
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier: JjEhWVGMTvujeA5Ew1Bh4DgdNGhu7rjA/zzcLKgA67o=
Subject key identifier: 7D:73:BB:6D:00:C0:65:2B:D2:2D:88:C4:85:65:39:AD:11:10:4B:EF
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1EC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number: 1EAD
Signing time: Mon 26 Oct 2026 16:02:54 +0000
Manifest this update: Mon 26 Oct 2026 16:02:54 +0000
Manifest next update: Mon 02 Nov 2026 16:02:54 +0000
Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: FeIoQRrB2aTBLuOpEKqiLu3cmPd0vb5joUizKMenvIk=)
2: C47CF15486EF11F19E006003A7EE528E.roa (hash: RzDPG9QsjUOtGowh+MQ0k1kpFF4PUc3OuFrwrmQUeJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7881 (0x1ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Oct 26 16:02:54 2026 GMT
Not After : Nov 2 16:02:54 2026 GMT
Subject: CN=6adf79ae-97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:7e:3c:75:d8:9e:b1:2b:f9:48:9c:0c:d6:
73:e8:97:63:97:a7:2e:04:66:a8:9f:18:8f:ae:dd:
0f:1f:0a:30:13:be:d4:a8:b2:c0:18:81:0b:f3:d9:
e7:df:75:36:e8:8d:b9:34:29:de:a4:50:29:ab:15:
76:08:1a:54:0a:49:f2:79:c0:21:b6:7c:01:f3:60:
5f:99:76:7a:c6:4e:54:31:98:37:72:da:e0:64:44:
15:02:8c:54:45:f5:c9:63:d1:9f:99:62:d8:af:16:
46:fe:ab:74:9e:aa:23:71:ac:e9:9a:e9:75:1d:bf:
dc:91:2e:61:16:57:fb:71:ec:c0:b8:76:cd:be:0e:
2e:72:a6:c5:c0:11:6c:6f:a3:d1:d4:ba:b4:a1:67:
bf:cf:a7:69:03:d2:0b:8b:7f:c1:86:63:1b:8c:ab:
64:e6:9d:af:04:b6:9e:0b:b2:ec:6d:1b:7b:42:47:
3e:bb:a7:3d:26:24:34:8c:84:5a:4a:4d:d4:48:50:
02:4c:74:72:2f:15:98:4c:52:1a:00:c3:33:39:82:
9c:7a:4b:d2:40:c2:70:ab:b4:46:84:af:0f:e0:c1:
9c:6c:35:2b:06:b5:f4:ce:4e:03:65:e0:93:15:3e:
4a:7e:1e:19:a2:5f:6a:4b:e9:2c:d5:30:b7:f0:e2:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:BB:6D:00:C0:65:2B:D2:2D:88:C4:85:65:39:AD:11:10:4B:EF
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:f9:90:92:91:5b:4b:01:36:e6:04:c6:57:6b:97:7f:f1:
ee:c1:f7:8a:8a:4c:02:93:d8:a2:51:18:e5:c4:92:f8:f4:ac:
2b:ae:14:2e:e3:7e:88:e5:69:e7:ca:16:c9:61:56:6b:f1:74:
cf:a1:f7:74:1c:a2:be:6d:18:ee:4c:38:70:6d:70:4f:9c:f2:
ba:8a:64:77:2d:a0:3b:39:83:4c:f9:44:41:08:c8:df:e4:de:
6e:43:ca:c3:07:1f:c4:cb:bd:90:29:b4:e1:a6:54:7e:03:fd:
55:20:b8:d7:ab:1d:d2:39:07:4f:51:47:32:2b:cc:fd:3e:92:
6b:0d:6d:f1:7a:a8:d0:34:07:a7:5b:00:b1:b6:3c:3d:69:bd:
d4:08:58:cf:90:ee:81:41:23:51:06:07:e9:40:05:af:9b:fe:
d0:84:59:5e:32:7b:5d:a1:24:9c:9c:77:63:31:78:06:70:86:
47:4f:08:ac:9a:37:9c:b1:d9:98:95:b9:bc:ca:12:f0:1d:88:
26:b9:e9:58:a6:42:04:7c:72:71:c2:8a:5a:be:c3:29:a7:0e:
b6:0e:d8:6d:cc:12:66:6f:4e:e5:e3:a5:5f:f1:59:90:22:f0:
76:a6:22:2d:51:29:d0:f4:b0:b9:f4:34:c5:30:87:75:0d:e7:
6c:57:d7:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5
NjNEODdFMUMwHhcNMjYxMDI2MTYwMjU0WhcNMjYxMTAyMTYwMjU0WjAYMRYwFAYD
VQQDEw02YWRmNzlhZS05N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5+1+PHXYnrEr+UicDNZz6Jdjl6cuBGaonxiPrt0PHwowE77UqLLAGIEL89nn
33U26I25NCnepFApqxV2CBpUCknyecAhtnwB82BfmXZ6xk5UMZg3ctrgZEQVAoxU
RfXJY9GfmWLYrxZG/qt0nqojcazpmul1Hb/ckS5hFlf7cezAuHbNvg4ucqbFwBFs
b6PR1Lq0oWe/z6dpA9ILi3/BhmMbjKtk5p2vBLaeC7LsbRt7Qkc+u6c9JiQ0jIRa
Sk3USFACTHRyLxWYTFIaAMMzOYKcekvSQMJwq7RGhK8P4MGcbDUrBrX0zk4DZeCT
FT5Kfh4Zol9qS+ks1TC38OKoawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1zu20A
wGUr0i2IxIVlOa0REEvvMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy
NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1
Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASa/5kJKRW0sBNuYExldrl3/x7sH3iopMApPYolEY5cSS+PSsK64ULuN+iOVp
58oWyWFWa/F0z6H3dByivm0Y7kw4cG1wT5zyuopkdy2gOzmDTPlEQQjI3+TebkPK
wwcfxMu9kCm04aZUfgP9VSC416sd0jkHT1FHMivM/T6Saw1t8Xqo0DQHp1sAsbY8
PWm91AhYz5DugUEjUQYH6UAFr5v+0IRZXjJ7XaEknJx3YzF4BnCGR08IrJo3nLHZ
mJW5vMoS8B2IJrnpWKZCBHxyccKKWr7DKacOtg7YbcwSZm9O5eOlX/FZkCLwdqYi
LVEp0PSwufQ0xTCHdQ3nbFfXyw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:49 2026 by rpki-client