
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json)
Hash identifier: uUz+WlCf4o1N59SrIIev46+2jIG+a6I40GxOs7V0pqE=
Subject key identifier: 05:3F:C8:50:47:6C:C2:64:80:17:7D:1C:8D:7D:CB:F5:4B:30:B6:74
Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Certificate serial: 357F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
Manifest number: 357F
Signing time: Mon 28 Sep 2026 15:11:47 +0000
Manifest this update: Mon 28 Sep 2026 15:11:47 +0000
Manifest next update: Mon 05 Oct 2026 15:11:47 +0000
Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: 3MmMTwA0/ecO49ObW7s1TDhyEf4My2l9qRcDh4ekx88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Validity
Not Before: Sep 28 15:11:47 2026 GMT
Not After : Oct 5 15:11:47 2026 GMT
Subject: CN=6aba83b3-b03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:30:9e:99:e0:b8:4c:42:fe:97:01:e2:1a:
9c:97:f7:17:5c:a6:33:0f:23:e8:c9:f4:ca:4e:93:
69:2e:f8:c4:82:f0:91:60:f4:3a:d7:a0:77:2d:0d:
cb:35:44:ef:fb:32:82:74:16:ff:a2:61:67:c2:67:
4c:d8:64:b6:ee:c2:0e:78:cf:b3:91:b4:0d:d6:0e:
2e:b5:aa:3d:c1:fb:f3:9a:56:01:92:14:0c:39:61:
da:49:43:46:78:ab:03:8e:4c:7e:a6:a5:45:16:36:
e4:10:aa:c6:48:96:2a:65:cd:23:1d:b4:79:3e:04:
f8:bb:51:6c:76:29:ff:e1:a1:6d:ca:9b:52:84:fc:
48:79:8b:71:5f:a9:90:6d:86:ed:96:3f:82:ec:c3:
30:82:44:12:90:6e:58:bb:43:71:ad:d8:25:78:55:
fe:2a:f2:c5:c1:07:91:92:43:9a:0e:09:7b:14:27:
e5:1c:d4:b5:41:f0:a7:33:e5:77:50:68:31:d8:20:
5a:f5:ee:2f:6f:31:a5:8a:9b:e2:3a:13:c2:64:75:
db:9b:dc:b5:04:46:2e:ec:41:6d:ba:ac:d6:82:b4:
04:49:dd:a7:47:59:d6:c0:76:d2:ad:e5:a7:66:3c:
77:4b:5d:e0:51:ff:11:d7:31:e9:b2:ad:f7:da:7a:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:C8:50:47:6C:C2:64:80:17:7D:1C:8D:7D:CB:F5:4B:30:B6:74
X509v3 Authority Key Identifier:
keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:de:fb:f5:13:28:c7:a5:1f:73:19:ac:8e:01:e8:8a:5a:a4:
c8:b4:1e:bd:5a:92:7e:ae:43:80:8b:df:f1:81:20:57:e9:f5:
bf:62:95:93:12:f1:4d:dd:84:62:4e:a8:d0:49:c4:d2:6f:2b:
c8:2a:08:74:dd:35:29:74:10:88:3f:86:98:02:9c:67:8a:4a:
be:e9:02:4c:11:9c:4a:94:b5:71:ce:ac:eb:1e:a3:a4:e7:59:
71:ef:3f:07:cd:52:1c:ce:db:38:23:85:93:41:79:20:da:01:
b2:e8:e4:64:48:84:86:c0:b6:ed:87:9b:57:50:45:14:0a:76:
5f:a1:05:40:39:3e:a9:7b:df:20:a3:7b:a8:62:e6:b6:3d:0f:
b0:79:da:e5:e2:cd:9e:5e:f5:43:ac:51:55:2a:61:95:a5:30:
38:6f:bd:ba:6a:49:0d:ea:16:dc:42:f2:be:dc:d3:5b:39:3e:
a5:ea:8e:95:09:69:f2:96:6d:3e:89:6b:06:67:29:26:24:86:
6c:84:21:1d:70:54:fa:c5:f8:56:54:56:49:32:d2:17:48:42:
5c:42:1a:91:38:18:d4:94:54:82:2a:6e:38:10:5d:c3:e9:27:
d7:a1:65:dc:9c:74:30:ba:85:2e:32:b4:da:35:9b:73:c4:db:
15:2d:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:17:11 2026 by rpki-client