
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier: 9SCqlkRqNJKRL+svNRRMEAg82DuQ6YPvt9MlnvH5jak=
Subject key identifier: 7E:B3:73:49:8F:25:6F:F9:01:FB:17:99:69:55:D5:EF:24:93:82:A2
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number: CD
Signing time: Sat 03 Oct 2026 07:26:39 +0000
Manifest this update: Sat 03 Oct 2026 07:26:39 +0000
Manifest next update: Sat 10 Oct 2026 07:26:39 +0000
Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: uajCzewjMHAlsbqBVLQe/SYt9YG3HFy42FsyqQaRbPA=)
2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Validity
Not Before: Oct 3 07:26:39 2026 GMT
Not After : Oct 10 07:26:39 2026 GMT
Subject: CN=6ac0ae2f-16f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8a:a7:08:30:23:ec:56:8f:cd:c3:6a:bb:70:
51:55:a1:58:e2:bb:57:f9:87:3b:18:5c:d2:31:59:
be:26:45:89:d6:8a:27:f8:5d:85:2b:e3:2e:4f:26:
c4:7b:48:7c:25:4f:50:02:0d:c5:81:f4:f5:7c:df:
ec:6f:f1:8f:4e:ef:98:47:ce:b1:fb:46:65:be:7e:
5b:a4:34:4d:15:40:5e:bb:d0:c3:20:23:31:5a:ee:
23:da:8f:d8:40:ae:7c:89:c6:65:c2:38:ad:5e:6d:
b8:09:86:81:4c:99:ee:a8:86:f8:b7:fe:2a:c9:f8:
58:f4:65:f3:1b:36:bf:92:73:be:86:cc:65:ee:75:
b2:9f:9e:50:6c:a6:06:9c:aa:37:cd:b7:71:9a:cb:
67:f5:f6:75:ae:56:19:88:82:34:f5:f4:7d:d3:79:
4b:1d:13:59:0e:ff:18:74:bc:54:0b:3b:18:bb:0e:
60:56:1c:64:a3:24:8e:87:18:a0:49:c6:8e:92:f7:
3b:f8:43:8e:45:04:21:38:dc:33:b8:8e:3d:d4:3f:
a8:bb:a3:35:b0:9f:0b:f7:45:68:45:4d:8e:88:ca:
73:5c:74:1a:80:f5:a4:09:70:be:84:3c:d7:77:c8:
b5:68:d0:d9:c5:79:f1:2a:92:1d:7b:4a:95:24:aa:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:73:49:8F:25:6F:F9:01:FB:17:99:69:55:D5:EF:24:93:82:A2
X509v3 Authority Key Identifier:
keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:54:28:82:ae:0f:39:a4:ac:cc:62:64:90:43:97:50:c3:
f8:1a:22:d7:31:d7:68:66:5c:47:5e:09:43:c9:88:bf:c8:e1:
fa:a8:2b:f9:95:89:f3:b8:1a:4a:44:4a:48:2d:e3:4b:d1:4e:
b5:4a:a1:47:c0:65:f8:09:a1:b2:21:ad:46:2d:a2:bc:8c:c7:
66:fa:33:cf:c1:c8:1f:27:da:0c:c3:1d:16:04:70:b5:28:73:
cc:dc:d9:44:a0:1b:70:8d:34:1f:32:1b:b1:8b:40:17:1e:6b:
fa:90:52:2d:3c:6b:0d:db:e1:c9:6e:24:4b:03:04:6d:e2:90:
4c:67:95:e7:a7:80:58:a3:ce:00:d5:aa:24:10:77:4e:dd:7a:
66:ae:c6:4e:a4:42:81:9c:22:30:f6:21:fe:a6:59:7f:82:06:
54:20:77:e3:48:20:a7:e3:b8:51:52:6b:cf:61:28:a9:55:2b:
f0:ff:0f:6e:bc:0b:fb:45:1e:1e:c1:40:b4:cc:13:be:38:8a:
f8:59:ce:aa:b9:1c:79:fb:4d:31:74:c6:3c:c1:9a:f0:ea:0b:
74:16:a4:ea:b5:93:54:72:42:8e:40:8e:24:aa:48:1d:14:48:
b2:94:3d:24:f8:f0:13:cc:ba:07:c5:b4:e0:e0:a9:13:72:27:
52:db:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:48:58 2026 by rpki-client