
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File: dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier: 5EnjF/4OshrTM0z9or0tE2SbWQ9T5iRYXmunqVgLzBg=
Subject key identifier: 5E:53:F5:9E:41:5D:B3:43:7D:F2:D1:26:9B:97:A6:C6:02:9B:3C:F4
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number: 0804
Signing time: Sat 14 Nov 2026 21:14:45 +0000
Manifest this update: Sat 14 Nov 2026 21:14:44 +0000
Manifest next update: Sat 21 Nov 2026 21:14:44 +0000
Files and hashes: 1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: rgkjRaTZTGKO5NkfzOPCCTVIjye6FzsIz/0ZMFnXPtM=)
2: 3FD07A88D42011F1A733CE073266CEF9.roa (hash: Ih1q3SO1hXYNPJ3MPccYrMA8UbXp9p8yQrtqwXteZSQ=)
3: 068953907C0411F1A78C011690A30FBC.roa (hash: w5YjcHS/MK18ZP9iJMcSrCe3g3iEDBbEXUJzeIg9XZw=)
4: 405C57ECD42011F1A733CE073266CEF9.roa (hash: tAhANf9Z2gnEo8loOzH6VmoXI5yFsDn0EODS/m5WnpM=)
5: 3F2D6C76D42011F1A733CE073266CEF9.roa (hash: OLCBk5USAN8qyFHGrFG9PV43y5dQVVc61sSMw16qYA0=)
6: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: miNX+ihIAMVGdmuQAkCqPB0jM4UCC/1lv8ogOOKBb5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Nov 14 21:14:44 2026 GMT
Not After : Nov 21 21:14:44 2026 GMT
Subject: CN=6af8cf45-cbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:61:77:61:10:67:7e:90:75:cf:d1:19:10:
1e:65:9c:58:fe:dc:a2:8f:4f:58:9e:75:e5:94:46:
33:5f:fc:1a:c7:02:63:e7:44:99:97:69:6f:bd:25:
9a:96:80:33:b1:d4:04:12:4a:7b:96:f2:63:7e:7d:
de:63:f3:76:e1:47:3c:5e:28:2d:f8:ee:c5:db:32:
66:e1:ad:fb:d4:6e:83:a0:44:ef:33:46:2d:eb:38:
13:33:03:f7:3a:0a:ab:32:be:c7:5c:82:38:7c:11:
35:94:51:17:68:a9:68:d2:ab:42:30:2a:94:c6:fd:
cc:34:dc:23:43:75:e4:db:2f:43:be:c4:fe:62:79:
ae:21:e8:31:2e:89:a6:91:0a:9e:c1:32:a3:0c:77:
36:9d:17:20:22:e7:ab:14:86:2a:ab:7b:cf:79:c0:
98:fe:97:45:40:09:e0:96:67:53:c5:be:56:1a:e5:
7d:1d:14:43:eb:31:75:4a:2c:ce:61:23:86:34:5a:
7a:a4:52:be:2a:83:5b:28:d6:d6:66:d5:d6:ab:f4:
41:c6:98:af:58:47:fc:02:8b:5b:8b:13:e4:42:65:
f3:45:77:f6:12:06:db:b7:3d:e2:6d:6b:15:d9:85:
b8:a7:7e:7e:f3:67:6e:25:7e:be:09:ea:2a:99:11:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:F5:9E:41:5D:B3:43:7D:F2:D1:26:9B:97:A6:C6:02:9B:3C:F4
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0d:af:79:63:c7:e6:be:9a:1a:c6:4e:49:e6:54:3f:60:ef:
c6:53:86:be:78:7a:b4:58:e5:bf:cd:21:4b:56:b4:7f:00:29:
3f:46:a7:4f:78:95:f0:a1:5b:fd:ef:d3:a7:b2:7c:10:73:90:
9f:0f:76:df:38:2f:04:25:31:08:ab:a4:2e:6a:77:cf:7c:3e:
83:05:1c:df:c7:fd:ba:df:50:66:09:fe:4d:0b:f4:a9:8f:7f:
7d:a3:fc:4e:24:96:f0:25:a3:3c:6e:c6:c0:af:9c:27:c2:68:
ca:df:60:f3:8f:3d:92:a3:7b:ab:54:ce:10:33:73:22:82:6f:
ab:a5:2e:74:e6:09:40:95:9b:34:b2:64:6b:18:e8:ba:1e:85:
4e:f8:46:fb:e8:f8:98:e6:8b:79:57:fa:e4:1e:74:a0:35:41:
43:1f:f5:4d:77:76:af:3e:af:02:0d:0f:6d:83:94:73:b7:b4:
11:a0:c0:77:e6:a0:dd:b3:3a:bf:09:31:35:c8:4e:38:3a:1a:
f3:7a:32:c1:6b:ea:62:8c:a2:48:66:57:58:24:7a:be:58:3b:
a1:9b:ee:6b:f5:fe:72:c2:70:78:a0:4d:4c:3b:6a:14:a6:fe:
2f:94:6b:da:0b:44:8a:0e:70:ce:36:8a:88:89:8d:7f:df:9f:
ee:24:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:13:51 2026 by rpki-client