
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier: juYV/4+YZwusDv1m/T1PklrjlDHF3MlwLbbLcLAMMBY=
Subject key identifier: 73:DF:D2:00:9D:F7:F4:F5:18:35:7A:A9:2F:A7:50:AA:CA:A3:DE:21
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number: F9
Signing time: Sat 03 Oct 2026 07:00:00 +0000
Manifest this update: Sat 03 Oct 2026 06:59:59 +0000
Manifest next update: Sat 10 Oct 2026 06:59:59 +0000
Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: oqOnH8V+GAykQkGdfo+OGSvuwK8aSIDcnA+QnN115BQ=)
2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Validity
Not Before: Oct 3 06:59:59 2026 GMT
Not After : Oct 10 06:59:59 2026 GMT
Subject: CN=6ac0a7ef-b0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:a5:79:9d:ce:ab:94:e5:08:7c:bd:5c:fb:
14:5a:84:30:a8:2f:51:8d:7c:80:c1:2c:e0:9c:d0:
e8:aa:b5:05:d6:6a:f7:af:cd:8e:85:e7:ac:d7:dc:
1a:a0:bb:41:c1:6a:aa:5f:20:fe:db:9f:8e:6f:34:
0a:f6:b7:02:a8:a0:ea:d5:ad:40:d9:af:f4:4a:d0:
1a:19:8c:1f:9a:91:18:b3:4b:c2:af:21:0b:0c:0d:
79:cc:24:3e:48:52:ce:1e:23:79:5f:76:60:ee:ac:
45:ed:13:06:e3:7c:c6:94:19:4a:af:32:c5:b2:65:
7a:6e:8c:fa:0b:c2:70:ca:94:5f:43:a9:4c:3b:8c:
a2:e7:fb:f5:30:18:1b:0f:65:fd:fd:cd:74:96:ff:
94:36:f4:f1:98:2f:46:47:94:33:65:ca:14:d9:76:
a5:5c:09:7c:84:02:cb:82:b0:f1:bf:5f:83:ff:f2:
82:bd:61:ad:22:53:bb:51:53:9d:d4:8a:62:cc:3d:
3c:5a:a0:fe:fb:3e:f3:7b:3b:c8:bf:15:03:4c:90:
d7:4b:8b:32:e5:c6:75:47:1a:11:a7:66:72:43:10:
ed:3f:21:7a:ec:9e:61:5d:2a:69:4f:8e:7a:b7:33:
c2:22:18:ec:59:e0:29:dc:65:c7:2e:bf:50:ca:f9:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:D2:00:9D:F7:F4:F5:18:35:7A:A9:2F:A7:50:AA:CA:A3:DE:21
X509v3 Authority Key Identifier:
keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:4e:a3:26:5a:6f:8d:f0:43:c2:5e:28:55:aa:43:c5:35:
1b:bd:5e:53:03:31:cf:61:f3:76:5b:36:b2:60:24:8d:a0:e8:
d7:74:41:d7:ac:cd:9d:6b:18:d7:d0:21:c9:72:9c:ee:aa:c3:
58:98:61:c1:46:f0:4e:75:5e:da:75:99:e9:82:55:8a:4f:d0:
12:79:0f:2d:05:08:bf:9b:3c:7c:bd:94:8e:19:2e:62:46:34:
d9:40:ef:bb:94:e5:9a:0f:5a:d5:cf:dd:b6:00:16:f3:58:50:
94:e0:3c:73:af:ee:27:53:b2:f9:a6:6f:c0:f6:f7:7e:70:d3:
f4:5f:3b:ed:e4:c5:f7:50:61:39:e5:c5:a4:76:9c:6a:8b:12:
17:6e:d1:84:fe:c3:a8:11:43:38:29:3d:1f:3e:90:c8:65:7b:
5a:03:d4:ed:ba:43:99:c0:ad:83:36:ec:b6:08:7e:d8:a4:ef:
23:4c:c6:a6:1f:5a:0c:2e:01:a8:c4:d0:3f:d0:b8:44:3d:4c:
5f:7a:18:12:48:dc:c3:37:e4:86:a8:87:77:f4:ba:cc:0c:47:
0c:3d:11:82:26:34:5f:16:3f:22:7f:f1:64:fb:39:b1:ad:8c:
47:41:d5:0d:7e:fd:60:a8:2d:67:62:88:5a:da:92:b8:25:49:
fe:a1:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:43:40 2026 by rpki-client