
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier: brDSz2xjRaZnCh5cX4nH3mjv0HBIrwLrDVao+b7ejlg=
Subject key identifier: F5:53:AA:C6:C8:25:A2:C0:AF:80:47:F6:6E:FC:F2:BD:E5:C4:D2:96
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number: 01A1
Signing time: Mon 11 May 2026 04:14:43 +0000
Manifest this update: Mon 11 May 2026 04:14:43 +0000
Manifest next update: Mon 18 May 2026 04:14:43 +0000
Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: NLlfYjhYWxPgHa6/AMRGOGYl2SWpayW53Ps6iqhXWZc=)
2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: iG/FIqaT6KtwO+xKsXOo+peJz09fYygQm2FEIezx1zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: May 11 04:14:43 2026 GMT
Not After : May 18 04:14:43 2026 GMT
Subject: CN=6a0157b3-d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:e9:74:41:77:14:c3:9e:17:c4:34:c0:1f:
88:30:ef:31:a7:db:2a:39:d9:97:a7:65:cd:0b:fe:
94:c9:e2:63:59:82:e0:6e:93:77:41:f8:4e:06:c5:
a8:72:85:e1:40:5c:00:46:e9:6c:23:b8:db:09:98:
45:d6:d8:07:a0:d1:de:f9:4d:a2:b0:b0:a3:71:90:
cf:d4:72:e8:4f:fb:79:6d:88:1c:4a:bf:97:7f:4d:
ab:45:d8:c5:a5:ea:5c:72:7d:77:b9:4b:77:51:2a:
d2:3b:de:81:70:5a:c2:66:3b:c5:80:bc:5e:2d:05:
f8:c5:e8:51:c6:e3:84:3c:bb:7e:da:b0:33:62:c4:
93:ab:f6:2a:10:de:0a:e6:b9:09:01:76:66:66:17:
8c:cb:85:51:36:85:ec:2b:12:eb:88:0c:84:d2:1b:
36:84:10:06:a5:10:cd:45:be:12:9a:44:3a:06:72:
7a:4e:0f:66:4d:dc:cd:b3:77:c0:f1:3e:cb:42:6f:
2b:4a:f3:87:16:b7:03:5a:41:d9:57:1b:6c:98:5c:
74:c8:7e:20:2a:c3:04:c0:85:80:c4:72:1b:59:64:
6d:80:91:02:6c:aa:66:71:1b:b2:02:a0:2c:f1:ae:
72:7c:38:91:c2:b1:66:ff:fe:46:bf:38:62:d2:9f:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:AA:C6:C8:25:A2:C0:AF:80:47:F6:6E:FC:F2:BD:E5:C4:D2:96
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b9:4b:95:86:5b:b1:11:b9:8b:99:bc:58:95:2c:44:76:86:
68:ce:85:87:cc:22:43:8d:bc:ea:ae:e4:6c:0c:0c:18:e4:ef:
78:fe:17:85:44:9b:bb:fc:72:f0:12:bd:37:c0:c8:c9:b7:0b:
18:77:98:a6:20:3f:60:c6:14:18:b2:24:c0:35:d5:ca:c0:49:
52:a1:d5:0b:d3:0d:bc:5e:3a:16:50:5e:16:a1:a4:6f:37:a7:
2a:a7:8c:b6:9a:7d:6b:f4:12:d9:8b:e7:e3:bd:70:2b:de:f0:
ba:e5:12:7f:e6:a3:b1:a0:a0:55:e4:d4:37:8f:13:cf:50:23:
68:6d:69:ad:a1:3c:e3:b7:5c:bb:2d:a5:67:c4:10:69:94:c5:
6d:a9:4a:09:8a:31:76:b6:e0:e2:d9:ba:dd:3b:24:4e:e5:08:
bc:1a:91:2f:d7:24:1a:95:88:b9:16:a5:9f:ed:c9:f5:ba:61:
2c:e9:37:85:21:12:14:19:03:2c:11:48:72:0a:27:68:80:b3:
d7:fc:92:33:62:eb:31:7e:4a:c4:fb:e8:7f:00:03:df:eb:9b:
d9:05:0b:14:6b:22:44:7a:dc:36:86:5a:57:02:0c:cc:f3:9d:
b7:19:09:f9:aa:19:02:0f:31:6c:ad:41:c6:c3:cf:2d:82:07:
a0:d7:65:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD
MDg1NDZFMkIwHhcNMjYwNTExMDQxNDQzWhcNMjYwNTE4MDQxNDQzWjAYMRYwFAYD
VQQDEw02YTAxNTdiMy1kMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzzpdEF3FMOeF8Q0wB+IMO8xp9sqOdmXp2XNC/6UyeJjWYLgbpN3QfhOBsWo
coXhQFwARulsI7jbCZhF1tgHoNHe+U2isLCjcZDP1HLoT/t5bYgcSr+Xf02rRdjF
pepccn13uUt3USrSO96BcFrCZjvFgLxeLQX4xehRxuOEPLt+2rAzYsSTq/YqEN4K
5rkJAXZmZheMy4VRNoXsKxLriAyE0hs2hBAGpRDNRb4SmkQ6BnJ6Tg9mTdzNs3fA
8T7LQm8rSvOHFrcDWkHZVxtsmFx0yH4gKsMEwIWAxHIbWWRtgJECbKpmcRuyAqAs
8a5yfDiRwrFm//5Gvzhi0p8tkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVTqsbI
JaLAr4BH9m788r3lxNKWMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF
QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0
R2xYYnIwX0ZBRlRBaFViaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp7lLlYZbsRG5i5m8WJUsRHaGaM6Fh8wiQ4286q7kbAwMGOTveP4XhUSbu/xy
8BK9N8DIybcLGHeYpiA/YMYUGLIkwDXVysBJUqHVC9MNvF46FlBeFqGkbzenKqeM
tpp9a/QS2Yvn471wK97wuuUSf+ajsaCgVeTUN48Tz1AjaG1praE847dcuy2lZ8QQ
aZTFbalKCYoxdrbg4tm63TskTuUIvBqRL9ckGpWIuRaln+3J9bphLOk3hSESFBkD
LBFIcgonaICz1/ySM2LrMX5KxPvofwAD3+ub2QULFGsiRHrcNoZaVwIMzPOdtxkJ
+aoZAg8xbK1BxsPPLYIHoNdlUA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:29:54 2026 by rpki-client