
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier: zcdCfNJjyDzZDQ398+lcV5xxMal4SnZmkoveNqxBr+Q=
Subject key identifier: 1D:76:82:37:79:EE:CE:D3:DD:7A:7C:31:19:CB:82:0C:8C:02:F6:61
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number: 0D07
Signing time: Sat 26 Sep 2026 18:29:18 +0000
Manifest this update: Sat 26 Sep 2026 18:29:17 +0000
Manifest next update: Sat 03 Oct 2026 18:29:17 +0000
Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: fJYoIjvo7uUIW91LSQFpPoWWhCExQunTdJwTGdLBJlA=)
2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: PYg8vYLqddzplZL7Imsshpo8zF5g3CAK9J3XuN6h1WU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Sep 26 18:29:17 2026 GMT
Not After : Oct 3 18:29:17 2026 GMT
Subject: CN=6ab80efe-ea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:42:de:91:dc:6d:64:2b:15:f0:4b:13:cd:
20:d8:ea:7b:48:e5:3f:08:82:fa:73:a2:5f:9e:ae:
af:f6:25:51:1f:15:b4:68:c7:e8:b6:20:56:a0:75:
da:6a:c5:57:b6:5a:44:99:69:0e:71:2b:7c:7e:3f:
40:b9:6e:2e:4c:5d:be:bd:79:f4:06:f7:3a:20:17:
48:16:4e:ec:ef:08:58:bb:54:f9:b3:f7:6f:3b:0a:
c6:02:c8:ab:76:b5:1d:e3:eb:88:0d:ab:a0:e1:9e:
a6:fa:fb:36:51:2b:e9:51:c1:b8:82:52:bd:70:ef:
cf:fc:29:b2:a0:62:ce:d0:ec:9c:97:b3:42:aa:db:
e3:1f:bf:7e:b0:09:5b:58:b6:e7:cf:e7:c5:2f:17:
05:f1:b0:ce:d0:8c:8b:58:67:8a:67:92:bf:29:6a:
8f:c6:03:ff:d4:61:1a:9c:c2:65:0c:83:4f:f9:0d:
07:f8:29:9e:8f:0d:da:2d:cc:9d:54:ac:09:ce:3c:
83:0a:18:b0:69:2a:3d:48:b1:a0:cf:4b:af:b3:9a:
f8:f0:61:78:3f:93:33:e2:7f:10:79:65:4f:df:ad:
f3:65:de:86:f1:be:04:b2:3b:59:ee:f2:9c:57:2b:
db:d3:a6:62:e5:84:ec:83:6a:59:76:c9:7d:3e:67:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:82:37:79:EE:CE:D3:DD:7A:7C:31:19:CB:82:0C:8C:02:F6:61
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:02:ee:38:b0:f2:f3:1b:9e:e7:4e:81:1e:ac:fe:88:17:4f:
fc:c0:34:36:a3:db:83:74:32:81:47:6f:b1:09:09:e4:e6:7d:
83:58:68:2d:36:78:62:ce:da:22:7f:f4:be:2c:a7:6a:34:d6:
f6:8b:e2:51:fe:46:c9:4b:4a:10:a4:4e:75:c6:b4:6f:84:99:
84:e0:fb:d0:ca:2f:ba:f4:5e:14:33:b5:60:69:af:1a:8d:6d:
43:d0:4c:36:2c:39:60:56:96:a0:87:c2:d0:6f:83:25:d3:7d:
b3:d3:0a:c1:3f:da:b7:ef:c0:55:cd:07:70:ee:cf:8f:b8:e4:
cd:db:2c:5b:28:61:6e:f7:56:c4:5a:36:d5:e2:7f:83:e6:3b:
e0:2e:04:df:ea:89:22:4f:3e:48:24:39:14:b5:86:13:47:c9:
e3:2c:8d:3c:c8:f3:c0:4e:81:93:e7:56:00:cf:02:e3:15:9a:
77:ef:1b:53:51:21:3a:63:d0:98:20:1d:3d:d7:27:97:c9:82:
9d:38:b1:a9:eb:3e:fc:be:80:fd:a3:25:21:8a:34:ff:1d:20:
cb:25:96:87:0b:8f:75:6d:61:a6:7b:bc:35:b0:cf:94:d2:74:
2c:9a:bb:43:f4:dc:cc:3a:a7:be:fa:18:c1:01:e1:11:04:8f:
cb:64:28:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB
QUZCNzc2Q0MwHhcNMjYwOTI2MTgyOTE3WhcNMjYxMDAzMTgyOTE3WjAYMRYwFAYD
VQQDEw02YWI4MGVmZS1lYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7xC3pHcbWQrFfBLE80g2Op7SOU/CIL6c6Jfnq6v9iVRHxW0aMfotiBWoHXa
asVXtlpEmWkOcSt8fj9AuW4uTF2+vXn0Bvc6IBdIFk7s7whYu1T5s/dvOwrGAsir
drUd4+uIDaug4Z6m+vs2USvpUcG4glK9cO/P/CmyoGLO0Oycl7NCqtvjH79+sAlb
WLbnz+fFLxcF8bDO0IyLWGeKZ5K/KWqPxgP/1GEanMJlDINP+Q0H+Cmejw3aLcyd
VKwJzjyDChiwaSo9SLGgz0uvs5r48GF4P5Mz4n8QeWVP363zZd6G8b4EsjtZ7vKc
Vyvb06Zi5YTsg2pZdsl9Pmd8NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB12gjd5
7s7T3Xp8MRnLggyMAvZhMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz
NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm
VXhfMVlUSHJoRldxLTNkc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfwLuOLDy8xue506BHqz+iBdP/MA0NqPbg3QygUdvsQkJ5OZ9g1hoLTZ4Ys7a
In/0viynajTW9oviUf5GyUtKEKROdca0b4SZhOD70MovuvReFDO1YGmvGo1tQ9BM
Niw5YFaWoIfC0G+DJdN9s9MKwT/at+/AVc0HcO7Pj7jkzdssWyhhbvdWxFo21eJ/
g+Y74C4E3+qJIk8+SCQ5FLWGE0fJ4yyNPMjzwE6Bk+dWAM8C4xWad+8bU1EhOmPQ
mCAdPdcnl8mCnTixqes+/L6A/aMlIYo0/x0gyyWWhwuPdW1hpnu8NbDPlNJ0LJq7
Q/TczDqnvvoYwQHhEQSPy2Qo9w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:47:38 2026 by rpki-client