
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
File: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json)
Hash identifier: 6Y0G4oiAGSvFFymQox6yJUi/Et/kdl3BPCXlBmaHwqY=
Subject key identifier: 9A:6A:55:21:E2:16:AD:C0:A0:00:AF:3D:A5:4D:82:24:83:4D:B8:E5
Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
Certificate issuer: /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
Manifest number: 1C
Signing time: Mon 11 May 2026 09:09:00 +0000
Manifest this update: Mon 11 May 2026 09:08:59 +0000
Manifest next update: Mon 18 May 2026 09:08:59 +0000
Files and hashes: 1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: gRM2bJ8WnIkQ8oVRvEK2vO3NOrTxUBOirnaBe1KmMLc=)
2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: NdD/6yvqSj682GK/GjA29aCmHzw6OXoNpRKURJCciB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Validity
Not Before: May 11 09:08:59 2026 GMT
Not After : May 18 09:08:59 2026 GMT
Subject: CN=6a019cac-3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:03:63:23:11:17:94:ba:26:d3:93:81:81:
d5:c4:48:54:76:e1:2a:e6:2e:00:05:89:9a:39:90:
d3:27:dd:84:81:62:61:ae:b6:0a:9f:12:87:57:70:
fe:7b:fd:8d:88:b1:ca:1a:2d:01:b3:ee:39:3c:21:
aa:36:4a:2f:84:c3:8e:11:bd:6d:7a:31:90:21:5f:
67:02:94:3c:90:60:eb:e3:b7:62:2a:a3:e5:6c:a1:
3c:77:f7:0e:6f:6d:e2:62:65:70:02:36:52:14:65:
6c:f9:d5:a0:d6:4d:d7:bb:87:cc:5a:6a:97:c5:fd:
86:18:2c:88:07:9c:4b:18:ab:be:5e:ab:b4:54:9e:
17:ba:7c:9c:77:cd:d4:ab:71:9b:b8:71:e4:91:41:
15:ac:c2:94:96:1d:76:ec:03:7f:d6:92:ea:9a:28:
98:c5:70:c0:14:10:ad:65:22:71:cb:1c:d9:ad:20:
db:a3:4d:a5:fe:ac:ae:ce:18:83:12:63:b1:0c:38:
a2:43:c8:81:27:36:e9:72:72:91:32:1a:e8:33:d5:
39:39:b9:97:ee:42:11:73:15:21:73:e4:4e:37:ea:
5f:53:d3:d1:72:4b:2d:eb:e2:17:a1:11:ed:b5:9f:
df:67:ef:c2:87:1d:98:a1:f7:3d:87:f6:7e:1b:2e:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:55:21:E2:16:AD:C0:A0:00:AF:3D:A5:4D:82:24:83:4D:B8:E5
X509v3 Authority Key Identifier:
keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:b0:02:f6:be:35:41:ae:40:a3:59:6b:00:da:ee:64:dc:
cb:97:8e:b5:15:43:96:de:d7:65:7e:ed:8b:45:e4:ca:ec:57:
d0:a4:78:b6:cc:53:a7:8e:45:3a:b3:82:5e:68:b6:87:65:54:
3b:65:44:bc:a5:d9:e4:f8:f0:04:3e:f4:50:e5:89:2a:64:35:
2c:cd:6f:5d:5e:46:a6:f0:c7:fc:ce:a7:0c:8c:a1:3b:01:73:
c3:ac:40:6e:7d:da:fe:00:20:c1:5c:3e:42:e1:bd:26:a4:1a:
94:f6:04:e3:d5:2e:b3:36:c2:7e:6c:8a:8c:85:a9:6e:be:39:
70:c0:eb:9e:50:81:ae:9d:8f:27:34:05:ee:ad:99:5a:88:b7:
33:e9:4b:3d:cf:e5:82:47:99:08:45:e3:d8:92:d7:b1:7b:6a:
c5:c2:c2:b7:f9:cc:4d:c0:bf:52:54:e7:70:ff:b9:92:13:2c:
fc:07:11:97:e4:08:fa:3c:4e:11:c6:56:37:06:61:d5:17:ac:
86:62:58:1f:7d:ad:b7:81:51:d2:a3:6b:7b:f2:14:ce:d4:98:
fe:3f:67:91:3c:af:89:9c:cd:df:4a:b9:0e:88:f3:81:c0:6b:
9f:a8:da:5d:51:1d:20:25:96:41:cf:17:b6:ef:25:38:04:18:
a7:27:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:33 2026 by rpki-client