
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: qK503q3gOYUL3xVfXIfd8bHxX69kepR6CwIp7W+2GjY=
Subject key identifier: CC:07:AD:42:BD:63:11:3D:3F:B7:26:1D:FA:03:38:54:99:5A:B6:E4
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 074B
Signing time: Fri 02 Oct 2026 22:09:12 +0000
Manifest this update: Fri 02 Oct 2026 22:09:11 +0000
Manifest next update: Fri 09 Oct 2026 22:09:11 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: OPBTIhWai19TA+Q2rdBUy7WKPfooVowVT8sYdozjOd0=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: wqpp5sdWkxaK5Wyb/ALs1/Eur2SKQYDq1/+PyKtS7Y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: Oct 2 22:09:11 2026 GMT
Not After : Oct 9 22:09:11 2026 GMT
Subject: CN=6ac02b87-6a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ea:a3:c5:e2:70:62:d9:41:8d:7d:c5:75:b5:
2b:64:f2:04:2e:9c:f6:72:e3:69:f1:0f:0a:93:ab:
97:98:51:19:0c:47:94:fa:ae:80:4b:f1:44:d7:5a:
38:a2:ff:a9:14:5c:ba:ba:51:b4:2a:e3:78:04:85:
56:54:d4:d8:20:77:b3:67:a3:a7:3f:a1:35:75:6b:
d7:51:c5:9a:64:d5:21:ad:c3:d2:ef:8d:fc:7d:46:
f5:fd:e6:c6:fe:0c:69:4b:f4:28:0f:35:f6:e8:6c:
92:99:1a:3d:c5:8a:52:6c:68:b5:bd:ad:2a:99:52:
14:40:a6:c9:57:ac:fa:40:73:29:00:32:6a:b3:20:
f6:50:8b:c1:c7:e2:e4:2f:0e:b1:e5:4a:62:9e:d7:
65:3e:82:e2:c5:c9:5c:28:0b:a8:27:f4:d9:aa:52:
61:97:85:90:39:83:b1:87:60:2b:6d:f9:22:29:84:
ad:f4:58:c6:56:f1:57:3d:7d:37:6b:0d:a6:ec:ad:
9f:8f:49:39:91:6f:cb:b6:70:2b:32:39:4c:74:8a:
71:4c:45:cd:88:a9:a0:71:11:e3:18:f6:ae:f6:c9:
81:36:f3:a1:66:3f:e5:13:43:0c:f6:15:e8:f9:ea:
ee:fa:55:48:a1:de:7c:06:ec:57:59:6a:1a:25:18:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:AD:42:BD:63:11:3D:3F:B7:26:1D:FA:03:38:54:99:5A:B6:E4
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:a0:ee:93:0a:2f:ca:97:5c:8b:de:50:16:7c:13:0d:49:
54:95:b6:16:12:f3:22:c8:e1:13:ca:76:0d:06:90:d6:e8:d3:
af:8e:61:40:a6:76:07:40:57:a7:76:87:f0:0d:6c:0b:06:32:
c5:47:16:55:ae:34:bd:fd:85:76:a2:c6:27:4f:58:fc:fa:1f:
21:5e:21:bc:12:15:ff:c8:f2:63:bf:4f:fb:78:ad:a7:2e:5b:
e3:20:8b:46:c0:fd:2e:24:97:8f:71:ea:24:4e:85:ae:5c:49:
5f:39:fd:87:aa:17:86:18:0d:a0:4f:d4:e8:13:4d:fb:03:15:
8b:f6:f4:59:f9:ee:e6:b8:45:4c:c7:66:5c:83:4d:d9:8f:e5:
76:af:45:aa:2b:4a:3f:9a:23:64:cf:92:8e:62:80:d3:37:30:
42:0f:90:f2:d1:b7:49:78:5e:22:4f:1f:7a:f6:9b:8c:5e:0e:
a1:0e:86:08:8e:da:d0:45:30:9d:af:b1:9a:a8:93:03:94:ec:
9c:da:e1:fe:39:8d:87:9a:b2:c1:a0:56:e8:52:99:61:3f:03:
72:29:ad:ad:e0:47:57:8b:6d:ed:85:c2:c6:1f:f6:13:f9:93:
6f:c6:73:ea:ee:77:b8:55:00:3c:ec:c1:0f:9d:58:9d:fd:aa:
c0:96:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:19 2026 by rpki-client