
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json)
Hash identifier: 49a8UEni97qg3LqoBMh1LDdI/Tu8+9QEjK+7nSVzv+k=
Subject key identifier: CD:E8:47:A3:02:CD:89:1F:D0:FE:AC:D4:43:97:7D:33:17:2F:F9:D2
Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
Manifest number: F6
Signing time: Tue 27 Oct 2026 06:42:38 +0000
Manifest this update: Tue 27 Oct 2026 06:42:38 +0000
Manifest next update: Tue 03 Nov 2026 06:42:38 +0000
Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: vRozhNH0Y0+QjcZSKTdfD9Yewjt4164tE3ggYe5vp/8=)
2: 76B542B0A84011F194FA91243A11F970.roa (hash: Ikz0D3kqkyqo0E9vWshLiMP6ATZdwtVz365rPjNjhYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Validity
Not Before: Oct 27 06:42:38 2026 GMT
Not After : Nov 3 06:42:38 2026 GMT
Subject: CN=6ae047de-20de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:2c:8c:b2:44:d2:a2:5d:c1:36:3e:b4:af:
b0:fa:3d:fe:9d:7e:ae:2b:42:1a:87:6b:23:85:58:
25:74:32:95:96:3b:98:e1:06:45:c9:4e:90:88:38:
a1:36:cf:c9:5c:46:a0:54:0d:6f:18:1b:c6:83:85:
ec:e2:ae:64:94:19:54:d5:6d:55:b6:86:1d:21:db:
25:6f:6d:6c:2f:50:94:e7:5b:26:79:d4:ab:e8:92:
6c:28:08:07:ea:52:ee:67:e2:21:09:83:30:49:68:
8c:b5:ce:0b:0c:d9:d6:69:80:62:c4:51:cc:41:4f:
ad:36:5f:cb:08:88:95:cd:2c:0e:db:8e:a2:bc:7c:
cf:6d:ca:55:f7:99:c6:dd:f2:74:b1:c7:4b:59:e4:
ef:f0:8c:ae:ff:6d:02:fc:99:02:e6:99:fe:d5:3b:
db:2a:a0:b9:33:1f:b2:d1:2c:e7:2d:83:84:5c:5b:
dc:55:d1:79:4b:1c:cb:69:90:4c:ac:2b:e6:0f:f2:
95:f9:85:94:6f:f7:4f:fb:79:31:a0:0c:77:71:fd:
ed:36:19:87:99:44:2c:bf:13:74:57:1d:2f:5e:d6:
3a:70:5a:29:94:27:2e:58:3c:39:5e:57:09:42:ad:
75:ab:db:e4:27:e4:9b:ab:19:4a:28:97:be:7e:f3:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:47:A3:02:CD:89:1F:D0:FE:AC:D4:43:97:7D:33:17:2F:F9:D2
X509v3 Authority Key Identifier:
keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:21:e7:61:e6:b1:1f:be:e5:8a:3f:4b:96:b7:e8:14:cd:
69:b8:cf:aa:95:a8:d1:9e:01:c5:81:86:e3:85:82:95:a6:f0:
fc:38:a9:21:c8:63:ab:22:ac:06:89:f2:b5:a7:14:bb:4f:4c:
ee:28:0b:ca:05:6c:63:fb:b1:33:b9:71:52:d9:36:b7:9a:a0:
03:4f:08:ec:97:21:31:56:9e:90:e8:46:87:21:9d:5b:57:4e:
49:06:7a:3d:81:e2:7a:f8:5c:8a:10:57:8e:15:05:4a:50:b2:
61:f0:28:cd:c8:69:4b:09:3a:bb:8c:87:bd:14:fe:1d:e3:b0:
f6:1c:a4:0f:f9:16:2d:3f:9c:21:24:e0:50:9a:d7:e7:60:4b:
ea:8d:b4:73:52:f4:0c:df:0d:08:aa:9c:1e:84:d1:42:1a:53:
3d:51:04:5c:08:5c:07:3b:25:8e:01:e9:f0:ae:e4:e9:ec:0c:
2a:7d:bc:16:18:57:51:8a:9d:58:d4:60:69:50:aa:38:3c:24:
7f:d1:46:eb:22:55:70:fc:34:8a:50:06:e2:ec:20:7a:c3:39:
ac:22:5a:e2:b2:23:41:38:72:b5:7d:22:d5:82:56:c2:6f:8a:
03:5d:d1:12:b1:0c:37:8c:53:b4:5a:8e:90:b0:14:52:0f:16:
50:80:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:11 2026 by rpki-client