
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier: yB9q5KCUe4G70o6wMVqGmvaHxE4LS/Jf6ibvczVf6eA=
Subject key identifier: 89:5E:1F:F7:B0:15:C6:1B:31:71:77:5F:31:EE:6D:EE:D5:CD:63:81
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 038F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number: 034F
Signing time: Mon 21 Sep 2026 00:56:18 +0000
Manifest this update: Mon 21 Sep 2026 00:56:17 +0000
Manifest next update: Mon 28 Sep 2026 00:56:17 +0000
Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: 5XXryBkWckxvhCQ2SgUdhKBJesNP3EflaBqr/XB/UEU=)
2: 9ABAA0F2860711F1825B87C479A30FBC.roa (hash: NOJB3Hv2pMFrhKnZajYeAs3Ut2mtOF2q/wUaov9o1Gw=)
3: 3329AB14860611F188D398BD79A30FBC.roa (hash: s9MG4AtqSHdsd3gX5TM+FCq3eB5Ek6aWf3JSkbBd0xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Sep 21 00:56:17 2026 GMT
Not After : Sep 28 00:56:17 2026 GMT
Subject: CN=6ab080b1-ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:e4:c2:7a:68:47:e5:ed:d0:2b:0b:5c:bd:
0e:b0:ea:7b:66:78:1a:7f:3e:a4:dd:b3:9c:c9:49:
77:b5:3e:8c:fa:5e:bc:ce:33:5f:41:5c:50:ed:2a:
83:37:41:03:09:22:2d:cc:05:1a:64:a2:f7:00:bd:
83:cf:0c:66:11:1e:4d:41:45:75:e0:ba:de:55:2e:
e8:63:c4:d7:66:79:a1:97:25:64:63:98:c9:a1:ea:
aa:07:e1:e2:d3:a5:d3:f2:d1:a3:d1:42:4b:0b:be:
4a:40:b7:dd:1b:2a:91:f4:b2:b4:42:2d:b2:64:82:
ec:d4:7d:8c:d3:ba:9f:b6:0f:7d:63:bc:ad:48:48:
a7:45:a2:f3:83:18:41:43:2f:b7:61:8d:24:d5:6e:
26:72:69:4e:e4:64:cc:32:29:7f:de:fd:8e:0c:f4:
b3:ee:ad:49:c8:3c:c4:b0:d2:29:ca:8f:1e:f5:cb:
a6:ac:bc:9f:02:e1:4e:af:95:37:1e:d2:b2:77:cb:
ef:f1:54:79:83:e6:e2:ac:6a:b2:27:f8:d7:46:a6:
76:a0:a0:28:b2:17:2a:30:4f:6f:1e:fd:7a:71:da:
e1:21:34:5a:13:7f:c6:91:e8:3d:17:4b:25:d2:65:
5a:b2:39:a0:20:c9:a1:0f:1d:79:6b:24:bd:17:de:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:1F:F7:B0:15:C6:1B:31:71:77:5F:31:EE:6D:EE:D5:CD:63:81
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:0a:9f:89:31:08:5b:89:2f:24:d6:e8:75:43:f7:cc:03:85:
63:a3:6c:48:e5:1c:62:8e:2f:45:e4:fa:de:c7:a2:7b:4a:9f:
f1:76:dc:fa:c3:94:fc:1e:3f:62:25:62:a0:f7:40:a4:b8:2f:
23:74:bc:50:b3:a2:d8:c8:37:c3:29:a1:78:0a:67:a8:67:1e:
4c:39:f6:d2:40:e4:ab:34:90:c7:2f:47:05:97:08:bd:84:49:
c5:64:82:f0:66:fa:9e:e1:a1:64:71:7c:63:4b:79:27:a8:e3:
fd:8b:30:19:39:8e:83:60:ec:4e:68:dc:66:e3:07:89:58:ff:
96:13:88:fb:34:db:8e:4d:a3:91:76:e9:dc:42:fb:78:e6:05:
e8:73:4a:86:26:b1:54:7e:db:2c:08:bf:e9:0c:d4:e5:a2:ba:
a4:40:b6:5c:cb:25:6d:ba:93:43:1b:75:36:80:58:1e:90:a1:
d2:63:1a:8a:35:c6:bf:15:32:f3:20:18:39:39:19:61:94:c7:
73:2f:d0:8d:10:76:b3:b9:e1:8c:56:18:6f:e2:e0:22:b2:2a:
8f:9c:02:dc:4d:9e:0f:95:a8:85:42:3c:ed:d8:a1:a4:f0:a5:
83:bc:c5:72:c5:f0:b5:7f:fc:00:60:af:52:71:f0:b1:61:96:
61:a1:d7:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw
RjU5MzgwMEMwHhcNMjYwOTIxMDA1NjE3WhcNMjYwOTI4MDA1NjE3WjAYMRYwFAYD
VQQDEw02YWIwODBiMS1jYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZTkwnpoR+Xt0CsLXL0OsOp7Zngafz6k3bOcyUl3tT6M+l68zjNfQVxQ7SqD
N0EDCSItzAUaZKL3AL2DzwxmER5NQUV14LreVS7oY8TXZnmhlyVkY5jJoeqqB+Hi
06XT8tGj0UJLC75KQLfdGyqR9LK0Qi2yZILs1H2M07qftg99Y7ytSEinRaLzgxhB
Qy+3YY0k1W4mcmlO5GTMMil/3v2ODPSz7q1JyDzEsNIpyo8e9cumrLyfAuFOr5U3
HtKyd8vv8VR5g+birGqyJ/jXRqZ2oKAoshcqME9vHv16cdrhITRaE3/Gkeg9F0sl
0mVasjmgIMmhDx15ayS9F95gvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIleH/ew
FcYbMXF3XzHube7VzWOBMB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2
QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjYxQy83NzBDQkUyNDM2QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFW
ZldXQ0NXVF9lZDhQV1RnQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEgqfiTEIW4kvJNbodUP3zAOFY6NsSOUcYo4vReT63seie0qf8Xbc+sOU/B4/
YiVioPdApLgvI3S8ULOi2Mg3wymheApnqGceTDn20kDkqzSQxy9HBZcIvYRJxWSC
8Gb6nuGhZHF8Y0t5J6jj/YswGTmOg2DsTmjcZuMHiVj/lhOI+zTbjk2jkXbp3EL7
eOYF6HNKhiaxVH7bLAi/6QzU5aK6pEC2XMslbbqTQxt1NoBYHpCh0mMaijXGvxUy
8yAYOTkZYZTHcy/QjRB2s7nhjFYYb+LgIrIqj5wC3E2eD5WohUI87dihpPClg7zF
csXwtX/8AGCvUnHwsWGWYaHXZw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:41:54 2026 by rpki-client