
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier: mEmw2hSl9SbMGGOzYR9z/ScDBOXf2pKw4qoHqGt2wkM=
Subject key identifier: 11:11:69:8B:A5:80:0E:89:E7:F2:72:97:A3:E0:C2:56:35:6D:FD:2A
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial: 1CF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number: 1CDB
Signing time: Wed 30 Sep 2026 16:15:45 +0000
Manifest this update: Wed 30 Sep 2026 16:15:44 +0000
Manifest next update: Wed 07 Oct 2026 16:15:44 +0000
Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: zB9IIkDbgQVEIH4maTqZ5Qqd2K6iI9aqJn3T2zvYm3E=)
2: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=)
3: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 16:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7409 (0x1cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Validity
Not Before: Sep 30 16:15:44 2026 GMT
Not After : Oct 7 16:15:44 2026 GMT
Subject: CN=6abd35b1-4ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:e3:03:0a:e4:c8:54:f0:68:dd:d1:a6:4c:
9d:e4:ea:d2:97:b7:c7:d7:a9:f4:b5:c6:45:42:59:
9a:19:2e:19:90:d4:55:8a:3b:a0:51:cb:8e:d2:4a:
3d:12:f5:be:dc:39:f8:a6:cb:76:ec:83:0e:e4:ee:
69:43:fe:3b:77:39:e4:18:5b:75:26:10:90:52:13:
f0:10:a2:ed:c6:88:45:4a:39:56:76:24:72:ad:df:
49:52:58:46:73:db:67:67:06:2f:48:20:6f:b1:3e:
c7:34:4d:b1:15:f1:26:28:03:da:01:81:b8:15:f9:
4d:68:66:9e:c7:16:f0:26:4d:68:11:a1:00:26:78:
e4:6f:1c:aa:e4:cb:47:bf:b6:a1:f3:2b:1f:56:bb:
9a:f4:9e:87:ea:9e:ef:0e:d6:7b:40:ff:15:51:12:
ab:99:6f:66:ec:e8:90:6d:8d:07:49:ad:dc:60:ad:
11:a5:81:df:58:04:39:40:1a:2e:69:a3:06:e7:b1:
0a:06:00:bf:c8:9b:16:58:60:16:80:23:24:a1:3a:
5e:25:11:37:a7:3e:2d:01:b3:b5:3f:5e:26:72:cf:
e6:6b:71:2f:cb:dd:84:6b:a6:b7:0e:41:43:73:13:
23:b5:43:ce:96:83:b3:2e:40:58:62:f5:8e:ea:95:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:69:8B:A5:80:0E:89:E7:F2:72:97:A3:E0:C2:56:35:6D:FD:2A
X509v3 Authority Key Identifier:
keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:83:5c:8d:67:9c:be:48:a9:e0:a6:7f:ac:e0:2c:f9:5f:08:
19:ee:6f:ee:65:21:9f:73:c0:4f:07:b7:7e:7b:83:51:04:d5:
8f:cb:47:54:07:95:68:57:b5:ff:d1:b8:d7:e5:39:88:ff:2c:
39:68:25:d4:2d:ff:a2:bc:12:61:7a:97:7e:d0:43:db:b3:63:
e7:98:93:7e:20:25:8c:55:99:ee:a0:98:9e:b2:58:9b:8e:1d:
c2:7d:0e:61:ad:a4:c9:cd:3d:9d:92:d6:c9:4b:22:b0:2f:f4:
24:84:e0:b8:9e:8e:81:96:2a:22:ee:03:8f:0f:91:ec:6d:60:
1c:0e:14:ac:4b:76:46:0c:6d:5f:20:e1:16:74:6c:11:87:df:
70:66:73:dc:3c:6a:ce:d2:fe:c8:f0:05:62:4f:03:88:e6:57:
b9:c0:a8:70:fb:f2:03:20:bc:92:dc:4c:4a:d4:4b:2f:be:20:
64:f5:47:2a:ba:2b:86:23:fe:c2:f9:48:fa:e7:a1:ee:9d:20:
62:1c:6f:88:55:c9:e4:e5:07:5a:d7:d9:58:82:13:4d:3f:a5:
c8:1b:8d:37:c0:3f:ac:6d:0b:34:77:3e:af:23:3a:f0:cf:73:
48:cb:8a:26:fe:e5:e5:69:05:8e:a0:fb:0b:cc:15:19:69:e1:
0f:6e:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:38:34 2026 by rpki-client