
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: waRA8FN9PA4Zdbwc+aZ7baQ7ARZefKkzBcEHxl0GTp4=
Subject key identifier: 69:23:01:A9:6D:81:26:21:20:71:01:37:A6:42:0B:68:D7:59:45:11
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: B8
Signing time: Mon 05 Oct 2026 07:29:19 +0000
Manifest this update: Mon 05 Oct 2026 07:29:19 +0000
Manifest next update: Mon 12 Oct 2026 07:29:19 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: ELXeRLtRWZIg4BOHjorL0kyUfL248Q5iZd5rT6twQ0U=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Oct 5 07:29:19 2026 GMT
Not After : Oct 12 07:29:19 2026 GMT
Subject: CN=6ac351cf-3e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:df:bc:fa:a8:fa:a3:4e:15:ba:db:1d:ec:
ed:ba:61:df:b7:e5:fc:4e:5e:5f:09:68:34:51:6e:
87:79:b3:ce:b3:d4:d4:02:13:b2:a2:c9:c3:65:7e:
bc:9c:5d:a7:b7:d8:90:e6:f6:b3:ae:1b:01:7f:38:
fd:b0:c5:9f:45:45:8d:3f:2e:7c:53:ab:4b:16:15:
cb:00:ac:68:6f:8b:00:2a:17:d9:21:c8:91:65:81:
37:af:99:f8:0f:1f:95:d6:6c:8f:d4:0e:71:06:fc:
9d:49:eb:46:11:63:54:27:64:10:26:9b:16:14:f6:
56:35:0b:df:b1:af:68:c5:e3:c0:15:32:ce:9d:01:
2b:2e:dc:6b:2e:a2:9e:c7:2e:89:39:e1:5b:66:8e:
99:12:7b:07:7f:a6:b4:58:3b:46:30:57:cb:7e:58:
7f:7b:8d:95:7e:41:82:67:2f:23:e4:4e:ba:14:cd:
ba:18:42:3d:27:c6:d4:55:3e:a2:76:6b:8c:4c:d6:
ed:b2:8e:cf:33:61:eb:4e:e0:83:4e:0f:ae:2f:1d:
12:b1:76:42:d6:d9:a8:82:b7:54:3e:65:10:05:2e:
b7:95:e8:0e:1f:eb:1d:ee:46:a0:c1:13:d0:59:e7:
5c:9b:7a:79:a4:62:6e:d5:d9:e6:0b:a8:8b:0f:c7:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:23:01:A9:6D:81:26:21:20:71:01:37:A6:42:0B:68:D7:59:45:11
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:f8:96:40:c3:70:e2:ca:f5:a1:aa:74:49:56:b9:3c:38:
b7:48:96:59:71:43:19:84:c6:d5:66:45:67:71:c9:5e:b9:33:
c3:c6:e3:e7:8d:16:63:98:28:fe:19:a9:ce:ea:3b:b3:07:6c:
6d:94:90:c4:d8:54:c0:25:04:fd:5f:e6:bb:ea:2c:33:21:77:
fb:b7:82:d9:f1:8b:3c:8d:02:98:c3:d3:f6:3c:a3:f1:c4:78:
35:4c:5c:50:d0:c9:6a:56:2f:0b:9a:67:4f:44:f9:58:a4:2d:
62:5b:58:c1:97:09:81:67:4b:a0:f8:f2:42:7b:e1:62:11:52:
6f:4a:b1:c5:44:9d:a9:fe:4a:4b:e8:0d:21:04:9a:f6:f3:ae:
a4:7c:90:e9:34:81:20:56:cc:29:f2:f7:be:28:4f:00:1a:b6:
50:f8:81:da:76:47:76:db:ac:9e:28:b8:6a:6a:96:f7:df:83:
cf:05:16:d4:95:80:5b:5d:7b:cb:3a:e6:91:eb:4f:ce:ce:09:
8d:13:c4:3a:7d:e8:8d:6b:82:fa:fd:58:07:cb:b2:a3:62:5d:
85:0f:9b:1f:0e:09:cd:57:5e:e6:31:e0:f2:ce:fe:61:37:42:
25:ba:69:c1:ec:9a:70:5c:a9:18:25:40:fd:0d:e5:7e:06:34:
c7:ad:c1:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZFQzIxMTAvBgNVBAUTKDc0NUQ1NzdGNUI4RTdENEY4REI0OUE4REI5QUNCMTNG
QzI1QUEyMzMwHhcNMjYxMDA1MDcyOTE5WhcNMjYxMDEyMDcyOTE5WjAYMRYwFAYD
VQQDEw02YWMzNTFjZi0zZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxW3fvPqo+qNOFbrbHeztumHft+X8Tl5fCWg0UW6HebPOs9TUAhOyosnDZX68
nF2nt9iQ5vazrhsBfzj9sMWfRUWNPy58U6tLFhXLAKxob4sAKhfZIciRZYE3r5n4
Dx+V1myP1A5xBvydSetGEWNUJ2QQJpsWFPZWNQvfsa9oxePAFTLOnQErLtxrLqKe
xy6JOeFbZo6ZEnsHf6a0WDtGMFfLflh/e42VfkGCZy8j5E66FM26GEI9J8bUVT6i
dmuMTNbtso7PM2HrTuCDTg+uLx0SsXZC1tmogrdUPmUQBS63legOH+sd7kagwRPQ
Wedcm3p5pGJu1dnmC6iLD8dpnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkjAalt
gSYhIHEBN6ZCC2jXWUURMB8GA1UdIwQYMBaAFHRdV39bjn1PjbSajbmssT/CWqIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkVDMi9CODJBOUExQ0I4
N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZVLU50SnFOdWF5eFA4SmFv
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9qTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkVDMi9CODJBOUExQ0I4N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZV
LU50SnFOdWF5eFA4SmFvak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXRv4lkDDcOLK9aGqdElWuTw4t0iWWXFDGYTG1WZFZ3HJXrkzw8bj540WY5go
/hmpzuo7swdsbZSQxNhUwCUE/V/mu+osMyF3+7eC2fGLPI0CmMPT9jyj8cR4NUxc
UNDJalYvC5pnT0T5WKQtYltYwZcJgWdLoPjyQnvhYhFSb0qxxUSdqf5KS+gNIQSa
9vOupHyQ6TSBIFbMKfL3vihPABq2UPiB2nZHdtusnii4amqW99+DzwUW1JWAW117
yzrmketPzs4JjRPEOn3ojWuC+v1YB8uyo2JdhQ+bHw4JzVde5jHg8s7+YTdCJbpp
weyacFypGCVA/Q3lfgY0x63BAw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:16:40 2026 by rpki-client