
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
File: daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json)
Hash identifier: mwQHZYrYoqwMxN3KKYvXlfqIHazwpx7BxfOUErbY6vg=
Subject key identifier: 0C:0E:D5:58:6F:9C:8E:AF:0F:4E:8E:9D:24:7E:79:AC:95:51:99:B6
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
Manifest number: 01CE
Signing time: Mon 19 Oct 2026 04:23:49 +0000
Manifest this update: Mon 19 Oct 2026 04:23:49 +0000
Manifest next update: Mon 26 Oct 2026 04:23:49 +0000
Files and hashes: 1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: XkW1lCd/ZNaTyoTPw6pLGNm1bbhVD7pr93nht0LrqVs=)
2: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: L8spoNSm7g/u/EwRwbHS8dvjBfOIf2WmgkHCF85+Xfo=)
3: F22762F4741011EF9E049760C4F9AE02.roa (hash: U0KGzRthmkm1zRt+uEMqhBQuI1kS3OQDqLIRZ8rjx1Y=)
4: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: dZhz63yVCeTBzWMY75L0Bm2evDQYzA/h1Cy1vJR1+hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Validity
Not Before: Oct 19 04:23:49 2026 GMT
Not After : Oct 26 04:23:49 2026 GMT
Subject: CN=6ad59b55-3caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:6c:4f:c7:7a:85:30:60:ee:4a:05:49:6e:
a4:c6:3d:0e:c0:89:80:d4:bf:4d:59:3c:a9:08:d9:
1a:d9:dc:bb:8c:db:a0:a4:c2:cc:44:14:86:77:a2:
18:19:a4:56:05:8a:b0:4d:f1:19:d2:24:12:53:08:
40:8b:e4:6c:5e:c2:dc:ce:6c:59:93:48:ff:6c:13:
6f:d8:28:05:34:b2:67:23:46:83:45:da:d9:3b:c4:
2c:5c:4c:38:29:01:d1:6f:93:89:f4:6d:a6:66:ef:
69:7e:84:e8:db:90:80:67:6b:c1:37:6c:ef:3f:1a:
28:09:aa:53:c0:22:bf:61:54:ae:90:26:44:26:6e:
9a:d0:28:9f:14:3c:47:cf:25:60:b6:ff:d7:4b:63:
94:7f:a3:06:68:2f:23:f5:df:31:f5:66:44:b3:8d:
62:26:c4:eb:d7:db:4b:b8:28:ab:a2:41:45:d0:54:
d9:d6:07:07:5e:97:99:43:8e:5e:33:69:a4:78:80:
8c:b8:26:56:02:32:d8:17:08:54:f0:8f:dc:5c:32:
2d:18:91:9e:f0:b6:81:41:21:07:8e:68:5a:86:db:
0e:1b:65:45:e5:1e:d0:ec:59:42:5d:87:6c:d8:66:
2a:9f:d7:bc:2e:65:60:a3:f1:03:65:6a:f2:b6:85:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:D5:58:6F:9C:8E:AF:0F:4E:8E:9D:24:7E:79:AC:95:51:99:B6
X509v3 Authority Key Identifier:
keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:73:b8:da:8f:c2:ea:29:15:56:5e:8d:2b:02:d8:e3:d1:e0:
77:9e:75:db:14:5a:e3:8b:43:ca:5d:66:a6:2c:ed:83:33:53:
7f:c5:d7:98:18:f6:a0:9f:d5:83:e6:58:0a:61:01:bb:8d:5e:
43:32:6f:53:33:04:e3:48:57:95:13:12:bf:29:24:42:54:17:
e1:87:88:b0:27:f5:4b:38:22:ea:ad:94:6e:a3:70:eb:27:55:
9c:c6:cc:7e:80:f4:cb:79:b6:b6:6c:66:1e:a5:ab:46:5a:72:
fc:5a:e2:5f:4d:bc:b5:15:7a:c2:8d:75:45:bb:e8:46:95:1a:
ca:75:ca:0d:cd:8d:f8:fa:9d:ab:64:08:ae:57:24:3f:67:22:
c1:85:11:84:53:e0:f5:57:00:2e:49:6a:7d:d4:33:4e:2d:5b:
d8:26:52:04:d3:05:37:fa:94:42:e9:88:58:02:1e:a8:e6:77:
8f:87:f2:f3:c7:87:5a:e5:3a:91:5f:6d:65:88:a4:ab:b0:79:
a8:ae:c2:9d:6a:47:34:36:c1:5a:bf:b5:99:5f:30:73:8b:a8:
d0:e0:9d:33:4c:4d:d6:07:fe:79:3e:ac:58:9d:42:68:46:db:
c7:40:3f:08:32:ed:3f:02:4e:ec:5d:ea:42:31:72:11:50:08:
08:b0:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:19:56 2026 by rpki-client