
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier: +DFZoyfaArOyNvb+N1LQUSaSRm6mA78lK+6oKvA0XMU=
Subject key identifier: E0:5B:12:27:85:9E:88:D2:29:1C:57:32:CE:D0:13:E3:38:F7:52:8C
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number: 86
Signing time: Wed 22 Jul 2026 20:31:37 +0000
Manifest this update: Wed 22 Jul 2026 20:31:37 +0000
Manifest next update: Wed 29 Jul 2026 20:31:37 +0000
Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: n/jA7UQ8WKKHzqiYAp4PVCCT8rWJLjcxlMwbtMJM6wQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Validity
Not Before: Jul 22 20:31:37 2026 GMT
Not After : Jul 29 20:31:37 2026 GMT
Subject: CN=6a6128a9-a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:85:28:fe:5d:fa:00:00:dc:d5:0c:ef:79:
96:d8:09:b3:10:9a:f1:7d:82:25:3b:0b:de:be:3d:
3d:94:e3:b5:a8:48:65:18:d9:64:5e:64:78:e8:cc:
19:48:3c:32:f1:4f:14:30:c9:8b:14:62:ea:dd:44:
c3:0e:2e:d2:06:9d:bf:d2:a6:75:42:22:5b:57:7d:
d1:87:2d:c6:35:dd:98:7c:c6:64:27:1f:c9:bd:3d:
cc:91:6c:7f:ae:40:bd:9b:70:0f:a7:af:8c:c3:67:
cb:e1:92:bd:5e:8f:72:df:8b:72:fc:be:a6:1c:83:
28:b2:d1:f5:c9:00:6b:e6:ba:bd:b5:b2:3a:f5:39:
3c:01:8e:fd:03:2a:de:d1:71:93:b5:2b:c3:9d:e7:
20:f1:ec:ed:ff:8a:80:71:60:e6:ab:a4:ca:70:58:
4d:3f:d4:03:e5:17:13:d5:45:d9:35:31:6f:5a:45:
35:82:f8:70:fc:58:be:cc:de:7c:20:59:aa:77:fb:
30:b5:54:1a:e0:82:35:98:85:11:17:cb:59:a7:ce:
8d:61:fb:70:1c:29:50:3e:cb:69:ce:90:7b:d4:28:
60:70:e7:96:13:06:12:2e:ae:8f:bc:44:74:0c:5e:
a7:d4:25:fe:77:ce:a6:4b:ae:67:05:1f:50:b9:ba:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:12:27:85:9E:88:D2:29:1C:57:32:CE:D0:13:E3:38:F7:52:8C
X509v3 Authority Key Identifier:
keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:6f:5b:7b:57:82:28:8a:98:d2:99:a6:a1:d5:ea:58:d9:
79:e8:33:d9:51:c4:68:37:f5:44:34:4d:5f:d2:a9:40:b1:07:
d4:65:dd:76:bf:03:62:ed:ac:fd:fa:12:f8:fa:bf:32:8d:a3:
8e:a3:76:e4:70:c7:e3:fb:7e:bc:85:5d:96:9a:69:65:1b:a4:
39:21:f5:1e:cb:e9:64:92:00:17:28:99:f6:13:39:13:79:7f:
13:8b:3e:39:84:23:aa:cf:dd:81:75:38:c1:32:bf:f7:6c:e0:
44:d2:8e:6c:48:77:5a:80:69:56:05:d2:36:ec:0b:aa:8a:8b:
26:d1:b3:47:18:f2:10:84:a8:83:76:fd:91:f4:ed:b0:05:35:
c6:6c:5e:b3:fc:f0:81:fd:6f:32:f0:1f:c5:57:37:87:64:f6:
48:ad:e9:b6:6a:b5:f3:c0:4d:db:37:3a:f6:70:41:3d:c5:6a:
60:da:56:92:b3:ce:ea:51:9b:c0:5c:88:21:a1:00:63:d4:a7:
99:83:ca:01:e6:e5:75:69:17:92:ce:28:7f:f4:6d:d5:05:17:
5e:b7:8c:d0:50:5c:ef:da:14:4e:ba:62:93:ae:19:ef:97:1f:
6e:d6:58:44:d1:27:ec:fc:8f:39:81:03:99:c7:9a:03:e3:22:
09:99:91:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKDBFRkI4MjEyMTczOEQ5RUM4NjlFM0NBM0NGMDUwMEY5
MTI4RTE3QTgwHhcNMjYwNzIyMjAzMTM3WhcNMjYwNzI5MjAzMTM3WjAYMRYwFAYD
VQQDEw02YTYxMjhhOS1hNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYqFKP5d+gAA3NUM73mW2AmzEJrxfYIlOwvevj09lOO1qEhlGNlkXmR46MwZ
SDwy8U8UMMmLFGLq3UTDDi7SBp2/0qZ1QiJbV33Rhy3GNd2YfMZkJx/JvT3MkWx/
rkC9m3APp6+Mw2fL4ZK9Xo9y34ty/L6mHIMostH1yQBr5rq9tbI69Tk8AY79Ayre
0XGTtSvDnecg8ezt/4qAcWDmq6TKcFhNP9QD5RcT1UXZNTFvWkU1gvhw/Fi+zN58
IFmqd/swtVQa4II1mIURF8tZp86NYftwHClQPstpzpB71ChgcOeWEwYSLq6PvER0
DF6n1CX+d86mS65nBR9QuboxBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBbEieF
nojSKRxXMs7QE+M491KMMB8GA1UdIwQYMBaAFA77ghIXONnshp48o88FAPkSjheo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC9FQTFEOEUxNkMx
MzExMUYwQjQzMTc0M0VDNEY5QUUwMi9EdnVDRWhjNDJleUduanlqendVQS1SS09G
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0R2dUNFaGM0MmV5R25qeWp6d1VBLVJLT0Y2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RURGRC9FQTFEOEUxNkMxMzExMUYwQjQzMTc0M0VDNEY5QUUwMi9EdnVDRWhjNDJl
eUduanlqendVQS1SS09GNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlYtvW3tXgiiKmNKZpqHV6ljZeegz2VHEaDf1RDRNX9KpQLEH1GXddr8DYu2s
/foS+Pq/Mo2jjqN25HDH4/t+vIVdlpppZRukOSH1HsvpZJIAFyiZ9hM5E3l/E4s+
OYQjqs/dgXU4wTK/92zgRNKObEh3WoBpVgXSNuwLqoqLJtGzRxjyEISog3b9kfTt
sAU1xmxes/zwgf1vMvAfxVc3h2T2SK3ptmq188BN2zc69nBBPcVqYNpWkrPO6lGb
wFyIIaEAY9SnmYPKAebldWkXks4of/Rt1QUXXreM0FBc79oUTrpik64Z75cfbtZY
RNEn7PyPOYEDmceaA+MiCZmRLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:18 2026 by rpki-client