
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier: xbGouq0hROFImRj1crUNnm2VBjSy8I3g8hht1+VUUPc=
Subject key identifier: 3D:09:8F:D9:13:22:6B:6B:B4:B0:FF:3B:F0:B5:6A:85:17:FE:7D:09
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 05FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number: 05E6
Signing time: Tue 24 Mar 2026 22:41:18 +0000
Manifest this update: Tue 24 Mar 2026 22:41:18 +0000
Manifest next update: Tue 31 Mar 2026 22:41:18 +0000
Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: h9xVjtZBQ5SwFp8EklqAZHmfMQkjFW1joG/d6m5SErU=)
2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=)
3: EE99A422139111F1BDC8075D3B3D8C67.roa (hash: 12f6EfI1i+dU5oUXg6t+6gD1txmwBSRiv2UbFpsTXu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Validity
Not Before: Mar 24 22:41:18 2026 GMT
Not After : Mar 31 22:41:18 2026 GMT
Subject: CN=69c3130e-cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:f0:a8:8f:17:32:56:32:75:74:4f:38:d6:
e2:f1:d0:79:b9:bf:3a:1f:fc:fb:9c:de:89:59:ef:
0f:3f:19:33:7d:3b:a9:4e:11:72:38:14:f1:7a:e2:
df:61:16:51:55:fb:b1:74:9f:68:24:5c:86:e6:1d:
07:1d:2c:34:9f:bf:7f:87:a4:52:87:cd:9d:bb:fc:
2d:77:44:1e:1a:49:29:6c:31:a7:d5:ff:75:99:22:
d7:65:5e:1e:f2:13:22:cc:83:54:de:45:87:26:c3:
4f:82:55:cb:2b:0f:5d:03:4b:01:20:8d:00:af:fd:
34:18:04:29:91:e6:87:67:ce:b5:00:16:8e:88:a7:
d5:08:ba:3a:6d:d5:ed:d2:87:cf:ac:71:b9:4d:01:
07:86:ef:94:b4:a6:11:75:ff:39:d0:d5:3e:12:55:
69:0c:1c:5b:da:15:6a:f9:7e:60:a4:a5:60:00:32:
e2:80:a6:e5:a5:f3:e4:88:0c:57:e3:79:89:a9:68:
5e:51:0a:37:7f:60:bf:c9:23:43:98:3a:2c:fb:bb:
1f:65:62:9f:c6:a7:18:90:cc:83:50:1e:c1:50:19:
ba:42:73:a9:45:b3:33:49:0f:7c:cc:25:2a:c2:5c:
e6:5c:75:5a:cf:62:f5:38:85:34:9d:b8:e1:34:3b:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:8F:D9:13:22:6B:6B:B4:B0:FF:3B:F0:B5:6A:85:17:FE:7D:09
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:d2:f2:2d:4a:59:e0:12:7e:67:a7:65:48:ae:ce:50:68:
5f:81:7f:be:01:12:ae:89:67:dd:8b:41:b7:12:48:ab:b7:b3:
73:d9:25:59:59:cc:78:d2:55:97:f0:db:21:e9:68:62:ed:eb:
6c:84:46:58:ab:82:db:b0:ce:f4:1e:7c:29:13:7d:d9:a3:b4:
cb:ce:b5:a4:c0:a7:df:1f:e8:d9:3f:a6:01:ab:24:42:8f:8e:
01:92:99:04:6b:85:9d:2d:1b:66:61:1d:6f:87:0a:44:5b:bb:
91:47:59:26:ce:d3:68:8a:cb:bc:d7:cc:e0:28:94:53:57:8a:
72:27:a2:0d:d4:12:48:a9:0a:c8:f9:ed:c1:91:32:53:22:32:
88:24:25:e8:d0:2b:16:56:0d:6a:e3:78:b3:78:df:2a:4d:f1:
7e:fb:76:9e:f9:bc:32:f0:fc:37:3a:95:8b:3c:e6:49:fc:4d:
3c:18:94:5d:fb:3d:30:8e:b5:52:e9:32:43:28:96:85:7c:82:
28:42:f9:e9:f1:95:53:ec:d0:73:f9:18:68:6d:55:6a:54:6b:
8e:61:d9:dd:e1:ed:82:e8:30:64:ec:ff:94:71:8c:43:e2:5c:
0d:82:99:f0:c3:ce:66:65:66:2d:90:68:b1:68:6e:52:d1:19:
f7:43:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:55 2026 by rpki-client