
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
File: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json)
Hash identifier: G/tfEWqQCmwwovLNkJkyufI0HZV7S/kBObU/rC2G0oA=
Subject key identifier: 0D:DE:CD:D4:B5:0B:A2:98:98:69:51:8A:26:4A:F7:B3:18:A4:EE:DE
Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
Certificate issuer: /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
Manifest number: 04
Signing time: Fri 27 Mar 2026 08:48:32 +0000
Manifest this update: Fri 27 Mar 2026 08:48:32 +0000
Manifest next update: Fri 03 Apr 2026 08:48:32 +0000
Files and hashes: 1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: ouaNgK3Xn1H4+wtYip94qDcyUZrzDkh16k4djTyL+08=)
2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: aVk5ZwfUy/pOCzqQnIGlE5CsRTH7ieZRP+rktUubD1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Validity
Not Before: Mar 27 08:48:32 2026 GMT
Not After : Apr 3 08:48:32 2026 GMT
Subject: CN=69c64460-440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:ef:da:f8:15:3b:e7:a7:6f:c3:30:92:99:
1f:d6:ab:3f:7f:09:7f:d4:b2:b1:4b:e5:72:74:aa:
67:28:c0:f4:f0:c6:c3:63:9c:c0:0f:6c:1d:52:7b:
5c:92:c3:6f:6d:34:bc:c4:81:e5:7c:25:b6:a5:25:
94:b7:17:b5:dc:79:39:99:e1:a2:60:23:d5:3b:78:
f7:91:d3:7d:a7:75:28:b7:ec:f7:73:50:1e:6f:97:
90:3e:4d:46:be:2e:ea:ee:d5:39:c4:31:56:30:f0:
82:83:60:e0:fb:52:64:8c:8d:f4:30:35:4f:30:73:
af:d3:f4:fc:a1:c0:1b:8a:1f:b0:46:78:43:1f:62:
ef:76:e8:73:b6:c0:3a:0a:96:49:c3:06:63:04:a9:
e2:98:11:5e:08:d7:42:14:2d:53:d5:20:1e:84:8c:
79:87:ba:4e:12:72:e8:35:98:e2:aa:12:82:18:18:
fb:4b:2f:c6:de:12:aa:d5:80:2b:66:ca:d7:4f:60:
50:ed:91:eb:2b:fc:45:d7:2c:72:37:2b:46:f7:73:
04:d8:08:4a:30:3d:0e:2a:e2:4e:16:d7:5d:ae:49:
5a:00:16:0d:a9:92:77:07:f1:2d:81:d4:f8:f4:22:
e4:b4:3a:c5:b6:96:c9:a2:a7:c8:06:6e:9d:6c:d0:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DE:CD:D4:B5:0B:A2:98:98:69:51:8A:26:4A:F7:B3:18:A4:EE:DE
X509v3 Authority Key Identifier:
keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cb:69:41:7a:98:9a:ce:29:b9:d7:8f:ad:52:2a:ce:23:50:
16:1e:4e:d1:10:08:ee:6c:3a:c3:4b:76:fc:12:60:75:94:c5:
9f:73:ed:c4:10:a6:44:08:d9:9e:3d:5e:e1:55:26:a2:79:c3:
43:c6:bf:2f:4a:12:86:82:a2:5e:e2:14:04:7e:f7:2c:85:a6:
af:39:ed:20:79:56:fe:02:c8:d0:39:f7:52:59:14:72:81:2d:
bf:8b:57:ff:c1:64:32:1e:5c:45:c5:cc:39:3c:79:ee:76:26:
57:f2:37:1b:b7:5d:43:46:18:ca:89:ee:56:bc:10:b2:53:a2:
ef:b6:77:89:02:88:79:23:d4:e4:80:10:f9:c0:a7:a8:4e:f9:
35:5d:a2:e2:2f:8b:2f:8c:c3:5f:6e:98:0d:03:11:dd:2f:f5:
44:51:7b:d7:78:6d:1a:3f:bb:8a:99:4a:86:ce:89:41:17:f2:
28:80:9f:d6:29:6b:62:24:37:bd:23:3b:5b:02:5a:42:a7:86:
6c:c7:68:38:36:d5:4b:4b:ff:47:58:93:b3:0c:5b:6b:d9:1b:
80:a9:a5:75:58:1d:66:ba:52:37:e1:10:ef:a9:12:a9:d8:1d:
97:ba:74:09:d9:f2:0b:70:16:eb:93:e0:db:43:1e:34:c7:78:
10:a5:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:00:05 2026 by rpki-client