
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier: t1Gyt8JbKnvW8t5gHvm7/aIqYO9spg8BAW2JasIxBvA=
Subject key identifier: 2A:77:93:CC:19:FE:74:76:87:FB:87:5D:73:C6:F1:5C:63:6F:19:C9
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number: 018A
Signing time: Fri 27 Mar 2026 03:56:04 +0000
Manifest this update: Fri 27 Mar 2026 03:56:03 +0000
Manifest next update: Fri 03 Apr 2026 03:56:03 +0000
Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: Uhpc/cmufSeZxhJ/Ovo4LQF8BRp2I/I4STA95nvCzWw=)
2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: iG/FIqaT6KtwO+xKsXOo+peJz09fYygQm2FEIezx1zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: Mar 27 03:56:03 2026 GMT
Not After : Apr 3 03:56:03 2026 GMT
Subject: CN=69c5ffd3-1e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:f8:19:8f:05:1b:1f:b0:1f:91:49:63:83:
a9:94:2d:bb:9c:82:49:4b:b1:37:df:8a:4d:5b:81:
b7:d5:c0:e2:0d:d5:c1:64:f4:09:c3:58:18:a4:21:
6a:f2:f5:c7:45:a8:26:81:11:16:69:b0:d5:b3:c9:
73:66:96:44:83:26:77:27:29:4b:46:64:4d:f7:30:
50:d8:52:d8:34:27:c2:b1:80:57:92:c3:57:c4:3a:
d9:81:e8:05:ee:b3:cd:81:05:e6:e9:46:64:07:83:
5b:cb:63:68:79:0b:47:ad:d1:4f:3b:e6:32:d9:28:
af:d2:2f:63:75:7f:0c:ca:9f:90:92:44:c5:bf:84:
da:38:ce:d6:c6:fc:5d:f3:66:fe:dd:89:fc:4a:70:
64:e6:9b:2b:cd:4d:82:b9:ab:3a:be:05:4c:84:5b:
bb:0e:7c:1c:43:57:7b:13:41:84:a4:23:1b:0e:8b:
3a:79:53:4f:13:77:64:50:a1:81:0c:83:c3:fb:ac:
67:6f:ae:12:c2:18:20:7f:99:2d:8b:c6:6f:5a:ac:
12:b6:c1:eb:28:6c:1b:e2:1e:63:f2:fe:f6:9c:79:
5c:26:99:fb:fb:15:21:71:0c:68:35:87:8e:bb:e7:
d8:81:29:1b:16:b9:ca:c3:8e:62:99:69:46:68:7d:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:93:CC:19:FE:74:76:87:FB:87:5D:73:C6:F1:5C:63:6F:19:C9
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:60:75:e7:e3:50:73:c4:9a:75:99:85:d7:7b:6d:e9:af:
cc:37:87:08:96:3e:24:ce:bb:4f:81:56:a9:65:31:81:eb:b6:
78:ef:20:16:46:60:35:84:55:45:09:88:92:27:8b:e0:d4:a2:
dc:a5:23:5f:9a:6e:ef:4c:bc:3b:f3:f9:89:a0:a4:21:b2:d6:
13:9f:44:19:7e:90:0e:c3:f9:a1:25:cf:fb:dd:a5:23:f1:d8:
9b:2e:87:d8:d7:f5:6f:ee:f1:fd:b0:85:51:22:91:fe:41:03:
e4:84:33:8c:ef:bb:c9:d4:0b:5e:cc:ac:9f:1f:88:8d:7e:30:
e5:50:93:76:73:5a:40:08:bb:60:b2:d3:8e:55:67:e0:a6:d0:
23:31:74:84:23:9a:ca:60:09:70:63:76:15:f8:fc:3a:6e:1a:
31:da:e8:fc:bd:06:e5:e5:a2:cd:08:ec:1c:90:46:cc:fb:93:
23:a6:d3:dd:e6:7a:57:39:89:5d:54:21:9a:28:0a:7f:fb:0a:
79:80:86:65:20:97:ec:bf:86:5a:c8:dc:98:85:a1:39:0a:da:
47:b2:8a:db:17:df:c2:08:90:60:70:a0:c3:67:03:fa:1a:24:
72:37:d8:17:d9:83:44:db:7b:90:55:bf:8e:f2:27:11:b5:83:
ae:43:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:51:37 2026 by rpki-client