
$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
File: dqSXJWH75So6Zwt4JFETuDvo2AY.mft (raw, json)
Hash identifier: CTzADABjSKWZGdA2pOUXtB2bpFdy1+tigA5QInV3bzI=
Subject key identifier: 87:5D:BC:42:89:8C:1F:46:F7:26:1C:73:A2:40:20:92:D3:60:BF:73
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Certificate issuer: /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
Manifest number: 3A
Signing time: Wed 19 Aug 2026 09:19:20 +0000
Manifest this update: Wed 19 Aug 2026 09:19:19 +0000
Manifest next update: Wed 26 Aug 2026 09:19:19 +0000
Files and hashes: 1: dqSXJWH75So6Zwt4JFETuDvo2AY.crl (hash: DpbC1p8/WLALS5BL0hCqr2K9T1wGe1ex6TR15OA8HJM=)
2: CAB4E520455111F1948CBD49A9833773.roa (hash: YgzxIambRazcLPo5M/vTIgat079etY7a7Ji9ovX3ixs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Validity
Not Before: Aug 19 09:19:19 2026 GMT
Not After : Aug 26 09:19:19 2026 GMT
Subject: CN=6a857518-a786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:f0:18:e7:2e:22:a1:6b:bf:58:01:72:42:
00:3c:09:33:41:aa:86:82:ee:a3:c3:cf:fb:4f:a2:
cd:f3:93:49:07:d7:4d:2c:4d:5b:ee:b5:71:ae:85:
d7:3e:b9:80:0c:1e:77:a2:41:85:9e:b2:02:3d:47:
3e:ae:b3:b1:4f:24:90:a9:2b:36:40:cd:7e:83:ae:
dc:7f:df:51:7d:ff:a1:42:e7:67:05:b3:df:32:84:
af:34:b3:6c:a6:36:c7:c9:e1:99:56:0b:81:2b:c2:
30:58:bf:35:77:b5:5b:f6:2d:0b:69:99:3c:6f:1d:
d2:dc:c8:75:c3:64:0d:9b:dc:98:71:49:eb:9e:b8:
ad:95:29:c9:87:46:38:66:d9:cc:f8:61:1b:b3:22:
7e:a3:85:a1:08:46:4f:ce:d5:1e:69:f4:06:ba:aa:
4f:ab:00:09:b3:3e:2b:a2:e6:a5:1c:b9:80:b8:df:
d1:d3:2c:13:4b:f9:53:de:6f:07:c2:47:82:1b:5f:
42:3a:a9:ae:cf:d8:44:51:3e:cc:7e:5f:a5:58:c1:
ce:c4:58:45:a8:4c:95:b1:d4:44:a1:e0:1a:20:64:
6f:27:1f:e4:08:c7:c2:dd:4a:c2:b6:67:37:e9:ed:
80:86:1b:3e:f8:27:5a:c0:4c:f4:fb:95:cc:2f:e2:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:BC:42:89:8C:1F:46:F7:26:1C:73:A2:40:20:92:D3:60:BF:73
X509v3 Authority Key Identifier:
keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ff:b8:c6:ed:e4:e6:f1:f5:d1:8c:7e:c8:de:c2:48:bc:7e:
66:75:1d:b1:1e:1d:21:e2:ea:17:78:f1:be:51:1e:aa:45:d8:
ac:11:34:ec:13:7f:c2:f4:83:9e:61:c0:4f:da:45:8c:6a:93:
f4:9b:7d:4b:b6:38:d7:0f:19:8d:29:aa:4f:ed:22:8d:88:16:
79:38:91:87:82:06:36:8b:c2:49:87:d7:68:e2:37:d3:53:37:
fa:aa:eb:82:ed:b9:74:6a:da:31:00:5d:06:79:3f:12:e9:30:
8e:45:49:a2:d2:78:3a:0d:c4:42:3c:63:e6:99:f2:32:f1:c9:
e0:73:63:34:a2:da:d9:94:2e:49:43:db:13:ba:44:03:5d:e9:
1c:b7:f8:18:22:82:3e:98:4a:b6:95:08:5e:63:87:91:44:62:
58:70:75:b0:88:29:10:bb:8a:d3:09:c8:54:92:fb:38:5d:e4:
02:62:e9:f8:64:4e:82:6c:38:c0:38:8b:8c:19:15:fb:7e:dc:
e8:86:a0:89:61:b0:a1:8c:53:fb:7a:88:92:40:01:89:42:07:
9d:c1:e1:59:e5:1f:2b:c1:af:61:f2:cd:63:f0:db:8a:d5:c7:
53:e4:51:f7:ec:f9:34:df:0c:93:dd:2d:37:12:95:fc:46:c0:
82:37:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:43 2026 by rpki-client