
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json)
Hash identifier: MfF0kErMfWGfhNmZU2jG4VfUdjeW8MgU8nbj8Z/6tTw=
Subject key identifier: 57:33:57:9C:70:2A:AE:D0:7B:BB:FD:B5:76:60:2E:1F:10:D1:BB:8F
Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Certificate serial: 359F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
Manifest number: 3596
Signing time: Mon 26 Oct 2026 14:46:42 +0000
Manifest this update: Mon 26 Oct 2026 14:46:41 +0000
Manifest next update: Mon 02 Nov 2026 14:46:41 +0000
Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: WnA6QZXVX10bYdylxI/nuStFgTvjZVtsZ9fg9zfXBqk=)
2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: NaUSTZ4F4Tbrd1mmc9roxeZU5/8N6wuYlpNoyqxQzYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13727 (0x359f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Validity
Not Before: Oct 26 14:46:41 2026 GMT
Not After : Nov 2 14:46:41 2026 GMT
Subject: CN=6adf67d2-72ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:fc:f9:36:89:42:d1:79:ba:dc:f1:17:fc:
52:88:4d:f2:9c:05:6a:62:27:fb:2d:63:3a:a9:92:
a5:22:97:d4:56:5e:ef:ae:b3:d8:6f:61:33:a8:7f:
f3:4b:c4:c1:87:e2:66:c3:5d:2d:91:19:63:bc:6e:
08:61:a5:c9:21:93:1d:d4:af:0a:9e:94:43:27:8f:
7d:dc:a3:ad:f0:41:2f:5f:b7:d7:ed:18:a5:0e:1f:
82:46:ac:26:2a:72:ab:1d:f8:28:53:83:15:d0:1b:
04:a0:df:1b:71:cd:d4:96:82:be:9d:62:b2:0a:d2:
b6:07:2c:46:09:18:26:ef:8e:df:82:85:e2:11:d6:
8d:2b:70:38:b0:74:a1:54:92:07:d4:a4:2c:93:b6:
0a:4b:67:12:38:4d:ab:3d:0c:27:05:76:6e:d2:c1:
f9:f8:31:4c:5c:f2:21:da:2f:cd:76:54:10:70:97:
4c:3c:07:e5:d6:b5:3d:c1:c4:aa:e7:48:e4:b6:75:
71:8d:4a:d0:9a:bd:43:88:e7:c4:34:f2:ab:64:6d:
8c:e0:4f:92:b1:90:03:bd:a5:0c:3f:ff:12:11:ea:
a7:ad:72:3a:59:f1:79:59:10:3e:55:49:38:fe:b5:
b6:f9:1d:04:33:16:b6:d4:4e:97:47:72:1d:36:3f:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:33:57:9C:70:2A:AE:D0:7B:BB:FD:B5:76:60:2E:1F:10:D1:BB:8F
X509v3 Authority Key Identifier:
keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:40:e4:de:74:ac:b1:43:d4:b3:36:98:88:b6:bf:94:a9:90:
79:81:78:64:da:c4:bb:18:a7:97:ce:d7:4f:dd:04:ba:2f:31:
c2:23:aa:fe:ee:34:2e:33:2a:dd:e8:f7:f6:20:b7:b0:28:9c:
42:c0:bb:39:c7:82:69:b3:4b:c8:09:93:4b:de:10:dc:6c:53:
62:51:5c:e8:21:85:5b:45:44:21:88:e8:cb:6f:37:d9:66:7b:
66:99:da:9c:1b:85:4c:4d:d9:86:a5:21:16:43:2d:0b:f8:7f:
28:14:a0:04:14:90:26:f9:94:57:f3:ec:8f:8b:c5:9f:9e:29:
d3:81:ac:29:70:68:d6:6f:63:ad:d0:4a:4f:6d:7f:a8:a1:7d:
6d:de:28:e9:81:ce:b4:31:4e:a3:e3:2f:ea:18:b9:25:be:30:
48:c8:10:17:e0:f1:ee:c8:3b:a0:c4:7a:3e:3f:06:54:38:78:
e4:d6:e3:78:70:25:ad:7e:c3:d1:13:9c:09:da:e2:2d:44:56:
cf:12:0e:24:5e:14:c9:b6:ea:5b:6c:11:c7:22:f9:39:4a:61:
15:64:3c:6a:73:25:bf:92:13:d0:63:27:89:81:4f:f8:2b:13:
2d:a1:65:2b:2e:a3:1f:4e:a9:8a:cd:4a:49:91:a7:99:b2:67:
be:b7:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:11 2026 by rpki-client