
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
File: DePqhpmRw7dcO1DTewZzPCnUvNU.mft (raw, json)
Hash identifier: j5iz0duwoEnixQvepuFWuPsK43PuJaTIRYkc68sJzOw=
Subject key identifier: 51:03:72:9F:BF:D3:A7:DD:4A:1E:2A:6E:3F:EB:3C:7B:5F:CF:FE:14
Authority key identifier: 0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5
Certificate issuer: /CN=A91C3809/serialNumber=0DE3EA869991C3B75C3B50D37B06733C29D4BCD5
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
Manifest number: 28
Signing time: Sat 17 Oct 2026 09:30:55 +0000
Manifest this update: Sat 17 Oct 2026 09:30:55 +0000
Manifest next update: Sat 24 Oct 2026 09:30:55 +0000
Files and hashes: 1: DePqhpmRw7dcO1DTewZzPCnUvNU.crl (hash: ZCKunxrgCNjiK08Uj307Z1cQk7QGM1kfBz9NOQbdmKk=)
2: 38FC091E8EEA11F18D5914636411F970.roa (hash: P+gMb1uNa9z4e+j9ZVbWBhE3RmxdA8J2rZETaUN7ADQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.crl
rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3809, serialNumber=0DE3EA869991C3B75C3B50D37B06733C29D4BCD5
Validity
Not Before: Oct 17 09:30:55 2026 GMT
Not After : Oct 24 09:30:55 2026 GMT
Subject: CN=6ad3404f-ba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:fb:06:8d:1b:cf:ab:f0:e1:19:7c:58:72:
13:97:5c:a9:1b:ab:6b:2a:4d:03:34:46:19:e0:2e:
05:d7:dd:41:dc:8f:58:fe:f0:64:98:a7:33:71:4e:
fc:f4:1e:85:a6:63:89:70:91:04:05:61:53:c5:d8:
26:0d:a0:27:bb:70:7a:89:68:d3:68:08:fb:f0:79:
cb:f8:b1:12:05:65:19:3e:78:2e:10:f4:6b:c9:53:
d3:b5:a0:1f:0d:2e:73:ff:2b:46:06:10:78:01:0e:
e9:fc:c7:91:4c:fc:da:48:f2:6b:06:c0:6e:86:3d:
f1:6d:1c:9c:12:89:21:27:9f:22:ca:87:c7:85:03:
4c:a0:10:0f:ca:6c:6c:57:2f:ce:43:c3:24:73:d5:
40:09:9f:9f:cb:29:dc:f7:7c:82:b2:73:96:92:3f:
48:74:42:35:68:68:09:1a:f9:96:18:05:90:51:19:
15:da:61:36:24:9d:d5:32:8e:fd:b9:d7:f4:1b:0d:
f8:18:60:c6:5f:c7:3c:e2:fd:8f:ac:7d:0b:15:67:
36:29:6e:21:69:e4:a9:ef:45:75:ab:f4:b5:71:a0:
d1:ba:37:be:78:38:fe:85:df:f4:33:cc:02:1f:f6:
bc:0b:12:16:47:27:30:ec:be:cb:bb:81:b2:b9:7f:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:72:9F:BF:D3:A7:DD:4A:1E:2A:6E:3F:EB:3C:7B:5F:CF:FE:14
X509v3 Authority Key Identifier:
keyid:0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:64:94:d5:f6:60:34:41:40:c4:dd:4a:15:1a:da:7a:5a:
ed:6b:4c:ce:65:0c:9f:44:90:ef:e4:03:5a:4b:fb:de:a1:02:
27:9e:18:45:79:20:db:bd:bc:78:0b:77:10:d0:52:7c:68:99:
9b:ed:a5:d0:c3:59:68:3c:6c:3d:c4:9a:12:27:67:10:b9:42:
10:48:58:37:9c:30:70:ad:02:50:ec:9b:5c:54:2f:15:60:17:
80:b1:c2:ab:9d:25:b9:7e:93:6b:9e:1c:ac:88:6c:3a:3f:4c:
9d:f0:2b:32:c1:09:e4:f0:ce:4c:f2:80:12:3e:5f:f9:bc:fc:
b7:91:05:fb:45:c9:ea:0e:7a:5a:d4:b4:3b:80:d0:ae:bd:56:
fe:34:3f:e0:e5:84:df:45:61:66:28:6f:aa:48:b0:39:02:4f:
80:35:5b:70:61:46:71:eb:2c:b0:7f:64:9a:f2:25:8f:ca:be:
19:a3:57:83:02:56:54:6e:fb:54:56:8d:13:27:1b:eb:e4:56:
c8:b6:80:e2:e5:f1:09:3d:0f:9b:2c:2b:8c:06:2d:4f:5b:d0:
fe:a1:19:e1:47:f4:c1:5c:de:41:2e:21:d2:7f:85:a9:ec:55:
7d:36:64:c9:87:6a:50:07:f1:d2:7f:bf:7c:91:75:64:4a:55:
f7:c2:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:42:54 2026 by rpki-client