
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: eqaEExD+appmWmfstVJ641qPfr7Tv8hATH51lDENj8s=
Subject key identifier: 02:8D:88:8F:DC:47:90:CC:AD:AD:52:8F:D5:7A:6A:7E:77:2F:43:07
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: B4
Signing time: Sun 27 Sep 2026 07:40:17 +0000
Manifest this update: Sun 27 Sep 2026 07:40:16 +0000
Manifest next update: Sun 04 Oct 2026 07:40:16 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: NtDd/huaIJ+g9bwcVY3/GvDnnf9yy/YRjjKl4K43nvo=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Sep 27 07:40:16 2026 GMT
Not After : Oct 4 07:40:16 2026 GMT
Subject: CN=6ab8c861-8ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:43:4a:b9:57:a4:b6:b0:dc:3a:53:17:ba:
e9:8f:32:3f:63:48:f7:83:5c:c2:7b:15:78:31:84:
e7:2c:9f:29:b3:36:ed:d7:d5:fb:4b:74:29:46:49:
e9:a6:1d:b1:e0:3d:75:f9:69:3b:d8:3a:61:52:61:
79:6d:6f:bb:b2:7d:b4:5b:93:74:46:d5:c3:96:f8:
0e:21:b2:fe:44:69:af:16:75:59:79:8a:df:26:93:
da:4d:61:27:75:99:58:03:de:b5:81:0d:d5:b7:c1:
39:e3:3e:69:99:17:14:8c:e8:fb:88:12:45:ff:ad:
3f:7d:7a:b6:ff:51:d0:c8:db:8d:4e:a4:6f:00:3d:
39:af:ea:ef:06:00:54:19:f7:f5:48:a8:79:d6:2b:
49:8d:17:38:ea:4a:b2:9f:eb:d9:ef:83:30:45:80:
f0:01:dd:6b:89:dc:40:28:37:fa:d8:b7:ac:29:57:
78:f7:20:86:fa:db:41:16:f1:1c:30:13:0f:d0:84:
c5:14:50:fd:ca:8b:65:2c:9c:71:60:8b:f9:73:36:
67:06:32:0c:92:45:bb:7c:f7:21:55:da:8b:76:29:
8c:16:3e:5f:1b:ec:d2:d0:c9:31:90:3e:32:66:c5:
ae:4b:60:7d:01:de:25:88:73:eb:e6:57:1b:e9:3c:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:88:8F:DC:47:90:CC:AD:AD:52:8F:D5:7A:6A:7E:77:2F:43:07
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:18:e4:00:91:9c:10:2d:b2:0c:23:3c:6d:02:f6:21:5b:99:
48:9a:72:40:4c:ef:d5:42:ab:4e:62:d4:a3:f2:03:85:dc:2d:
ff:fd:30:c2:ba:a1:5e:6a:bc:c7:3a:f2:cb:bb:7c:00:fe:d8:
c4:43:6c:56:3a:d1:f1:da:97:7d:95:30:2d:4f:e6:2f:95:f2:
c4:a1:88:ae:41:68:5d:93:6b:bd:72:bb:f3:5d:67:84:cd:08:
ee:7f:22:58:a8:72:e4:a0:b4:a6:0a:93:5f:b8:29:d4:8f:dc:
6c:17:c6:c3:7a:b2:54:b4:90:d3:ed:3e:79:a7:11:0d:7d:92:
2b:0b:42:94:9a:b4:f1:9a:1a:d6:de:9a:34:b4:26:45:81:8b:
5f:13:57:0a:e7:2e:0f:c5:8c:42:1b:ac:13:e5:54:ec:98:af:
35:3f:3c:eb:d0:bf:79:60:67:61:98:b4:ff:09:e4:a8:e8:82:
08:73:90:bc:61:b7:38:c4:93:79:59:d0:78:66:c9:79:c9:b0:
27:31:59:99:a8:61:0b:2d:ab:04:94:bf:6f:b6:a4:3d:84:30:
7f:4b:4d:6c:2b:75:04:18:0a:33:8e:e9:60:27:91:34:96:e2:
87:7d:af:ec:92:10:d1:2a:59:ef:bc:d0:67:4f:b0:b9:7f:ba:
35:4c:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:28 2026 by rpki-client