
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier: HIKZpEf4VXB+SixW/4tGQhEm5awSYASRZGzV3NPQV58=
Subject key identifier: 8D:52:12:8E:62:74:5F:64:99:CC:3C:A7:9A:20:E8:2C:4E:52:4C:E2
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number: 01C7
Signing time: Thu 23 Jul 2026 05:09:32 +0000
Manifest this update: Thu 23 Jul 2026 05:09:31 +0000
Manifest next update: Thu 30 Jul 2026 05:09:31 +0000
Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: NYEGD/wSPKvek077Tt5aFhgHIHkZzb3E7K0KOysVeOE=)
2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 05ZHy6hO3wsV4N6+mrX/VlbtT5elT4sh4fwh+jsjFMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: Jul 23 05:09:31 2026 GMT
Not After : Jul 30 05:09:31 2026 GMT
Subject: CN=6a61a20c-c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:7a:c2:3f:4f:51:25:9a:c3:25:3c:73:5c:
3e:6d:cd:af:21:a7:9c:c7:0f:ff:eb:e6:61:65:d5:
6a:30:af:2b:83:9f:92:2a:c8:68:ed:4f:73:11:82:
07:a2:18:5b:cb:ea:d1:54:e3:e0:bc:74:5f:1d:f7:
7a:cf:f8:45:c3:ae:4c:0d:8a:00:cf:2c:36:39:2c:
7f:00:0a:da:19:0e:b3:c4:b8:08:b0:b0:6a:30:46:
9e:02:ef:58:a0:b7:d6:99:06:94:55:57:eb:9c:bd:
90:43:9d:9a:42:ea:a4:12:f7:a2:03:66:48:ba:9e:
c6:b2:d9:0b:aa:1d:95:43:83:20:72:4f:84:77:4f:
dd:23:32:fe:53:bd:31:31:de:e7:63:1a:22:74:80:
e1:88:35:87:b3:ab:d4:cd:dd:a6:b0:76:5d:de:c1:
57:ee:55:3d:5e:2f:90:b7:72:ee:da:8a:b1:f1:55:
7d:48:50:a0:94:f3:70:9e:3c:1f:47:4c:ad:b1:2f:
a2:56:6d:00:bc:ae:01:e1:05:f2:54:d2:25:51:78:
8c:30:de:b2:28:e8:a5:1a:30:d7:7d:46:a3:c9:41:
dc:76:ba:eb:0a:24:7c:8a:47:0c:ff:a0:f7:c7:e1:
31:53:75:5d:9e:61:77:cd:2c:45:67:50:59:cf:2f:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:52:12:8E:62:74:5F:64:99:CC:3C:A7:9A:20:E8:2C:4E:52:4C:E2
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ed:3f:c8:f9:eb:e2:4b:77:1b:3c:fd:a0:9d:e1:a6:0a:a9:
29:b0:d8:01:db:16:31:42:ec:0f:dd:fc:7e:27:53:df:cd:74:
1c:b5:95:75:e3:96:2d:cc:9d:ca:98:3a:c9:66:5c:79:e3:6e:
a2:28:41:f4:b9:b4:09:89:5d:40:27:2a:0f:99:09:d6:a8:5b:
62:cc:ac:b5:da:69:61:ed:7b:78:c4:00:d3:6a:3c:e9:87:a7:
fe:17:9f:78:2b:91:a7:11:78:71:b2:d5:83:f7:09:ce:90:72:
6b:a5:30:37:e6:20:e0:94:22:3c:db:60:50:cc:20:af:32:50:
97:4c:b1:7c:89:de:75:b5:07:8b:2d:60:2d:4d:d3:b5:4e:34:
8e:2c:b0:c1:eb:e9:c8:cb:59:45:23:ed:17:bd:b8:a1:b5:27:
6a:56:0a:7f:6b:a8:d3:59:f0:1c:23:e5:24:cd:b4:67:33:cf:
b4:b7:61:19:cc:71:d2:ed:02:f4:24:6f:ac:ed:86:56:71:ce:
eb:3a:08:da:f1:ac:5b:60:22:41:7a:80:9d:8e:cb:33:67:b1:
44:f6:37:26:ce:9a:52:6b:78:42:ff:e8:f6:02:b9:03:63:f7:
f2:5e:94:84:4f:19:5b:7c:08:70:ba:b2:84:3b:25:37:22:01:
b1:4d:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:00 2026 by rpki-client