
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
File: vDUKYanj3h4eWJC-0L6KhxJP3LE.mft (raw, json)
Hash identifier: QJU847SuHl5o8PDjYJQoC3k4SshqPpnFsLGK3VwYPJ4=
Subject key identifier: B4:22:80:D0:5E:98:D7:5C:2E:BC:64:48:E2:E7:D6:2A:B1:D9:F2:E2
Authority key identifier: BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
Certificate issuer: /CN=A91FC3D0/serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
Manifest number: 21
Signing time: Thu 23 Jul 2026 10:56:42 +0000
Manifest this update: Thu 23 Jul 2026 10:56:42 +0000
Manifest next update: Thu 30 Jul 2026 10:56:42 +0000
Files and hashes: 1: vDUKYanj3h4eWJC-0L6KhxJP3LE.crl (hash: /G9FKmcKQLbrQsDXpBU7ZSfJzsPaApke6stMIKj9yAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl
rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
Validity
Not Before: Jul 23 10:56:42 2026 GMT
Not After : Jul 30 10:56:42 2026 GMT
Subject: CN=6a61f36a-5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:4f:72:7c:90:c5:c0:fc:b1:d5:14:3f:a4:
45:35:bf:b6:0e:5c:73:2f:f8:9b:09:dc:a9:5f:41:
7a:80:46:08:3f:cc:40:6e:30:56:d4:42:9c:17:fa:
6f:92:1a:5f:20:34:bd:17:5d:02:25:92:a2:9e:c5:
5f:12:50:1d:05:52:53:43:a7:28:c2:6c:c7:91:01:
3f:df:d9:01:47:05:92:79:f5:29:c3:e8:cd:61:0e:
c3:4b:19:5a:13:cf:8b:07:78:14:df:53:a2:79:3a:
f0:99:94:59:ea:85:29:67:25:81:8d:7a:1f:6c:c3:
07:52:53:81:e7:61:43:46:47:19:fd:c4:f4:10:0d:
fb:c5:e6:5e:e8:c0:fa:bf:a2:79:1e:13:72:d1:4c:
58:6d:91:66:bd:90:67:27:67:b8:83:9e:65:27:88:
e1:61:97:e8:54:91:b0:2e:6a:25:43:88:64:d6:f9:
b4:a2:a9:75:b4:12:3e:18:31:76:e0:ac:9b:d5:39:
ce:d1:26:bb:01:07:b4:72:98:a5:d5:a7:11:21:32:
eb:12:f4:c7:22:c3:b2:14:8b:49:e0:8c:cc:14:22:
e6:1f:a1:f2:f4:9c:df:11:14:90:cb:39:11:99:33:
d0:67:91:28:87:60:4b:30:73:e7:0d:7b:10:f3:a4:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:80:D0:5E:98:D7:5C:2E:BC:64:48:E2:E7:D6:2A:B1:D9:F2:E2
X509v3 Authority Key Identifier:
keyid:BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:6a:e2:3c:65:e8:0b:15:8b:44:0e:7c:fc:e5:02:ce:e6:15:
2e:94:67:99:9f:b0:aa:53:3c:09:24:58:0c:bc:c3:ac:80:a6:
84:6d:b3:15:94:bd:3e:a2:90:2e:3a:7b:33:c1:3c:2e:0b:bc:
53:d3:09:6c:f2:4a:6e:85:0e:ab:84:6b:42:a2:99:44:bf:aa:
14:dc:52:ac:98:de:3d:b7:ab:1a:35:74:f9:b2:23:35:61:52:
25:ac:5b:f6:e4:6b:d0:37:15:6b:bb:18:ec:5c:e8:51:a3:e8:
b5:2d:0e:d6:01:2a:9e:9f:d8:42:6a:b8:73:af:b6:25:8a:93:
31:21:68:e4:07:1a:12:87:2b:b6:96:8f:b0:29:2b:31:fb:05:
b1:15:88:ae:bc:de:b6:5b:89:55:9f:b3:ee:f0:86:6c:58:9c:
e1:e6:5c:8d:8f:92:a5:8f:a0:d9:29:13:07:f8:40:17:84:fc:
ba:dd:d8:b3:a6:55:dd:00:08:57:df:dc:a6:c4:fd:9f:95:a9:
a2:62:a1:48:8a:a5:e4:a8:74:4a:20:be:7a:69:a2:76:5a:6e:
72:0d:83:b6:d9:e0:8e:3c:74:08:73:b9:62:68:0a:92:82:23:
e6:18:ee:7d:b5:59:7f:a6:79:d0:97:e2:a2:4d:d0:e3:1b:e3:
29:7d:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:22 2026 by rpki-client