
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier: zG7d8+b3cAnKwNjm5s4Q0dYOgC51yuzHpUWuPTLa3ho=
Subject key identifier: CF:A6:6F:44:E7:4A:A4:B8:89:D2:67:FF:2E:31:6A:51:3B:D1:4E:34
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number: 089D
Signing time: Sun 04 Oct 2026 23:01:05 +0000
Manifest this update: Sun 04 Oct 2026 23:01:05 +0000
Manifest next update: Sun 11 Oct 2026 23:01:05 +0000
Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: f4B9Hu/CiwB5vKcRX7xpssoFVC+KvCDRRvH+AJ+0/D8=)
2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: q8TmdXzDI+kRS9ckU02MC/ivGlamdxtAYJvwAi6SQG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Oct 4 23:01:05 2026 GMT
Not After : Oct 11 23:01:05 2026 GMT
Subject: CN=6ac2dab1-4468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e6:68:48:49:41:a7:01:38:7a:6f:55:4e:c9:
6b:4a:76:df:f6:c1:e9:5a:0f:59:32:ef:fd:99:b3:
c8:2b:6b:6d:8f:a6:f5:f9:3b:bc:9b:eb:2f:ab:2a:
fc:67:ed:a8:33:1a:4c:c7:dd:7b:b0:5d:6c:88:13:
53:97:e5:ad:2f:71:3b:73:f1:55:76:b4:ea:e2:1e:
0d:9e:bb:54:f7:f5:2b:a4:f3:33:d6:5e:62:75:69:
ef:be:42:89:e5:62:9f:73:56:76:a3:c1:98:72:78:
3d:20:e6:12:fa:37:48:a4:84:e0:bb:47:50:7c:a1:
60:b7:89:cd:90:f3:a8:16:d0:9a:90:b1:34:1c:df:
bc:19:1b:d1:cc:06:a2:c6:23:b0:52:df:88:f5:9e:
66:c7:62:fd:88:6a:22:44:07:6e:7f:8b:9b:a2:fc:
1d:ba:f5:ba:0f:a6:b5:d3:98:6a:37:d0:1b:8a:be:
3d:bb:a4:1c:a9:c6:1c:b1:cc:99:26:cb:c2:ea:64:
6a:5e:d1:b1:67:9b:1d:f3:2e:9d:a5:54:0a:8d:98:
48:a4:e3:64:1c:07:1c:99:76:94:27:5d:e8:c2:6a:
30:4f:eb:6a:f1:ea:9f:38:88:1e:1e:44:33:98:c1:
d4:7a:30:19:d5:17:d3:7f:01:72:fa:02:aa:d2:98:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A6:6F:44:E7:4A:A4:B8:89:D2:67:FF:2E:31:6A:51:3B:D1:4E:34
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:e8:0a:7d:95:cc:b1:dc:e4:5b:84:b3:80:cf:78:da:f1:
28:b6:93:da:ac:70:ba:83:d8:3e:43:8a:e1:7c:ce:31:64:39:
ee:da:43:8e:c6:27:17:6d:a0:29:0a:f1:38:d9:75:49:8d:35:
eb:31:5b:52:6a:d3:b6:52:90:07:57:24:06:e0:a7:58:5a:46:
fe:af:e3:48:dd:f6:7e:30:70:5e:62:26:58:0d:a0:b1:34:39:
42:e8:91:2d:66:aa:51:d6:c9:ab:17:d3:f5:1b:94:9f:8b:c6:
75:7b:67:1c:19:9d:f2:90:9d:1a:c7:c3:e1:ef:16:4c:cc:e5:
fd:1e:0e:3f:82:61:65:cb:f2:86:09:67:2d:7e:98:a7:84:fd:
c1:2a:b6:b4:fb:52:43:56:69:55:5f:f1:69:83:65:95:9b:6e:
26:f1:bf:9f:5c:29:21:e5:a7:f0:58:ad:7c:7b:cb:19:f0:6a:
67:2f:19:c8:d4:38:14:4d:9b:fb:58:26:da:c3:27:49:03:e7:
c4:e2:c8:c8:b7:82:4a:70:11:25:c3:ee:c1:f9:22:2b:04:64:
ef:e7:85:48:21:a3:48:43:d0:40:64:a7:b8:88:36:6e:f8:5f:
4b:d9:4b:f4:3e:a5:41:6d:52:09:f6:df:07:bf:e7:83:cc:6d:
e7:23:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:19:15 2026 by rpki-client