
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: cZqRVfrXH7mfFvNvEwzVp2PxXQ5v1jDpp4wckRbDYNw=
Subject key identifier: EE:AE:8A:17:CA:54:09:8D:A1:FA:F2:86:30:F0:A3:8C:CF:F8:81:2E
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 0381
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 0377
Signing time: Mon 19 Oct 2026 00:59:08 +0000
Manifest this update: Mon 19 Oct 2026 00:59:08 +0000
Manifest next update: Mon 26 Oct 2026 00:59:08 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: 7rX3FdYpe6yaY19SJUOXxulS8Kn+pVVHD40GAnL1/EE=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 00:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: Oct 19 00:59:08 2026 GMT
Not After : Oct 26 00:59:08 2026 GMT
Subject: CN=6ad56b5c-2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ea:1b:c0:1e:b5:85:13:3d:7a:66:33:9a:ef:
b0:a1:b9:a0:3e:69:5e:5a:81:18:64:2c:f1:2c:29:
98:33:ad:76:4a:ee:21:c6:0b:9e:99:b7:d0:eb:aa:
60:37:39:41:c6:57:34:03:94:a3:e8:bc:c0:e8:a8:
d0:d0:91:b9:b8:2a:5e:33:a7:31:89:0e:9b:80:a5:
01:1a:cf:30:f6:68:a9:5b:83:93:48:92:c9:66:dc:
df:36:1d:4a:98:96:ef:13:14:59:e9:9f:bd:c8:5b:
5e:83:9a:22:83:9f:0e:58:8e:1d:eb:e9:da:29:03:
2e:09:e6:91:04:f2:4e:6d:dd:cf:1a:29:e2:b0:b4:
88:90:0a:2c:62:74:20:7e:1e:de:f3:47:fe:c3:e6:
17:d8:34:be:15:31:64:cc:2f:e7:d7:b6:13:99:b8:
a8:0f:c6:9d:16:06:8a:68:ab:ed:41:40:b5:5b:7e:
72:81:a4:b7:15:b4:1b:9f:58:94:f2:d0:8c:dc:e2:
8d:c8:58:01:45:62:e4:06:8f:24:d5:de:7f:21:90:
b9:67:ad:f4:75:09:7d:b0:2c:f5:a5:47:bc:ed:33:
b3:09:05:7b:c0:60:42:2b:d9:4f:99:c9:23:97:2f:
7b:4f:0f:0c:86:68:31:11:d6:18:98:cd:88:92:75:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AE:8A:17:CA:54:09:8D:A1:FA:F2:86:30:F0:A3:8C:CF:F8:81:2E
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:e2:8f:5d:21:54:bf:13:0b:bb:24:6d:02:95:34:f4:a8:
41:0c:8d:bc:83:0f:0c:cf:5d:58:5f:18:5c:61:52:76:02:78:
3d:48:c3:2f:64:d2:8b:5e:b0:a6:cf:99:3a:4e:99:5c:3d:b3:
9c:10:d6:83:58:55:79:ad:06:33:49:bf:a1:f0:6c:ed:99:cd:
3e:6b:2e:14:7e:36:d8:b8:79:65:6d:ba:9a:95:f1:ce:2c:0f:
79:57:97:fc:27:c2:a9:56:ae:b7:fa:a5:5b:cc:36:11:fb:95:
71:c4:4e:cb:00:0c:3d:34:69:75:2c:f8:03:c9:60:30:93:31:
2f:14:da:40:41:1d:b5:23:ec:1d:1e:b9:df:81:1a:98:95:8b:
78:dd:06:0f:06:4b:bf:e3:b7:07:54:70:ef:53:52:75:00:a8:
5f:14:28:6e:5f:64:4f:17:d2:10:9c:18:66:6d:df:03:d0:24:
ea:bc:0a:48:97:d0:fe:d2:58:95:33:2e:88:01:0e:9c:7c:f8:
77:75:26:a6:ea:d4:c0:df:78:9e:4d:a3:a0:39:fd:91:4e:69:
51:f1:36:33:7d:6a:c9:83:a6:35:ef:75:3a:72:83:c5:46:24:
21:8e:ae:b0:64:fd:e5:65:ed:a6:ac:77:bb:4c:dc:99:84:3d:
62:60:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:19 2026 by rpki-client