
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: 7WDon5ylbitaQ68nydswAPBAxKj9PH/akK2WQwa/GCc=
Subject key identifier: 1B:CD:76:B2:55:6F:2D:9B:21:B9:16:B7:D5:E2:43:B6:4F:A9:D5:9F
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0F10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0EFF
Signing time: Sun 04 Oct 2026 17:41:12 +0000
Manifest this update: Sun 04 Oct 2026 17:41:11 +0000
Manifest next update: Sun 11 Oct 2026 17:41:11 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: 8wgNSMllol++U0qzfc0eLlDJw7W+zP3srY807E4bJYM=)
2: AFAF715E4F6111F180E0E950C4833773.roa (hash: GsyceID1s8Z+mukTTJfCIBEy3HjQ/O+E/I8IMk9cFiY=)
3: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: KxaalTuXmVHTC/PqLPVKmWsPS+0d2mZX8XaIQL52HzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3856 (0xf10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Oct 4 17:41:11 2026 GMT
Not After : Oct 11 17:41:11 2026 GMT
Subject: CN=6ac28fb8-72fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:d6:85:00:33:17:77:c5:90:d7:1b:14:b7:
cb:82:6b:0e:30:8d:c2:09:cb:c2:23:38:2e:49:34:
02:67:62:0f:ba:8f:26:4f:99:6f:76:89:52:86:29:
c8:43:ea:8f:18:42:7c:7e:cc:bb:9b:fa:02:65:a8:
28:c0:2f:e8:21:e3:b6:17:fd:11:ec:b1:fb:40:e1:
3f:95:e3:9a:c5:92:b2:3f:a2:b0:8a:87:fd:52:09:
43:56:8b:b7:cb:47:df:81:e2:22:a3:1d:9d:bf:34:
c9:3d:14:15:4c:e2:56:77:04:2e:47:6c:fc:51:7e:
9d:87:f3:29:78:0e:02:1b:c1:40:18:dd:88:03:03:
2a:3b:3e:50:3a:ef:0b:64:4c:8a:ae:9e:6b:46:15:
66:f1:3b:d2:40:e3:0a:ae:43:18:3d:31:12:91:23:
55:5c:62:cb:3a:3f:b2:dd:75:7b:4d:74:ce:4d:41:
e4:07:ce:45:6f:d6:94:f7:cd:5d:06:78:7a:28:22:
7f:ea:83:72:2a:8b:6d:b8:0b:47:18:ad:56:65:21:
d1:74:90:7b:ef:e8:c1:54:ee:64:24:e0:d3:63:34:
f2:a6:84:b5:a9:15:21:a1:d3:04:f4:99:2e:a2:04:
90:a3:82:ee:ba:e8:53:5b:35:26:61:6f:4f:1b:d0:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:76:B2:55:6F:2D:9B:21:B9:16:B7:D5:E2:43:B6:4F:A9:D5:9F
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:83:80:79:62:a7:96:cd:26:16:83:83:a9:a2:33:3a:16:
9b:0c:1b:f3:92:8f:14:f2:08:54:56:80:b3:5f:af:52:f5:9f:
f0:09:1e:5a:f7:3d:f3:c6:22:d2:00:2e:88:d9:37:ab:3a:fd:
c5:53:4e:1f:55:90:8a:f6:08:74:4f:98:cf:53:e3:12:e0:c2:
4d:4d:04:d4:e7:9e:28:2f:d9:8b:1c:93:4e:cd:ee:97:d4:48:
7c:10:cd:5b:bb:22:5d:01:bc:a0:b7:41:fc:9e:0a:86:1a:8b:
a0:db:14:42:bc:be:b9:a9:f2:33:f3:f2:a9:4a:e9:d8:db:d4:
f5:8b:09:ba:bf:af:78:cf:40:1f:5b:ea:b0:37:f8:ef:b5:55:
c6:a5:71:7a:b5:be:7f:82:9e:ed:8e:de:65:f7:96:bc:09:1f:
b5:df:f8:69:a6:26:1e:02:27:12:2e:52:a3:fc:d0:9f:09:d7:
f1:ea:96:e5:42:0f:81:9d:3a:4d:f6:08:10:cb:83:91:49:40:
68:6b:a0:ac:60:32:9a:86:86:03:af:ed:b1:2d:3d:49:c3:d2:
db:77:2f:7b:06:f8:07:ad:ae:13:b9:7f:39:d4:62:ff:f6:07:
db:32:1d:90:4a:c8:75:4f:5d:51:15:2c:d8:24:91:11:e2:8e:
9d:53:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:23:56 2026 by rpki-client