
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
File: rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json)
Hash identifier: 9nFsn8DyRbO60X2PLxqYxGwQ9oTLIjlbD4h/2Maf8WU=
Subject key identifier: 61:63:48:01:D2:FF:0E:53:0A:35:C7:AF:01:6F:6B:04:C5:BE:46:8C
Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
Certificate issuer: /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
Manifest number: 3F
Signing time: Thu 03 Sep 2026 08:45:16 +0000
Manifest this update: Thu 03 Sep 2026 08:45:15 +0000
Manifest next update: Thu 10 Sep 2026 08:45:15 +0000
Files and hashes: 1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: 3Iy4UALtLnP8BoVp3AYg+6HKyBfBH58QbTZG6VOomY0=)
2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Validity
Not Before: Sep 3 08:45:15 2026 GMT
Not After : Sep 10 08:45:15 2026 GMT
Subject: CN=6a99339c-ffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:db:4f:63:12:ec:5f:06:9e:34:62:3d:dc:
99:93:09:c6:b4:e8:2c:eb:53:7a:8d:c0:f1:4d:5a:
c4:38:ff:fc:a4:b9:52:fd:14:0e:6a:cc:47:b7:b9:
70:f9:84:d3:40:aa:10:39:a8:ac:3f:e3:bc:7c:1e:
a8:e8:47:a5:c6:c6:00:01:97:c2:57:ab:6e:20:5a:
12:7b:91:2a:3c:a9:c7:e1:55:ed:f1:90:df:62:ce:
1e:75:e4:14:0b:e5:b9:de:01:c2:0e:4c:07:eb:ff:
f3:77:d2:b8:5b:8d:bf:a8:6e:f0:82:16:95:2a:9a:
05:a2:1d:e3:fe:bb:24:9f:e5:62:eb:91:20:8f:81:
34:28:f9:16:17:47:a8:00:81:de:29:d2:2c:6e:c3:
7d:82:4b:ae:3e:3b:c0:9e:93:98:50:c2:01:07:a3:
34:fa:db:08:3e:02:15:1a:ab:71:a6:74:d3:36:49:
23:d7:5a:d4:b5:ef:09:6f:32:5c:1b:ce:cd:8a:f0:
21:0e:95:29:b3:9d:a1:ed:41:ac:86:85:61:9a:a4:
42:24:81:7b:4f:28:96:d2:52:70:3a:d8:03:7a:7b:
a7:f6:bb:69:4e:89:11:bb:34:64:5d:fb:56:31:56:
6c:b0:f2:14:52:66:e3:b6:e2:41:86:cf:26:d2:d6:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:48:01:D2:FF:0E:53:0A:35:C7:AF:01:6F:6B:04:C5:BE:46:8C
X509v3 Authority Key Identifier:
keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:c9:61:41:4d:13:bb:8f:c1:89:fe:2d:5d:77:c2:9b:dc:79:
a4:e4:e5:f7:cd:6c:59:1b:7d:8b:58:89:ec:9f:d2:99:6d:0b:
3e:79:d0:06:74:9c:bc:4f:3d:f9:86:df:a5:7a:b2:2d:19:44:
f7:5d:cc:38:57:74:26:ba:38:d4:74:c3:68:67:95:39:37:9d:
83:02:6f:12:bb:f0:23:c5:c8:fe:45:99:b6:25:d7:59:a0:3f:
9a:d8:33:9b:fd:2e:f2:21:2e:d4:16:32:24:71:7e:9b:a0:c1:
b7:59:22:d5:22:8f:20:ac:3b:f6:d4:cc:9b:48:cd:01:85:37:
51:65:bb:87:92:24:68:4e:49:f0:2f:75:45:47:c8:d6:0a:03:
aa:4b:5a:a4:2d:1e:75:00:15:fa:15:b2:c7:90:78:90:38:39:
b8:12:9b:81:19:7a:3b:ae:33:04:82:85:91:b4:38:3d:26:a6:
12:4c:15:1a:f2:06:1e:8a:14:1c:85:d2:9b:61:8a:51:af:13:
c7:bc:4f:1f:40:ef:5e:a1:7a:4c:15:76:e0:e7:8a:0f:aa:cb:
2b:0b:73:8f:3d:1f:77:e5:a8:27:8b:06:77:24:de:12:ed:96:
dc:db:d2:08:31:3a:0d:b0:d4:f6:f9:b2:c8:6c:8c:1e:8b:30:
89:15:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:12:19 2026 by rpki-client