
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json)
Hash identifier: 9G+srmnjeucDUTOwa+KXJ54JhiWu0A8VKqaVhx/FuZw=
Subject key identifier: D7:50:0F:3C:F2:25:C3:F6:0A:99:0C:F9:54:72:28:82:43:60:12:66
Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
Manifest number: AF
Signing time: Sat 03 Oct 2026 07:55:37 +0000
Manifest this update: Sat 03 Oct 2026 07:55:36 +0000
Manifest next update: Sat 10 Oct 2026 07:55:36 +0000
Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: KE1YMCmo7dGyTVNBBDbZvuiwImJTiKgzw3dzBcigxGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Validity
Not Before: Oct 3 07:55:36 2026 GMT
Not After : Oct 10 07:55:36 2026 GMT
Subject: CN=6ac0b4f9-4675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:17:7b:02:95:f1:bf:d9:96:ec:4f:57:b3:
1d:b4:16:b3:b9:14:fe:81:6f:e5:8e:d4:f5:38:5c:
b2:1c:0b:ad:9e:9a:b2:4a:32:f2:4d:94:ad:97:60:
d9:3c:d1:47:51:55:b2:2b:52:89:89:f0:af:9b:c4:
9e:bd:e2:06:49:b3:75:ab:93:ae:5f:6c:6b:a7:8e:
10:7a:48:69:b2:3a:8b:11:f7:74:e5:ce:74:f1:d3:
00:0f:bc:7b:d9:13:66:1f:23:c5:e8:40:6c:14:74:
ca:ec:b9:3f:81:0c:10:ff:68:f2:52:b8:20:51:54:
59:0b:3a:de:d6:a2:c5:6d:8c:c0:f8:94:e2:91:9f:
6e:52:f7:e1:8c:3c:9d:9a:6d:1f:34:7d:b4:40:a6:
84:d2:e1:1a:59:32:d9:93:97:b6:44:04:c2:40:eb:
ad:20:ee:81:28:c6:e4:7f:ca:eb:48:1f:ca:a6:7d:
68:b6:7f:2e:a0:67:46:1e:77:76:e5:d1:61:e1:1a:
d4:81:c1:43:57:ef:17:9a:f7:41:59:86:6b:b0:f0:
20:44:1c:5b:57:61:e9:e7:40:2e:08:93:f4:46:e2:
c9:f6:e4:9e:d4:fa:45:ea:db:c0:61:c2:d9:62:1a:
fe:64:48:d3:ee:44:e3:25:e0:43:4d:26:54:45:a0:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:0F:3C:F2:25:C3:F6:0A:99:0C:F9:54:72:28:82:43:60:12:66
X509v3 Authority Key Identifier:
keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:70:9c:0e:7c:61:7f:93:05:98:c0:e2:40:25:c8:92:a0:
69:52:60:c1:f2:01:34:55:4a:68:50:cc:d8:ca:be:a3:fd:ae:
0b:1a:87:c6:57:5b:a9:66:7f:22:56:eb:0f:fb:ef:ef:99:9e:
6d:ea:ea:fe:32:97:c1:9d:8a:5f:13:be:42:98:ca:00:e4:6b:
5f:21:5d:76:7e:06:22:4e:2d:38:6a:57:05:10:66:a5:72:5a:
0f:be:90:16:15:ba:e8:7d:ba:ef:73:1d:73:47:9f:0b:35:19:
f4:c2:4d:76:9d:1a:ad:cd:51:14:8a:a9:fe:28:56:24:2e:8f:
42:5f:ab:47:1e:1e:6d:c9:fe:be:04:ff:60:81:32:cf:4e:1e:
da:ed:70:c4:d2:88:7e:b8:f4:cd:39:45:9a:ac:89:d6:fc:4c:
b6:5d:0d:79:14:a6:43:0f:3d:6d:c0:4c:3f:be:c3:9a:97:a0:
81:50:a0:fb:2b:7e:91:9b:c8:2d:eb:ea:dd:11:d4:1f:8a:e8:
bc:07:a7:9e:27:1d:cb:c8:fe:03:50:83:43:9d:c2:5e:1d:72:
63:80:7c:5d:ff:74:4d:0d:78:66:43:39:20:0a:04:63:0d:4e:
12:c5:c9:d7:a4:5c:44:d4:66:5a:68:90:46:4e:a0:1e:99:d7:
12:f0:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:07 2026 by rpki-client