
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: ToZha99UG+8+/ChSZk/+EM1F5ZX0w7aQXyLvqa9zhYI=
Subject key identifier: 47:73:EB:81:2A:2B:03:B2:11:6C:55:E6:53:90:13:26:D3:99:FD:95
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 01E3
Signing time: Sun 15 Nov 2026 03:49:49 +0000
Manifest this update: Sun 15 Nov 2026 03:49:49 +0000
Manifest next update: Sun 22 Nov 2026 03:49:49 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: RWwuRAL9yXexzoCXUYdSA89t9PY/XOlXyS9QsxK+kjU=)
2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Nov 15 03:49:49 2026 GMT
Not After : Nov 22 03:49:49 2026 GMT
Subject: CN=6af92bdd-87c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:c7:e7:15:5e:c2:60:14:2a:ca:e4:b0:9c:
24:12:0f:b4:18:1e:04:d1:a4:aa:86:5a:a6:79:15:
f9:4b:9c:69:6d:c4:10:8d:93:6b:3c:f4:7f:82:cd:
19:8d:1a:d6:0a:f1:77:5a:6b:9a:f5:a2:8d:a2:a9:
4f:b1:36:bc:ee:fa:ce:6b:3d:56:dd:93:68:28:7f:
36:eb:34:bc:20:2f:7c:68:7f:c8:7f:62:67:70:55:
e1:b8:af:8d:cd:db:88:58:0a:11:cd:0c:c6:56:21:
85:fe:4d:ca:a7:ed:4b:2b:1e:0c:4d:51:b1:a1:d4:
c1:59:99:a8:ea:34:cf:c2:5b:e9:b2:16:40:95:ce:
a3:4e:b6:f6:f2:e7:50:e2:c4:fa:8e:9e:ff:64:f1:
1a:1f:0d:46:4d:4a:9b:18:92:09:08:95:18:76:d9:
55:92:15:51:70:45:b9:68:07:a8:75:53:b9:c3:68:
5a:87:0b:66:7e:d8:81:7c:d5:26:f5:13:a0:9d:36:
94:7c:37:0a:28:19:9f:4b:49:85:d2:b7:7b:c1:fe:
ff:31:09:9c:14:6c:b1:c7:24:b9:18:03:74:af:49:
de:35:0e:e7:cb:25:1d:29:51:0a:36:a8:f2:05:cc:
c4:c3:9c:4a:10:bb:b6:19:4c:dd:c6:e1:e1:31:19:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:EB:81:2A:2B:03:B2:11:6C:55:E6:53:90:13:26:D3:99:FD:95
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:40:a4:80:8d:03:a4:59:29:97:4d:4a:f9:b2:b8:00:73:00:
ac:c3:ee:2c:d1:44:00:53:96:b5:47:57:0e:e5:78:f0:c7:36:
7b:af:9a:0e:cf:05:3c:26:f3:d8:a0:c2:d2:c7:8b:b0:63:64:
4f:49:8a:c9:6d:ee:d3:23:96:54:ed:b1:26:ae:ec:15:70:2a:
37:1f:67:10:99:a9:e0:75:da:19:13:f7:df:59:64:0b:eb:71:
56:d9:ae:fa:8b:22:b7:ed:57:e3:98:24:b9:c7:e6:8e:8b:fd:
46:fb:3c:19:36:cd:0d:91:89:53:ce:a7:5d:09:09:6d:07:53:
93:db:e9:ad:cb:76:13:83:94:c1:68:a9:80:8b:c0:c1:72:30:
df:26:38:85:d4:13:e1:a1:85:2a:18:c0:51:c8:e4:bb:67:5d:
50:c9:cb:11:90:b2:a0:dc:26:be:3d:b1:31:19:75:fc:27:7a:
66:5f:97:a6:91:a1:e1:f3:67:ee:83:82:7d:4a:b7:52:2c:b8:
83:37:b1:24:08:d9:89:6f:35:1e:e9:ad:24:c1:38:ec:fa:e5:
a7:18:84:52:e9:9e:dd:c8:aa:84:2b:c2:fc:a8:32:26:5a:88:
ea:40:cc:ff:09:81:27:8b:5e:c5:90:c3:2d:06:f6:25:0e:98:
26:2d:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:10 2026 by rpki-client