
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: XpvuMYXeUk5xvtCyX/F1RURLVjp0/zQHvULePX8hFAM=
Subject key identifier: 2D:D7:04:85:59:8F:6C:AF:72:4A:45:D6:4B:6C:B9:9F:05:A7:82:D1
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 01C6
Signing time: Sat 19 Sep 2026 04:01:01 +0000
Manifest this update: Sat 19 Sep 2026 04:01:00 +0000
Manifest next update: Sat 26 Sep 2026 04:01:00 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: TYmc/n6B1IxFIdoHaPg44B/j1Rg7oKMB9mVrQ4QDuc0=)
2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Sep 19 04:01:00 2026 GMT
Not After : Sep 26 04:01:00 2026 GMT
Subject: CN=6aae08fd-86ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:27:45:f0:b4:b5:8f:f8:d5:60:b1:53:71:
b7:53:92:11:02:d5:67:3d:b2:17:60:7a:ba:cd:ca:
c1:e7:76:9e:95:57:94:d3:ac:ef:ce:df:0c:53:c8:
18:48:9c:91:89:79:49:67:78:b1:49:07:b9:ac:dd:
6e:f7:25:d9:8c:f7:18:35:b8:fd:5b:5a:19:cd:6b:
b0:8e:e7:48:a2:e7:5d:4e:b9:d7:5f:42:a2:a1:77:
4e:dd:b8:6b:80:ff:42:df:df:5c:d4:30:31:18:28:
11:42:65:33:82:6d:82:5a:e8:c9:52:5a:40:bf:15:
76:af:7c:82:13:d2:20:59:62:0e:27:3e:6d:89:4c:
05:8c:7a:16:bd:4b:a5:f9:f7:a6:da:9b:74:17:ed:
88:85:93:75:21:67:97:16:0c:34:cd:88:59:50:ad:
b9:c7:62:c4:96:c2:fa:7b:01:1d:63:e3:bc:be:99:
4c:57:64:b9:35:3b:9d:5d:bd:17:4a:ed:e9:cc:c2:
7e:f8:55:1f:fc:a4:e8:b3:3d:ae:87:dc:6b:b4:ba:
a2:ea:da:ae:2a:69:4d:25:db:86:5f:a1:9c:0a:63:
de:f7:ac:9e:6c:57:a0:68:cf:c2:b1:e4:20:07:4f:
fd:03:09:91:5a:e7:e7:84:ac:57:66:82:50:97:7e:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:04:85:59:8F:6C:AF:72:4A:45:D6:4B:6C:B9:9F:05:A7:82:D1
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:20:75:9e:1b:10:7b:a4:7d:90:fb:24:95:05:cf:5e:24:
dc:ae:93:c8:f1:f9:94:01:a9:c0:9d:e8:fd:0e:2b:65:92:b7:
b4:8f:e1:3e:0c:6f:d9:6d:69:85:7b:82:fd:b1:6f:3a:e7:74:
c8:b2:d6:0e:df:8c:1a:7e:a6:c6:ee:4e:da:01:5a:33:bb:64:
99:5f:25:12:95:42:ff:4d:9f:7b:4d:2a:a3:b9:e0:69:53:2c:
a6:79:54:af:e8:11:b7:d0:70:fb:c4:11:98:0d:66:63:ab:cc:
0b:8d:03:d7:e7:07:ca:bd:00:ab:f7:e9:a4:e5:7a:9d:86:60:
26:6e:de:a0:27:8a:c8:87:25:c8:56:a9:c2:bb:b2:61:4d:fc:
cd:4f:80:c0:ba:b3:91:f4:f1:60:dc:65:f8:1b:78:88:99:80:
de:27:9e:f2:2b:92:0b:07:fa:98:58:06:4d:2a:6f:4a:8e:90:
8e:a8:82:c6:67:cb:e1:82:1e:1e:34:af:5f:4a:03:17:ea:e3:
e7:be:ef:d9:fe:74:28:e0:c5:62:37:18:8b:49:51:1b:77:cc:
67:18:9a:d7:f1:8b:13:78:7e:5f:56:9a:51:ee:21:82:e6:73:
7a:45:d1:d2:5e:a3:48:bb:28:53:2c:1f:3d:11:7f:72:ca:77:
34:5d:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:22:39 2026 by rpki-client