
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: ecCXFNY7QxRql6hXpv12uxVTL8VW+vDTb2aRaYAEIHg=
Subject key identifier: 41:58:00:EC:2C:AC:60:B7:C9:CE:F9:B6:34:EF:1D:A4:5E:38:B3:86
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 017B
Signing time: Fri 21 Aug 2026 04:49:04 +0000
Manifest this update: Fri 21 Aug 2026 04:49:03 +0000
Manifest next update: Fri 28 Aug 2026 04:49:03 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: 0lx42+Ip4cbOoseq6PywwQpBw3T4y3qm4IqOvFQRQVw=)
2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
3: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: Aug 21 04:49:03 2026 GMT
Not After : Aug 28 04:49:03 2026 GMT
Subject: CN=6a87d8c0-a3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:5f:0b:10:9a:dc:95:45:49:d4:48:9c:32:
ea:62:03:04:bf:8c:cf:5e:fa:bc:86:91:29:46:93:
0f:7b:b1:b4:23:a9:47:3b:dd:aa:4f:2c:9c:9e:69:
f3:ed:00:e0:83:2a:31:17:fe:1b:94:ee:87:12:a2:
cb:29:26:67:36:8e:db:e1:f7:ca:53:22:75:5e:3e:
7b:61:f8:1f:35:af:33:a9:f8:a8:fe:b7:91:0c:cc:
46:3f:8f:ed:0b:f2:b2:b8:d5:3a:de:a9:28:52:07:
14:50:eb:d9:62:87:d6:84:8c:57:3c:d1:09:ab:11:
9c:34:ea:05:d9:6a:c5:32:13:f0:38:9b:ef:f7:c2:
7f:a4:35:4a:e9:6f:2a:b4:b9:cc:2b:22:09:1d:8d:
00:9a:ac:73:2b:ad:98:d0:65:a9:fb:ec:0e:0e:40:
a6:99:64:1f:f0:02:24:ce:d2:f2:c6:98:88:b5:10:
45:2a:76:60:07:06:4b:3a:85:6d:fc:94:47:10:48:
4f:e7:d7:c3:db:9b:67:be:9c:06:4f:e4:22:84:c0:
96:64:87:69:14:49:aa:12:19:18:de:a3:ce:6b:b4:
61:8b:1e:6c:c2:d3:d8:54:99:8e:0d:b1:f1:47:ed:
66:83:85:8e:27:a9:e6:6f:d3:eb:8c:9d:da:bd:dc:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:00:EC:2C:AC:60:B7:C9:CE:F9:B6:34:EF:1D:A4:5E:38:B3:86
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:75:1e:67:16:a9:ef:5d:f8:70:04:47:c4:de:21:26:42:
98:f1:81:23:85:2f:14:ea:3b:c4:8b:37:c6:6c:4e:a2:79:13:
0a:d1:37:bd:86:43:ff:2b:6e:50:96:30:cb:0e:e4:f8:11:b8:
3c:c3:99:69:b5:b1:fd:ad:89:61:be:66:b1:4b:d1:39:8e:04:
7b:7b:0b:5c:0b:7e:3c:e6:c9:fa:27:86:f4:60:d3:e3:08:94:
14:13:08:83:15:56:91:1f:a4:87:b5:a4:85:5b:19:ec:ad:63:
7b:94:29:d8:24:b5:0f:90:c8:b0:6d:9c:34:09:00:7b:80:48:
27:9e:70:fb:26:7b:75:8e:65:f9:97:b0:ba:d3:d2:6e:81:f0:
90:3d:2d:41:bb:39:97:2f:ee:d8:5a:a0:7a:c2:45:b1:8a:39:
1e:7b:40:9a:cc:97:b1:55:3e:c2:a7:10:be:5f:34:04:88:44:
f9:41:e9:89:8d:eb:b7:f0:fc:9e:23:e9:d6:8b:1e:de:73:bb:
78:a5:97:64:96:29:42:e9:45:00:b8:0d:f4:5f:02:06:cb:f1:
ea:14:9e:01:24:63:1a:f1:ba:7a:cd:57:2c:5d:25:46:18:4d:
f4:ea:7e:86:f2:9a:59:1d:dd:75:e3:1a:8c:a9:28:5a:5f:14:
2b:c7:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:18 2026 by rpki-client