
$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File: dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier: vtIVWiiKXXVj84dvarjAiV8rKHMuuqVEifJ3UrPXt8w=
Subject key identifier: 23:41:D6:61:3B:09:E7:EC:9D:8A:28:99:D3:04:2D:41:27:2E:DD:09
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer: /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number: 56
Signing time: Fri 03 Jul 2026 09:07:53 +0000
Manifest this update: Fri 03 Jul 2026 09:07:52 +0000
Manifest next update: Fri 10 Jul 2026 09:07:52 +0000
Files and hashes: 1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: BM/AVUcl4FRQzpZLo5XTO1j8AlaItu01cN0pe5DXyAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 09:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Validity
Not Before: Jul 3 09:07:52 2026 GMT
Not After : Jul 10 09:07:52 2026 GMT
Subject: CN=6a477be8-a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:60:79:5e:a8:1f:3e:0c:ac:36:a7:ae:b9:
d7:55:f5:af:6c:3b:76:c7:44:83:70:78:1c:9f:6f:
c6:49:53:4c:f0:be:19:e1:a2:92:3f:bd:2c:6f:fc:
02:5f:7a:c8:25:ee:80:48:74:e8:74:b4:5c:54:84:
3e:71:a5:0a:73:af:0f:4d:55:bd:1f:6f:1d:f3:08:
85:fd:6a:17:84:20:c3:01:f9:e3:9a:1e:11:66:be:
ad:64:82:eb:c3:d8:8e:ba:47:bc:03:4d:05:73:13:
8e:5d:6f:7f:54:89:26:6f:30:c0:6c:19:8e:05:3b:
a6:a1:b0:36:13:55:65:b8:21:a0:e0:88:86:d7:c0:
66:8e:c5:17:c1:c4:c9:f0:5a:72:95:5a:d3:24:2e:
6f:e3:11:cf:30:2e:4f:6b:2d:df:73:6d:85:14:ef:
7b:a9:48:fb:75:e4:e0:00:4a:c2:78:50:bb:82:ff:
ca:64:55:ec:86:49:2e:dc:67:b3:aa:25:41:25:65:
88:0d:e0:9d:c7:b7:12:c3:50:5c:2d:73:12:bf:48:
38:a9:f7:3a:09:16:37:89:6a:a7:a7:7f:d6:3b:fe:
c4:02:e4:52:17:b8:de:5e:be:f4:6a:02:fe:a5:14:
b3:be:76:65:ee:4c:ac:4d:87:c1:e8:98:a2:fe:8a:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:D6:61:3B:09:E7:EC:9D:8A:28:99:D3:04:2D:41:27:2E:DD:09
X509v3 Authority Key Identifier:
keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:b4:b9:36:1c:6a:da:2a:20:a3:03:2b:0a:ed:0d:2b:4c:
7a:a8:aa:c9:66:2a:c1:ed:51:b4:3d:ae:63:23:84:80:b2:01:
2e:6d:b7:38:4f:23:66:96:2d:c8:38:ea:8f:7d:ed:0c:7b:9e:
6a:e9:83:4a:8b:35:c7:14:f4:40:04:22:a1:99:92:13:75:c7:
e2:4a:d6:15:d3:31:02:be:9e:e2:0e:bf:a6:f8:30:86:af:bf:
54:7b:1a:73:b3:b2:2b:29:00:ab:0f:30:90:52:a6:9c:4a:80:
05:78:02:8e:b9:51:e7:fc:e1:c5:13:ed:c4:b5:9f:cf:b9:ac:
b7:3d:50:80:a3:52:dd:89:35:9c:3a:1f:80:f8:20:4e:60:aa:
de:c7:1d:63:97:96:cd:99:20:40:93:01:40:6b:4a:5b:d4:0e:
9d:54:d4:c2:ad:33:9d:d4:d8:f7:62:19:a4:a9:4b:87:75:23:
50:f8:df:94:dc:42:ae:a0:aa:4d:86:1d:05:ff:c6:4e:09:df:
55:bb:48:e4:fd:76:f0:6d:0c:3f:0b:72:1f:82:07:40:81:2c:
7f:63:22:b9:1d:6c:8c:db:71:be:55:32:21:70:b9:30:d3:44:
2c:32:3e:55:dd:ff:09:91:76:16:c1:ed:0d:e0:c3:7d:b6:72:
93:ed:79:f2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0
OTA4MzkzNzAeFw0yNjA3MDMwOTA3NTJaFw0yNjA3MTAwOTA3NTJaMBgxFjAUBgNV
BAMTDTZhNDc3YmU4LWEwMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5EWB5XqgfPgysNqeuuddV9a9sO3bHRINweByfb8ZJU0zwvhnhopI/vSxv/AJf
esgl7oBIdOh0tFxUhD5xpQpzrw9NVb0fbx3zCIX9aheEIMMB+eOaHhFmvq1kguvD
2I66R7wDTQVzE45db39UiSZvMMBsGY4FO6ahsDYTVWW4IaDgiIbXwGaOxRfBxMnw
WnKVWtMkLm/jEc8wLk9rLd9zbYUU73upSPt15OAASsJ4ULuC/8pkVeyGSS7cZ7Oq
JUElZYgN4J3HtxLDUFwtcxK/SDip9zoJFjeJaqenf9Y7/sQC5FIXuN5evvRqAv6l
FLO+dmXuTKxNh8HomKL+iphDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI0HWYTsJ
5+ydiiiZ0wQtQScu3QkwHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy
NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ
RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFmrS5Nhxq2iogowMrCu0NK0x6qKrJZirB7VG0Pa5jI4SAsgEubbc4TyNmli3I
OOqPfe0Me55q6YNKizXHFPRABCKhmZITdcfiStYV0zECvp7iDr+m+DCGr79Uexpz
s7IrKQCrDzCQUqacSoAFeAKOuVHn/OHFE+3EtZ/Puay3PVCAo1LdiTWcOh+A+CBO
YKrexx1jl5bNmSBAkwFAa0pb1A6dVNTCrTOd1Nj3YhmkqUuHdSNQ+N+U3EKuoKpN
hh0F/8ZOCd9Vu0jk/XbwbQw/C3IfggdAgSx/YyK5HWyM23G+VTIhcLkw00QsMj5V
3f8JkXYWwe0N4MN9tnKT7Xny
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:39 2026 by rpki-client