
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json)
Hash identifier: 3VmSWnHBZAdh9gongbyjfj//b77ylBuzsZitDcJf3HI=
Subject key identifier: 5F:8B:57:A1:57:44:E9:32:31:92:49:08:3B:99:F9:EF:3F:44:5F:99
Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
Manifest number: 010A
Signing time: Wed 23 Sep 2026 05:55:35 +0000
Manifest this update: Wed 23 Sep 2026 05:55:34 +0000
Manifest next update: Wed 30 Sep 2026 05:55:34 +0000
Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: 5J+kmv/0tG4hh55TsvfEsSlhcMZTtanea2qoVAv71OM=)
2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Validity
Not Before: Sep 23 05:55:34 2026 GMT
Not After : Sep 30 05:55:34 2026 GMT
Subject: CN=6ab369d6-be61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:ef:68:65:70:bb:60:af:3a:2e:54:6e:a2:
31:de:04:9b:df:03:74:f7:38:de:74:07:e1:94:f2:
e8:ab:26:e5:ae:0a:4d:ba:a1:6c:b6:90:2e:06:30:
25:b3:87:ed:98:03:c5:b7:ab:fe:f9:fd:e8:85:69:
ef:a1:89:2a:73:80:36:ec:64:b5:da:62:07:9a:0e:
be:08:95:45:58:65:d7:83:0b:d0:23:57:80:34:92:
9f:4d:8d:e1:68:12:61:ee:1d:38:0f:12:c5:0e:c5:
9b:48:14:cc:2e:ef:eb:9b:6f:26:1b:ac:3f:0b:a5:
6d:80:29:6c:a6:d6:f6:0c:77:b7:d2:14:fd:d9:09:
dd:3f:c4:58:e6:17:ee:74:2c:9e:b3:29:fa:db:3c:
2c:e7:84:30:6e:91:d8:9a:fd:f1:6c:2c:41:2b:65:
f7:7d:54:62:cc:3b:10:a1:39:d3:20:e3:f8:84:ac:
59:9d:be:f2:61:90:e8:6d:21:37:16:67:01:1a:5b:
e6:ab:6d:22:44:da:58:ee:ae:70:2d:5c:ba:60:db:
cf:8b:48:22:d4:eb:4e:b3:5f:7c:43:b6:c0:38:51:
43:79:7e:68:08:68:00:2a:10:76:0c:75:7a:f8:4f:
e1:f9:6e:23:f0:ce:ba:a7:ca:fa:15:c5:23:25:70:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:57:A1:57:44:E9:32:31:92:49:08:3B:99:F9:EF:3F:44:5F:99
X509v3 Authority Key Identifier:
keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:b0:84:ca:b5:ab:a6:31:87:e0:59:de:36:39:50:b6:00:
2a:61:75:85:2c:20:67:86:7f:e9:61:35:fd:ab:b2:9c:55:02:
b1:93:a4:b2:d9:ff:58:53:a2:ed:26:c3:55:00:34:94:b9:5a:
22:06:4c:62:6c:79:51:8f:38:d4:6b:d0:2e:63:c9:af:f6:63:
99:e9:c4:8c:23:e1:2f:f9:ee:06:fa:7d:9f:7f:6e:49:7f:90:
54:33:3e:dd:a6:f3:ac:ef:ae:20:74:a3:63:06:10:0e:8a:13:
31:9c:74:b1:e6:9c:c4:fc:f2:b2:82:58:5e:13:4a:37:81:0d:
08:79:42:ee:05:5a:23:bc:2a:fd:02:22:0c:8d:50:50:d2:6d:
35:4e:9e:53:46:26:7a:0f:08:60:70:b9:5d:13:71:a5:9b:ea:
a6:f4:40:6e:ec:b4:f8:ca:6e:95:0a:83:10:16:b2:ad:2f:b7:
61:cb:9b:fb:06:8a:59:0f:08:e3:e3:e9:88:d9:b2:3b:1e:29:
85:bb:90:31:71:58:e8:ee:8b:3b:90:2f:a5:c9:6a:8f:f6:18:
d0:d6:ba:19:9e:60:09:be:1f:4f:01:6b:79:13:f6:c6:a4:01:
f3:6a:15:e0:79:9d:dd:ff:aa:c8:bf:72:76:6d:9b:61:0f:71:
62:48:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:07 2026 by rpki-client