
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json)
Hash identifier: SiaY1OLUPgXZKcozM9/zD8zKV+GFyB2yCbeEh7KO0dk=
Subject key identifier: FF:F5:C8:D4:9C:31:5D:40:35:A0:DE:18:AB:10:D1:0C:77:76:38:19
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial: 050E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
Manifest number: 04E9
Signing time: Tue 06 Oct 2026 23:50:41 +0000
Manifest this update: Tue 06 Oct 2026 23:50:40 +0000
Manifest next update: Tue 13 Oct 2026 23:50:40 +0000
Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: Gwvx5hNM6tKphjBqk/zpw3MrXinFx8VhIvZDV7TKy4o=)
2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: acqTZFyzsES/Jw8lzPnjdR3O1fOEuCWSbHFZnsAZDc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Validity
Not Before: Oct 6 23:50:40 2026 GMT
Not After : Oct 13 23:50:40 2026 GMT
Subject: CN=6ac58951-8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:76:d6:c4:00:e6:36:7e:e5:2f:71:8d:cc:
19:00:3a:2c:76:68:17:87:7b:19:81:f9:60:02:28:
b9:45:bb:c3:3f:4b:76:67:4d:eb:0f:f4:be:d4:8f:
39:1a:50:12:5b:02:25:8a:dc:a2:af:56:7d:17:70:
11:c0:e0:47:03:c7:d3:82:a6:91:6c:5f:fe:cd:25:
10:75:59:40:87:2c:fe:d4:e0:38:27:b1:e7:79:e2:
85:04:4e:f2:1a:77:95:9e:06:c2:96:0b:08:e7:11:
88:e5:d7:82:d1:e7:cb:7e:3a:b0:c5:78:8d:ff:e1:
2c:dc:49:28:43:cc:cc:e8:f9:7a:9b:e3:63:60:34:
58:07:56:64:64:ef:b6:c4:e8:21:9f:9c:a2:d1:55:
39:1d:6f:69:08:8b:b4:43:bc:d3:72:04:68:43:1e:
46:52:f3:6c:7c:ab:7b:7b:0a:7e:64:81:fd:79:b3:
14:cf:24:cf:d1:8e:fc:1f:24:c8:62:ab:bf:b6:1a:
61:31:d6:83:08:98:73:7e:86:9f:17:28:d1:2c:9f:
13:69:54:ad:23:ee:19:26:ea:50:c1:1e:26:60:4f:
52:f3:a8:e1:db:82:9e:52:be:93:f1:e7:9f:2d:8d:
e1:20:71:f6:4a:78:c3:ee:bf:70:9a:47:43:09:36:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:C8:D4:9C:31:5D:40:35:A0:DE:18:AB:10:D1:0C:77:76:38:19
X509v3 Authority Key Identifier:
keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:60:df:c7:c0:8a:e0:92:33:14:1f:7f:b3:09:55:5a:fa:
44:2f:1f:d4:72:51:3f:bb:5a:ae:0b:cb:ad:7a:d0:fd:e2:bb:
4e:c7:29:8d:ab:db:ba:52:9b:3d:da:21:59:d2:35:27:7f:81:
53:9e:4f:7b:2b:6f:5e:69:bc:f7:7d:ae:1c:59:4d:ab:ec:9d:
01:ad:f8:32:7b:ab:6b:60:41:6b:fb:c6:30:c5:58:f0:5c:a1:
8e:a9:13:c6:df:67:30:cf:d5:e2:49:2c:1e:2a:9e:f1:bd:22:
83:61:e3:35:4f:5f:43:c7:1f:20:01:5a:31:6c:27:a9:60:f9:
de:e1:a5:2b:04:8c:e4:df:35:cb:05:fb:b9:62:20:ae:ab:01:
1e:a2:05:bf:02:cb:15:47:68:12:d2:94:a7:fc:b8:9d:32:b3:
4b:38:2c:75:bc:12:8b:a1:e1:11:5e:f9:4e:b2:05:ad:7d:e7:
0f:e7:74:b5:c3:d8:b5:de:ac:a5:5a:7a:6e:f8:10:63:da:99:
20:63:8b:67:a1:b7:3a:6c:70:a1:98:5e:e6:4e:3e:4d:79:21:
bb:16:89:11:b9:2e:c3:c9:3c:c4:c1:db:ec:52:27:30:0a:0f:
40:0a:49:92:8d:e3:bf:87:9c:b1:7e:14:f4:0f:35:0b:be:53:
a5:7e:1d:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF
Q0M2NjNFRUQwHhcNMjYxMDA2MjM1MDQwWhcNMjYxMDEzMjM1MDQwWjAYMRYwFAYD
VQQDEw02YWM1ODk1MS04NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4921sQA5jZ+5S9xjcwZADosdmgXh3sZgflgAii5RbvDP0t2Z03rD/S+1I85
GlASWwIlityir1Z9F3ARwOBHA8fTgqaRbF/+zSUQdVlAhyz+1OA4J7HneeKFBE7y
GneVngbClgsI5xGI5deC0efLfjqwxXiN/+Es3EkoQ8zM6Pl6m+NjYDRYB1ZkZO+2
xOghn5yi0VU5HW9pCIu0Q7zTcgRoQx5GUvNsfKt7ewp+ZIH9ebMUzyTP0Y78HyTI
Yqu/thphMdaDCJhzfoafFyjRLJ8TaVStI+4ZJupQwR4mYE9S86jh24KeUr6T8eef
LY3hIHH2SnjD7r9wmkdDCTYIKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/1yNSc
MV1ANaDeGKsQ0Qx3djgZMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF
OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY
d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX1xg38fAiuCSMxQff7MJVVr6RC8f1HJRP7targvLrXrQ/eK7TscpjavbulKb
PdohWdI1J3+BU55PeytvXmm8932uHFlNq+ydAa34Mnura2BBa/vGMMVY8FyhjqkT
xt9nMM/V4kksHiqe8b0ig2HjNU9fQ8cfIAFaMWwnqWD53uGlKwSM5N81ywX7uWIg
rqsBHqIFvwLLFUdoEtKUp/y4nTKzSzgsdbwSi6HhEV75TrIFrX3nD+d0tcPYtd6s
pVp6bvgQY9qZIGOLZ6G3OmxwoZhe5k4+TXkhuxaJEbkuw8k8xMHb7FInMAoPQApJ
ko3jv4ecsX4U9A81C75TpX4dwA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 09:31:31 2026 by rpki-client