
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: eKi4pSP8/AFukvbSkQZ7LPiK64TNKNgWKGjLFEJzxfE=
Subject key identifier: 7C:49:E3:4A:C4:CE:F9:6D:16:89:A9:85:F2:DA:1D:6B:48:4F:1C:69
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B0A
Signing time: Tue 14 Apr 2026 16:13:15 +0000
Manifest this update: Tue 14 Apr 2026 16:13:14 +0000
Manifest next update: Tue 21 Apr 2026 16:13:14 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: pDrjhdteDtqYlC12y+AWtAljTbooNcjOuvX3hxpJ5wA=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 16:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6937 (0x1b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Apr 14 16:13:14 2026 GMT
Not After : Apr 21 16:13:14 2026 GMT
Subject: CN=69de679b-a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:8b:42:a5:29:c3:3d:53:e4:21:32:ea:ff:
7f:db:79:6d:61:dd:09:f8:c0:08:ff:0b:29:b4:24:
b8:e6:01:6e:08:e9:fc:4b:b1:9b:1c:85:48:db:fd:
f9:00:3e:68:c1:3c:62:ae:d5:6b:a7:8a:0f:5e:5e:
ea:b1:14:40:b8:ac:8f:25:e2:f5:81:60:f5:fa:4b:
78:16:48:9d:b7:9a:70:6f:68:70:75:e7:c1:94:34:
d1:d8:92:8b:f5:af:6d:2c:a7:d2:bd:bf:a6:a0:43:
ff:64:55:79:66:2a:84:9d:e8:76:aa:81:92:d3:3a:
e4:9a:a7:4f:8c:f4:e5:6d:d0:94:ee:b4:42:9e:c1:
da:60:05:dc:14:62:66:d2:af:16:98:60:03:39:7a:
76:e1:63:48:6a:69:a9:ae:bf:f5:93:f6:13:d8:84:
e8:4d:d5:49:fd:20:85:c7:f1:37:90:f6:76:80:29:
b5:1d:45:70:be:ea:97:67:70:d3:ae:ac:9a:cb:8e:
08:29:bd:01:29:33:51:c6:55:32:9b:41:0d:1e:4d:
6e:42:5c:de:2f:20:1e:9e:d4:fb:17:5d:57:c4:11:
77:19:a3:cf:dc:e1:94:a1:ae:0d:da:a7:81:86:17:
0d:c8:7a:36:cb:72:9a:be:08:66:4c:08:35:11:0e:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:E3:4A:C4:CE:F9:6D:16:89:A9:85:F2:DA:1D:6B:48:4F:1C:69
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:81:83:e3:13:df:9d:f0:12:26:01:9e:ce:ce:cc:6d:22:1d:
86:6c:c9:90:2d:20:90:08:ae:e0:a3:e9:ed:cc:53:9a:ab:80:
88:c0:63:77:08:78:a4:d2:8d:80:8e:30:2f:3f:69:91:e3:30:
3f:5b:3f:63:9c:5f:a9:19:79:1c:ea:93:d5:11:18:3a:8a:7e:
15:af:e5:bf:83:e7:81:46:55:18:9f:3a:2a:af:85:af:50:2a:
4d:f8:73:29:3a:6a:37:61:d1:d2:e1:8b:c7:e1:66:53:b4:61:
09:71:9b:4d:e3:6d:5c:a5:f3:42:d4:66:fd:49:65:e3:86:4c:
32:6b:e6:63:f4:27:06:78:67:e7:2a:db:04:f2:04:6f:da:22:
29:ee:53:15:dc:60:d2:da:85:70:cc:98:a9:1e:81:cf:05:9f:
d9:05:2e:fc:06:a7:de:51:bb:d9:23:99:ee:a4:7b:ec:16:a3:
83:6b:31:97:a2:20:20:13:e4:d3:00:16:a2:74:41:af:88:52:
62:72:db:9d:ee:01:3e:bd:3a:cd:b6:94:c2:6e:a6:12:14:a0:
08:cd:e2:31:9e:c6:67:55:d8:77:83:33:04:01:f1:0d:7c:9f:
50:dd:a5:1e:44:67:9a:55:de:dc:89:64:73:f4:d0:9e:c2:1b:
ff:23:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 06:31:34 2026 by rpki-client