
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier: rie7BN5I64c3frCrO0WBJf37pX7Ab8iFxFvS6e+XT0c=
Subject key identifier: FE:BF:F7:C6:7D:AC:EA:93:FF:0D:54:DB:08:0B:2B:1F:E0:0C:E4:FE
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial: 0EED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number: 102A
Signing time: Tue 22 Sep 2026 17:34:21 +0000
Manifest this update: Tue 22 Sep 2026 17:34:20 +0000
Manifest next update: Tue 29 Sep 2026 17:34:20 +0000
Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: imWss1OcCAPohHi52QDrDfgQ6NaQyFAeyDEnFLJmnf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Validity
Not Before: Sep 22 17:34:20 2026 GMT
Not After : Sep 29 17:34:20 2026 GMT
Subject: CN=6ab2bc1c-baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:2d:93:05:dc:60:8f:f4:ca:e3:f6:5f:19:
8a:24:85:1c:1b:a6:8c:06:b6:22:a8:12:41:e8:0a:
35:b6:b8:11:09:c0:57:79:90:98:ea:92:f9:18:39:
f2:3d:eb:43:e4:e6:e0:58:58:70:82:81:63:19:9f:
a8:ab:b9:15:91:66:94:e9:bb:83:5c:28:2f:ad:65:
29:b0:fa:fc:45:ec:bb:f2:aa:0b:43:f3:94:7b:7c:
d6:ee:03:a1:2d:c1:e9:d1:43:ed:bd:ad:4f:76:0e:
59:2d:56:68:09:51:96:95:bb:b8:d9:3c:b8:16:71:
ba:82:84:8a:a9:4a:66:87:17:1c:a9:8e:51:01:6a:
74:f7:23:00:b2:c2:f5:41:5e:30:d1:0b:23:80:a0:
73:41:71:7f:75:22:06:4f:2f:59:72:d9:8f:2a:e6:
37:61:0f:fa:a6:2d:41:4e:7b:59:52:38:89:d3:66:
76:ef:6e:e1:56:d4:d0:e6:9a:47:fa:44:8c:2c:56:
9e:95:2e:bd:a8:fd:f2:e7:0b:80:d3:1c:7d:e2:78:
c7:fb:cb:5b:c1:06:35:cf:b2:39:d1:dd:8f:34:d9:
52:6d:f9:5e:c5:e5:06:6b:8b:92:58:52:09:d8:dc:
80:69:f4:a3:70:3e:81:a8:5d:30:d0:fc:cb:30:d2:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:F7:C6:7D:AC:EA:93:FF:0D:54:DB:08:0B:2B:1F:E0:0C:E4:FE
X509v3 Authority Key Identifier:
keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9f:0f:85:95:13:0b:7a:5d:83:9f:58:fc:f3:02:92:9d:57:
5a:7a:a8:34:c8:eb:26:8e:f9:ed:3f:b1:e6:ef:77:6b:2a:03:
8f:75:1d:33:de:4f:3e:b5:4e:72:42:e5:1b:d1:6c:67:ac:43:
a0:8b:79:18:a0:a1:e2:90:93:f3:76:c2:47:86:89:1b:bd:15:
b6:50:90:bc:cb:45:e9:3d:8e:10:d9:b5:e8:9c:b2:67:d1:3c:
4a:af:18:c5:c1:89:ac:bf:89:5d:6c:1e:bd:56:ec:a8:7e:27:
04:d4:16:36:57:60:5f:9a:ea:d6:06:a4:fe:10:46:1d:28:18:
1f:11:1a:3f:61:54:6c:d5:56:a0:f0:2a:74:37:6c:15:68:8b:
14:7a:e0:b4:07:28:59:d6:68:d1:0d:f4:56:51:0d:26:e3:1c:
94:4b:1f:a9:60:0f:45:b7:6b:fa:8d:77:d9:98:ac:d2:71:bb:
c6:38:3b:9d:97:b9:41:dc:c8:1a:f5:78:86:b4:72:85:ed:9b:
9e:38:a6:bc:7c:d3:e6:d7:86:f8:6f:1d:d3:bb:93:15:9d:10:
75:48:0c:8c:ac:8d:b7:e7:96:50:87:ef:7b:be:aa:2e:19:94:
cd:42:aa:55:3b:f0:0c:91:ce:94:87:78:0b:a5:78:1a:4b:01:
de:e7:7b:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD
NUJGMUNCMDIwHhcNMjYwOTIyMTczNDIwWhcNMjYwOTI5MTczNDIwWjAYMRYwFAYD
VQQDEw02YWIyYmMxYy1iYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0R8tkwXcYI/0yuP2XxmKJIUcG6aMBrYiqBJB6Ao1trgRCcBXeZCY6pL5GDny
PetD5ObgWFhwgoFjGZ+oq7kVkWaU6buDXCgvrWUpsPr8Rey78qoLQ/OUe3zW7gOh
LcHp0UPtva1Pdg5ZLVZoCVGWlbu42Ty4FnG6goSKqUpmhxccqY5RAWp09yMAssL1
QV4w0QsjgKBzQXF/dSIGTy9ZctmPKuY3YQ/6pi1BTntZUjiJ02Z2727hVtTQ5ppH
+kSMLFaelS69qP3y5wuA0xx94njH+8tbwQY1z7I50d2PNNlSbflexeUGa4uSWFIJ
2NyAafSjcD6BqF0w0PzLMNJfgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6/98Z9
rOqT/w1U2wgLKx/gDOT+MB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz
NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s
UG81VzF3SVA5dnZGdnh5d0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeJ8PhZUTC3pdg59Y/PMCkp1XWnqoNMjrJo757T+x5u93ayoDj3UdM95PPrVO
ckLlG9FsZ6xDoIt5GKCh4pCT83bCR4aJG70VtlCQvMtF6T2OENm16JyyZ9E8Sq8Y
xcGJrL+JXWwevVbsqH4nBNQWNldgX5rq1gak/hBGHSgYHxEaP2FUbNVWoPAqdDds
FWiLFHrgtAcoWdZo0Q30VlENJuMclEsfqWAPRbdr+o132Zis0nG7xjg7nZe5QdzI
GvV4hrRyhe2bnjimvHzT5teG+G8d07uTFZ0QdUgMjKyNt+eWUIfve76qLhmUzUKq
VTvwDJHOlId4C6V4GksB3ud7wQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:55:39 2026 by rpki-client