
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier: QJaPOGbNpCstoMT6bVOvoMqobCjrrheljrhK2tuWI00=
Subject key identifier: 13:51:54:16:78:75:BF:74:71:4B:67:12:8B:17:65:4B:DA:1F:C3:97
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number: 027A
Signing time: Thu 01 Oct 2026 02:42:01 +0000
Manifest this update: Thu 01 Oct 2026 02:42:00 +0000
Manifest next update: Thu 08 Oct 2026 02:42:00 +0000
Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: aElJ//r2i9llgIxj03U3QaI0uyAoxk2iY92g/Y8jtsI=)
2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: tMod+kKR1jOR1VExOog5QztxNpsdZWz75NXKTsytqSU=)
3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: PazBjpuTUYfOjYTbepeHU2eyo87WfnISzDamrpY/9jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 02:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: Oct 1 02:42:00 2026 GMT
Not After : Oct 8 02:42:00 2026 GMT
Subject: CN=6abdc879-be72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:87:b4:54:b8:71:ce:ca:0a:ac:c9:2e:18:
f1:b4:4c:0a:6e:eb:a7:fa:69:26:39:c1:f5:9f:b1:
24:ea:7e:d6:46:12:ee:ae:a4:1b:f6:ab:87:34:f3:
da:b2:90:3a:58:d6:68:c5:63:38:18:86:e3:33:f3:
dd:30:9a:bc:a0:a2:b1:06:9f:1e:39:d2:b4:1a:b8:
94:d1:ad:27:d3:a7:6c:8b:07:17:fa:b2:ab:c9:a4:
18:5a:8d:54:aa:97:2d:97:09:a5:a3:9e:4c:d7:52:
64:97:b6:db:77:7b:e5:e1:3b:f6:51:83:5d:2d:b8:
13:2a:00:ef:9c:9f:e4:82:a7:85:b1:14:70:4b:6c:
a7:af:e8:36:65:71:11:2a:16:ca:ce:a1:86:a5:f3:
b7:37:09:2a:d4:99:86:16:91:2c:b2:85:e7:de:6d:
6b:0a:3b:4c:7d:2f:37:b0:44:51:e6:ab:2c:ec:14:
05:ea:63:21:62:de:ef:84:33:41:03:d3:85:b3:da:
37:c2:46:06:54:c1:bc:a6:b0:57:da:af:24:ef:d1:
59:be:be:8a:c6:08:87:51:af:5e:24:32:1e:96:9e:
00:88:a3:d0:4e:10:d9:35:e5:b7:3b:65:21:19:bd:
08:f0:de:6c:14:03:a8:c9:38:18:5f:5d:73:27:5b:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:54:16:78:75:BF:74:71:4B:67:12:8B:17:65:4B:DA:1F:C3:97
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:88:88:25:30:f2:9b:1b:5f:de:53:06:8f:e2:74:42:d2:10:
7a:19:92:c5:02:11:66:3d:8e:a4:56:c9:b5:e8:6f:ec:29:18:
64:a9:69:69:2b:f9:5a:42:1a:5e:50:c8:8c:11:49:21:b0:7a:
41:5a:a7:d1:e4:8e:6c:c2:c6:aa:a6:57:ff:96:87:4c:63:41:
09:9b:47:3c:a2:58:ce:b8:41:de:ae:78:e5:4e:20:f3:8f:f0:
12:4d:78:7a:e0:11:a1:23:b6:09:2c:47:9c:43:83:ef:a4:ec:
87:33:6f:4b:da:9a:d0:2f:4e:84:a9:81:71:4d:32:45:a4:f8:
64:7b:58:7b:32:56:ca:91:75:1e:a1:53:9e:8a:fa:80:dc:81:
f1:0b:9a:9f:22:12:db:a7:0a:6a:e5:0b:a2:d3:d4:93:ab:b1:
3a:39:5c:10:be:e6:41:af:65:58:23:69:ba:31:06:54:92:95:
82:53:a3:db:02:82:22:10:04:f2:8c:f5:34:f2:8a:48:2b:b5:
60:60:f6:db:3d:76:b6:94:32:d4:d8:45:3b:9b:95:53:eb:d5:
44:b9:d3:e4:40:13:55:a3:22:6f:90:7b:b2:12:fa:b3:e5:bf:
44:02:c8:b1:c8:78:70:b6:65:86:23:f0:52:b8:0e:af:33:66:
cb:bf:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:51:55 2026 by rpki-client