d5:cb:ac:ff:ae:4a:1f:0f:
db:58:90:f1:59:b1:3c:c0:25:5e:0d:b0:7a:f1:9d:
45:95:56:b8:c3:6e:4f:08:5d:89:b4:b4:d0:03:31:
06:29:ec:69:60:6a:a6:a0:f4:f2:59:be:d2:24:f6:
eb:d8:93:e3:97:62:46:2d:9e:10:3d:9a:d6:45:a0:
3d:3b:45:84:e2:ec:95:d3:62:9b:c6:fb:7d:f3:7d:
a8:e4:f2:88:64:13:5f:99:be:75:a5:05:4f:58:5a:
04:db:76:f2:6f:4c:11:e5:07:8e:d4:37:3e:a2:38:
1e:79:2d:d2:4f:86:f2:32:de:76:1e:aa:8c:a7:de:
8f:cc:5b:82:44:c9:26:c5:21:9d:11:ed:cf:28:88:
62:cf:5b:a5:0d:9a:c0:5e:4a:4a:53:3d:85:62:a3:
8e:0f:73:8c:e3:d7:d7:bf:0d:35:83:f0:ce:cc:cd:
d1:c9:79:58:54:fb:52:fe:74:1f:43:eb:40:26:2e:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3B:6A:81:BB:F4:B9:7D:DC:7E:7C:4C:19:3B:1C:50:80:D3:E9:3A
X509v3 Authority Key Identifier:
keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:05:a1:86:f7:ed:17:f3:15:e0:03:8d:33:c2:fa:31:12:
5b:b2:f1:b1:77:40:03:3d:64:17:df:ed:4c:cc:44:07:48:f5:
07:b6:d8:20:ad:e3:05:be:ab:b7:78:b2:e5:eb:08:e3:33:1c:
e6:06:13:b5:70:1e:7e:08:1e:75:25:eb:c5:ec:ac:8b:2c:8d:
a2:ae:5c:11:81:a3:f1:97:b9:a0:db:5e:0f:fc:ea:4d:4e:03:
b9:12:7b:f3:15:f0:ad:39:e8:b5:06:0e:4d:d6:02:62:97:20:
88:70:e3:3c:47:8d:14:b3:1f:41:3f:3a:27:af:3f:f4:11:16:
52:aa:e4:97:4c:7a:af:7b:e1:9d:51:3a:87:bc:2b:5a:2c:7e:
d3:5a:45:9d:d6:61:48:c4:f9:b2:a5:b4:bf:a6:55:ad:95:2e:
40:ad:cd:d3:db:19:0d:6c:74:f9:a7:85:c6:ee:41:d6:a5:9e:
5a:a6:2f:dc:e4:ec:d7:6d:40:eb:e8:df:36:45:32:4f:28:d8:
4f:e7:68:e9:04:ee:6d:64:77:ed:d9:ff:e3:d3:ac:f4:aa:42:
a8:e8:6f:8d:21:b5:e1:a7:1f:21:df:4d:b3:42:e8:b6:c8:62:
ca:a4:8f:73:4c:26:0c:bc:12:3d:23:56:55:c9:26:8f:8c:78:
f9:63:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:06 2026 by rpki-client