
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: GzjIQ/nzm2OJGCfDyf2QmkEnfvq0EZqmoShbUHb8k4Y=
Subject key identifier: EB:15:9A:1A:85:54:55:91:EF:5D:25:74:7A:80:D9:82:F9:49:86:09
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 085F
Signing time: Sat 24 Oct 2026 20:56:29 +0000
Manifest this update: Sat 24 Oct 2026 20:56:29 +0000
Manifest next update: Sat 31 Oct 2026 20:56:29 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: g5MlUKTmV9nyCdMdGvJXl7DVkVS/FS3BMohYxmCJgT4=)
2: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=)
3: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=)
4: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE=)
5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=)
6: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: EoKuYumOB06CPMGY3MST022RtHbswAdFcoVeBMF2lCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Oct 24 20:56:29 2026 GMT
Not After : Oct 31 20:56:29 2026 GMT
Subject: CN=6add1b7d-4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:22:0f:1e:97:46:9f:de:aa:20:8f:d3:05:
9f:59:a1:34:5e:16:ad:bb:ad:93:96:83:8d:5f:c1:
ec:4a:f1:e9:4b:75:29:f8:b4:cd:2e:27:67:f6:0c:
ee:64:ab:66:be:40:ff:bb:f6:df:1f:1c:ad:f1:58:
f1:5c:2b:d5:db:5f:be:0d:b2:c8:58:7e:3e:90:12:
d8:b7:d0:b6:5a:8b:00:a1:d8:5f:d7:7a:4f:20:73:
9e:b4:ca:6b:be:7a:ab:73:97:06:a6:18:b1:41:68:
4f:2a:54:9f:71:61:35:e1:7c:3a:10:db:37:1c:ea:
4d:54:eb:07:5e:d4:96:95:62:ab:da:8f:f9:3f:4f:
48:d5:ec:d9:9a:80:3e:22:5b:09:f3:8f:75:eb:c2:
55:d5:cc:03:59:da:cc:73:70:30:d9:9a:05:fb:9f:
4a:e2:a0:8c:17:c9:79:0b:2a:9b:f1:c1:89:b0:65:
da:ca:0f:27:1b:74:7c:69:88:28:19:13:c6:35:38:
2c:d5:4e:51:ea:9e:d4:26:8b:f1:bb:57:6a:a6:95:
a3:40:71:45:aa:3c:90:f5:6f:28:2d:a1:f6:ab:2d:
fc:c6:76:71:60:2e:a0:9a:00:a4:a1:16:69:71:1c:
23:f3:a6:f1:c0:0f:ee:9c:04:2d:61:d0:dc:6a:a9:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:9A:1A:85:54:55:91:EF:5D:25:74:7A:80:D9:82:F9:49:86:09
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:f2:fa:18:18:90:87:44:b7:f5:62:4a:fe:1f:75:9f:bd:
e1:8a:12:50:12:f3:00:97:c0:e4:64:b1:ed:72:f0:7b:05:06:
37:05:bd:e5:8d:69:c7:9a:4b:cc:08:d4:cc:c3:66:06:0f:b3:
2d:7f:e1:bd:8a:75:ca:c0:f0:f5:57:f0:63:a8:e0:32:6b:88:
f9:0f:e1:64:ef:8b:b2:9f:58:78:a2:74:65:a1:e6:0a:ce:0d:
db:ea:78:0c:ae:3d:6f:84:eb:b1:85:40:7c:4a:96:2c:9b:93:
3d:a4:d1:e4:0c:e8:26:88:07:0d:5a:e3:83:bd:f6:f5:f5:63:
25:dc:cc:8b:47:76:88:c9:45:d4:cb:5e:68:28:d7:a1:61:78:
bd:30:5e:e5:fb:90:6b:55:0c:fa:d7:ed:5a:ff:93:60:68:08:
f9:12:b4:40:6d:aa:52:17:be:5c:75:17:7f:98:4c:3a:28:7e:
d4:bb:c6:c8:70:fc:0a:bb:c9:67:56:59:43:49:7b:4a:64:95:
4d:dd:2c:84:3f:bc:7b:f9:63:d8:3d:e3:3e:47:46:51:ba:22:
67:d6:24:c8:4b:d9:c7:fa:b3:ca:a1:76:c1:63:98:2e:90:5a:
c5:fc:8e:f3:8e:5e:73:17:51:e6:25:ad:03:38:21:33:93:9f:
49:ac:cb:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYxMDI0MjA1NjI5WhcNMjYxMDMxMjA1NjI5WjAYMRYwFAYD
VQQDEw02YWRkMWI3ZC00YjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoh0iDx6XRp/eqiCP0wWfWaE0Xhatu62TloONX8HsSvHpS3Up+LTNLidn9gzu
ZKtmvkD/u/bfHxyt8VjxXCvV21++DbLIWH4+kBLYt9C2WosAodhf13pPIHOetMpr
vnqrc5cGphixQWhPKlSfcWE14Xw6ENs3HOpNVOsHXtSWlWKr2o/5P09I1ezZmoA+
IlsJ849168JV1cwDWdrMc3Aw2ZoF+59K4qCMF8l5Cyqb8cGJsGXayg8nG3R8aYgo
GRPGNTgs1U5R6p7UJovxu1dqppWjQHFFqjyQ9W8oLaH2qy38xnZxYC6gmgCkoRZp
cRwj86bxwA/unAQtYdDcaqlk5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsVmhqF
VFWR710ldHqA2YL5SYYJMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz
bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALvDy+hgYkIdEt/ViSv4fdZ+94YoSUBLzAJfA5GSx7XLwewUGNwW95Y1px5pL
zAjUzMNmBg+zLX/hvYp1ysDw9VfwY6jgMmuI+Q/hZO+Lsp9YeKJ0ZaHmCs4N2+p4
DK49b4TrsYVAfEqWLJuTPaTR5AzoJogHDVrjg7329fVjJdzMi0d2iMlF1MteaCjX
oWF4vTBe5fuQa1UM+tftWv+TYGgI+RK0QG2qUhe+XHUXf5hMOih+1LvGyHD8CrvJ
Z1ZZQ0l7SmSVTd0shD+8e/lj2D3jPkdGUboiZ9YkyEvZx/qzyqF2wWOYLpBaxfyO
845ecxdR5iWtAzghM5OfSazLSw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:48 2026 by rpki-client