
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier: Uxavshqwvuhwr1/G9Rn0IG4n6Qae8oWtB1mAjhLMVMc=
Subject key identifier: BC:DE:07:88:7A:D3:DB:C0:49:92:42:9E:D0:23:A7:B1:41:35:F4:D1
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number: 027B
Signing time: Sat 03 Oct 2026 02:32:26 +0000
Manifest this update: Sat 03 Oct 2026 02:32:26 +0000
Manifest next update: Sat 10 Oct 2026 02:32:26 +0000
Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: Yx5mR064pzFmJNirN4O4ex4xTL5KxL+I3iDirhEG3zY=)
2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: tMod+kKR1jOR1VExOog5QztxNpsdZWz75NXKTsytqSU=)
3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: PazBjpuTUYfOjYTbepeHU2eyo87WfnISzDamrpY/9jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: Oct 3 02:32:26 2026 GMT
Not After : Oct 10 02:32:26 2026 GMT
Subject: CN=6ac0693a-4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:36:ee:15:f3:bb:eb:e3:97:93:d3:5c:22:
49:07:f2:23:fb:e0:9a:58:d3:b8:c5:3b:3d:1a:94:
4d:64:94:47:2f:26:8e:7a:86:aa:9c:15:21:5d:36:
5f:75:fc:3c:78:65:8c:1f:1f:44:be:79:07:ea:3f:
45:db:eb:d1:e2:08:85:57:ef:98:56:76:b9:3b:cd:
3c:34:10:3f:04:00:1f:66:7d:da:7b:f3:fa:ac:d3:
1a:1a:03:ec:0d:16:d6:2e:70:a2:36:3b:4a:34:99:
87:d0:fb:34:cc:26:5e:03:5f:36:f8:9d:99:40:09:
86:3d:b5:6f:64:7a:97:ee:96:8b:6f:4f:8d:e1:a1:
07:77:17:2f:e6:21:5d:a8:3a:61:60:64:6c:49:de:
17:b5:1b:31:02:20:a0:c0:db:a5:5b:3d:e1:83:d6:
74:80:b8:bc:7b:f9:35:12:be:30:64:94:7c:3b:8c:
e8:9f:3a:19:64:93:11:25:6f:f9:30:a1:b0:fd:fc:
31:25:b7:88:93:6f:db:bc:c6:52:87:eb:05:b6:59:
6d:70:c6:c9:d1:a6:9a:5a:f1:58:49:64:8c:c2:3c:
12:4c:56:c6:64:7a:64:57:d0:71:1e:1d:83:fd:99:
80:82:99:fb:79:a2:ce:03:6e:cd:d4:85:03:f6:b5:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:07:88:7A:D3:DB:C0:49:92:42:9E:D0:23:A7:B1:41:35:F4:D1
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:d3:3b:f1:c1:e0:bd:fd:d0:06:ec:15:ba:f7:81:64:42:
57:17:3a:90:6c:3a:96:0b:7d:81:fa:eb:29:ee:21:33:78:f3:
49:53:2d:12:aa:4c:7b:b0:4e:0a:74:fb:5d:21:22:51:de:66:
2f:18:51:3f:4d:5a:45:d3:62:80:a8:e6:61:68:ef:05:be:02:
ec:dc:b2:c0:c2:9a:d2:d1:2f:22:01:07:1f:27:5c:a6:be:f7:
20:32:9d:52:5b:72:f9:a0:d9:e6:7f:4d:2a:17:51:2f:60:bc:
85:fb:fa:d9:b1:ab:9d:a2:a1:8c:9e:44:a8:84:47:85:ee:9f:
16:88:14:1d:07:2f:af:e6:35:48:a0:de:f6:77:2c:b6:ee:a5:
ce:b1:5b:ca:6b:b7:9e:38:76:b1:9a:e2:21:cf:9e:29:72:f8:
93:ef:84:e3:a3:67:51:a8:20:6a:97:08:00:ec:f6:10:ed:e5:
e1:7c:d7:94:4f:db:c0:c6:39:6a:ed:33:eb:a8:1d:01:f4:cf:
e8:c5:35:13:fa:26:b8:28:a1:4a:69:44:b3:5a:29:43:96:f3:
18:8d:da:c8:52:27:d8:6c:75:61:5b:07:26:ac:3e:a1:a3:be:
69:3e:c5:61:40:cf:d5:ee:38:60:03:03:fa:7e:8c:30:47:b4:
1b:a0:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:57 2026 by rpki-client