
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
File: dsy3G8ONvsj1s1rnufdOprg25Qg.mft (raw, json)
Hash identifier: ChY0myrmId87z0uaqZHdKWIyomFfFfTolemrynyFsmE=
Subject key identifier: 99:44:02:4A:D8:BE:2B:1B:D4:E3:68:4E:3C:A4:09:D4:CE:D2:F7:1D
Authority key identifier: 76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08
Certificate issuer: /CN=A91C7425/serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
Manifest number: 52
Signing time: Sat 03 Oct 2026 09:00:47 +0000
Manifest this update: Sat 03 Oct 2026 09:00:47 +0000
Manifest next update: Sat 10 Oct 2026 09:00:47 +0000
Files and hashes: 1: dsy3G8ONvsj1s1rnufdOprg25Qg.crl (hash: gmocxY3nyD5LvUS/mmF6esVmjmUc3vxhup1eOGv9CUU=)
2: 8A11628E49A511F1AC5B8E7699833773.roa (hash: niJhKfV+ouFK6sQjUZt4n5DTxe39SMX+kn/MPEsu8wg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl
rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7425, serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508
Validity
Not Before: Oct 3 09:00:47 2026 GMT
Not After : Oct 10 09:00:47 2026 GMT
Subject: CN=6ac0c43f-9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:46:4f:41:17:95:6c:e0:8d:f3:88:bc:f5:
5b:80:8e:2b:d8:ee:3a:2d:80:1d:ca:1b:f4:f6:ae:
74:41:8c:69:2e:65:18:1f:54:15:bb:a8:7b:7d:79:
c5:a3:91:a9:1f:91:1b:70:bd:3d:39:41:75:d9:98:
e4:c6:21:03:78:bf:7c:0e:aa:b6:06:5f:24:fb:21:
7f:b4:9f:1e:34:47:2d:3b:32:2f:e3:05:d6:ad:89:
fd:7a:59:3e:50:82:ec:99:aa:39:e2:a1:d9:9c:6c:
be:db:07:47:f0:5f:9d:2b:41:40:9d:d4:46:7e:08:
03:c1:f2:87:23:93:e1:fb:99:cf:2a:5a:29:1a:71:
d2:a0:5b:10:f1:d6:89:77:61:bd:f9:56:43:6d:55:
08:9d:71:b7:c0:8e:ea:f0:26:4c:40:a5:22:6e:88:
b1:6f:52:9c:7f:ee:17:2a:2f:9b:3a:69:11:ff:b0:
7f:85:5a:96:2a:1f:5a:6b:53:f5:fa:65:09:1c:68:
ed:23:06:ad:12:73:3a:d7:40:4b:d7:3a:60:1b:8b:
3e:05:56:79:c7:d9:9c:53:78:14:94:91:1e:83:5b:
7f:09:7f:5b:4f:d5:4e:31:b4:b8:cf:df:54:cc:f6:
bd:81:6f:6b:6e:8e:be:2c:82:30:43:73:12:11:1c:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:02:4A:D8:BE:2B:1B:D4:E3:68:4E:3C:A4:09:D4:CE:D2:F7:1D
X509v3 Authority Key Identifier:
keyid:76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:ca:fc:21:40:e2:89:5f:eb:e4:f5:e9:ac:f1:5b:99:97:
ca:81:e4:a6:e5:8d:bf:a1:95:9d:46:c4:a1:34:96:bf:99:f1:
6f:7c:b9:e9:b4:ad:0c:6f:23:5f:cb:7a:1e:ca:af:23:7c:d8:
45:48:f8:3f:03:9f:d8:2e:97:8e:2c:6a:b5:3e:4d:7c:e2:7f:
73:66:c9:b2:ec:3f:02:ec:6b:03:77:47:b5:b4:48:d5:70:93:
55:11:88:4a:17:e5:ab:a7:92:8a:af:26:25:b8:4f:8e:15:8a:
17:8b:82:2a:d2:f0:6c:91:c9:40:cb:9d:b1:dc:86:74:7f:c3:
5e:25:50:a0:a2:4b:8f:28:38:fd:7f:62:8c:65:8e:11:58:26:
07:4c:1f:ae:e2:01:9c:25:dc:f5:01:e5:01:59:55:6c:38:6c:
ab:b8:46:9b:28:6a:b4:cf:d4:7e:d5:bb:32:84:d2:97:3d:26:
93:2d:d4:d8:a9:5c:62:00:27:fa:49:c5:7e:5e:19:35:38:08:
a1:c8:3f:96:67:a9:8c:83:ea:66:fb:36:f4:8f:de:fc:c9:31:
b3:34:c8:8e:a5:b5:35:f1:1e:df:a8:c5:a4:a7:51:74:33:18:
43:2c:73:da:5b:1d:4d:92:1c:ff:84:5a:93:f0:2a:28:17:8b:
bc:b9:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:18:24 2026 by rpki-client