
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier: WROeFOBgHKtOrJCzeYWA3CCaH2MculLFK0ytoNvqXV0=
Subject key identifier: C1:97:BA:64:31:A8:EE:9A:53:A2:D7:CB:FA:CB:00:D3:E9:29:64:35
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial: 0969
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number: 095B
Signing time: Sat 24 Oct 2026 20:06:40 +0000
Manifest this update: Sat 24 Oct 2026 20:06:40 +0000
Manifest next update: Sat 31 Oct 2026 20:06:40 +0000
Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: OMvNSeCyUID4UK3MHIprCB9xqc5YxZRdL8oUUlm5gfY=)
2: C9350D664F1E11F1B02A3F9FAD833773.roa (hash: fpG48xCdaUdNQMt55dQ4qwrwQHHc3YVMoK9lmGVCSsA=)
3: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: A/vW/8y1/8Csuv1WZEdk6lJbCOT0BwYWD575nFNCBMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Validity
Not Before: Oct 24 20:06:40 2026 GMT
Not After : Oct 31 20:06:40 2026 GMT
Subject: CN=6add0fd0-23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:00:06:15:88:8c:ff:b7:48:a0:f9:92:42:
c3:dd:8d:95:2b:0f:1a:75:2e:e8:8a:ae:c2:a1:94:
43:ec:07:32:01:17:d5:68:cb:42:ef:cd:a4:be:95:
ab:12:d2:35:11:07:6e:07:2c:87:b5:40:49:ba:81:
24:a7:65:ca:f8:72:5e:33:8d:23:22:6d:cd:dd:b4:
eb:d0:0e:0c:cc:5d:67:13:9a:0d:88:bc:95:ec:dc:
ea:8b:68:25:f3:16:5f:46:58:c9:bc:5b:40:b6:5a:
00:e6:e9:13:23:3f:f7:e7:e0:34:ce:ed:38:5d:51:
8e:79:41:cf:ca:69:68:92:cb:c3:a8:8d:32:f2:89:
8a:34:80:7b:46:5a:a0:a0:96:3d:c7:d4:49:2b:9f:
0f:1c:ca:99:d4:58:d0:47:4e:e2:3d:01:21:5a:4f:
fc:d6:b1:02:c7:d9:32:61:62:ec:fb:9c:0a:e7:0c:
37:85:29:a5:86:27:29:86:6d:09:b6:f6:e7:0d:6b:
7d:a6:88:b3:18:b3:04:03:65:09:43:6e:f0:68:e7:
be:f3:b2:a9:09:7c:c4:3e:44:7c:c3:e7:fa:cf:2a:
65:64:68:4c:e7:93:59:9b:46:bc:64:41:0f:66:51:
4e:9b:bc:29:d2:ef:40:bc:45:37:df:db:1a:ee:c1:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:BA:64:31:A8:EE:9A:53:A2:D7:CB:FA:CB:00:D3:E9:29:64:35
X509v3 Authority Key Identifier:
keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:18:db:54:51:1f:4e:63:31:09:6d:72:6f:21:4e:d6:f4:
46:a1:c0:31:ae:da:c8:40:5a:83:ba:3c:bc:ca:21:50:6a:49:
c0:a8:df:6d:e0:33:aa:7a:24:38:33:92:bb:67:50:ab:c9:87:
38:70:67:b7:5f:11:f1:e6:5b:e4:56:f0:29:2f:dd:20:d7:42:
61:d8:50:57:f5:40:ac:64:e5:6d:1a:a2:5d:cc:bf:13:44:57:
c5:0d:7d:0e:33:e9:be:bf:12:8f:ca:cb:3c:ca:e0:9a:8e:07:
0c:95:3a:be:2d:86:9b:21:d7:87:1c:0c:d9:26:86:dc:37:5d:
6f:e8:59:05:62:49:64:27:ff:f8:a1:58:2e:f3:1e:e5:50:d1:
d5:ff:9f:75:e2:a6:90:a9:85:f0:20:ca:5e:92:85:7a:bc:ff:
85:cb:da:17:d7:76:a2:7a:73:31:19:01:08:9a:6f:a3:c5:ac:
a3:73:5a:e1:57:86:07:75:2f:a1:47:49:b5:3d:b6:0e:14:e0:
58:3b:cf:24:4c:d3:8c:5f:82:ee:62:76:23:05:15:31:84:bf:
d3:5f:ae:e0:74:cd:e2:82:75:63:a0:09:e9:a6:e2:5a:f5:13:
aa:fe:87:0f:e9:27:43:30:ae:7b:20:ae:1b:0f:ef:65:65:63:
2b:40:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:19 2026 by rpki-client