
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier: h4bWcnPwHR0xZWO/r/Ng7m49402V/m2kTj+pKgAS8iA=
Subject key identifier: 8E:5B:4B:4E:22:3D:2B:90:83:50:73:0F:94:13:E2:DA:CD:1E:8D:15
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial: 0EF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number: 103B
Signing time: Tue 06 Oct 2026 17:45:00 +0000
Manifest this update: Tue 06 Oct 2026 17:44:59 +0000
Manifest next update: Tue 13 Oct 2026 17:44:59 +0000
Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: vaGO75g2GfIrlGMG3ZUQcPoKfsbhYShjSO8XaOR45zQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3829 (0xef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Validity
Not Before: Oct 6 17:44:59 2026 GMT
Not After : Oct 13 17:44:59 2026 GMT
Subject: CN=6ac5339c-e71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:08:de:d6:95:5a:f5:fd:9a:d3:56:f1:a5:
44:74:ff:5b:69:63:d6:1b:b6:26:35:a9:dd:49:01:
2d:c1:b4:49:a4:b2:3b:83:f8:ea:52:10:87:17:d3:
a8:a4:4b:b4:eb:89:6c:38:35:7e:62:15:99:ee:36:
63:11:8f:69:cd:a4:48:98:6e:2f:2d:05:61:b2:30:
73:10:07:db:4e:18:28:93:7e:16:a2:60:1e:a9:fb:
96:27:e4:9d:00:05:4a:4e:c0:42:b2:78:b7:87:c2:
c8:a4:bc:95:26:e0:ba:97:c7:6f:bd:3f:c6:68:3c:
3f:6c:00:5b:a1:95:5b:fa:46:ab:2f:72:02:44:1e:
4f:a1:66:15:d0:86:77:e6:d0:f8:72:c2:53:0a:4d:
dd:ee:23:25:76:e0:53:22:20:7f:fc:f6:5e:e1:db:
f3:c2:d6:28:b9:3c:ce:6e:31:c8:35:ac:86:c1:d3:
c8:e6:26:1b:e5:4b:17:1e:cb:65:a2:d7:07:59:b0:
c1:34:b9:8f:82:ac:95:15:ce:9b:87:c7:db:b3:e1:
17:fe:5e:87:6e:de:c3:42:4e:1e:79:85:c0:f1:4a:
85:fb:68:c3:a8:08:f5:e0:97:ff:59:ca:cd:22:2a:
52:ec:54:27:f6:25:fe:d5:7c:40:c6:63:df:06:ad:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:4B:4E:22:3D:2B:90:83:50:73:0F:94:13:E2:DA:CD:1E:8D:15
X509v3 Authority Key Identifier:
keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:6a:e0:e6:10:e5:65:a8:1e:90:ae:1f:00:a1:5b:92:09:
e4:9c:e6:11:91:f6:0a:66:cc:d8:f7:b0:e6:79:98:87:d3:e9:
b8:b3:82:e5:8c:1c:c3:45:c0:25:29:66:b1:88:2c:15:11:e1:
70:78:33:4e:90:f0:62:b2:5b:af:0b:0f:d6:43:36:a9:14:52:
c2:ba:e7:ce:27:81:8b:48:8f:b8:1e:82:5f:87:f4:1a:85:6a:
31:e1:b3:d4:9c:3c:59:b7:27:56:50:52:8e:bb:39:8d:04:83:
26:39:e8:73:35:0a:46:97:14:71:75:ac:be:cc:49:3a:42:53:
16:c7:f2:51:9b:d6:9e:ae:6e:66:ac:a8:77:93:54:9c:26:9a:
fa:10:b3:6d:98:0b:35:92:46:73:f5:33:d5:6e:6e:ec:b0:86:
6b:49:3c:e5:b2:6d:80:e2:b3:8e:5e:2c:1e:7a:b2:25:4c:f1:
5f:c0:ba:cc:1b:e9:74:d2:48:42:88:20:16:ab:c7:d7:d8:64:
ca:32:40:8b:23:52:73:27:66:a5:c3:85:14:34:e6:fc:5d:d6:
46:db:a4:97:f9:a6:76:dc:a6:09:d6:39:63:ac:20:46:e7:6d:
fd:cc:cb:20:72:9d:ec:ea:c0:10:44:80:b1:9b:a8:af:46:a3:
65:1d:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:31 2026 by rpki-client