
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
File: rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json)
Hash identifier: YbCApKtCo/mN1GwctAUSu41ahiQMowAW7daYh/Sf6EU=
Subject key identifier: 3A:58:3C:90:1A:2D:C6:AD:64:65:73:74:A7:5A:CE:E5:CA:0B:DA:EA
Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
Certificate issuer: /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
Manifest number: 63
Signing time: Fri 13 Nov 2026 08:16:40 +0000
Manifest this update: Fri 13 Nov 2026 08:16:39 +0000
Manifest next update: Fri 20 Nov 2026 08:16:39 +0000
Files and hashes: 1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: PkKFeNeb21Avpe3olQilxjNNZsuLC/nnIA5bywPHR3I=)
2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 08:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Validity
Not Before: Nov 13 08:16:39 2026 GMT
Not After : Nov 20 08:16:39 2026 GMT
Subject: CN=6af6c768-46b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:94:71:50:17:f8:8c:ff:67:dc:b0:ba:ff:
53:bf:21:23:18:ee:63:26:95:26:a2:04:a7:ec:16:
db:66:24:b3:32:32:01:75:65:99:16:95:a3:c9:97:
91:eb:41:9f:ad:3d:ce:80:08:af:76:db:2f:d6:5f:
ac:ba:e6:d4:36:f7:23:65:83:5c:b8:86:d9:4c:af:
1a:9d:72:d3:b1:f6:d3:fc:2b:ca:43:2f:65:c5:73:
15:06:06:c0:2f:a8:f0:f3:88:3c:9a:3e:fa:da:1d:
16:e3:c7:0a:d2:28:22:36:ea:e8:ce:3a:56:e9:06:
80:1c:cc:65:0b:20:14:82:86:0a:1c:4e:99:f5:1a:
5f:c4:a7:dc:e9:a7:3b:76:1c:f5:b8:e5:8b:39:87:
16:97:51:b3:59:0b:4e:6f:41:30:ed:89:85:ca:37:
84:f5:f7:7b:64:47:87:06:06:45:e8:65:75:25:e6:
23:e1:a9:a3:a9:22:7a:bf:5f:47:a5:61:0e:24:ad:
c6:44:11:5c:1d:5a:ba:18:77:26:41:18:28:6e:bd:
66:41:34:67:df:0c:db:d5:37:d5:4a:50:b1:81:50:
b7:3a:fc:62:cb:6b:9c:bc:e7:47:90:0d:1a:43:e6:
93:a6:12:ae:35:a4:9b:ce:51:da:4f:77:d1:83:68:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:3C:90:1A:2D:C6:AD:64:65:73:74:A7:5A:CE:E5:CA:0B:DA:EA
X509v3 Authority Key Identifier:
keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:45:fb:35:38:d5:1a:a0:0d:cb:5c:0d:5c:a3:c6:03:94:
49:cc:f4:8b:5c:64:fc:3d:10:c5:39:54:fd:ea:b3:ac:45:f7:
ba:50:48:51:58:28:73:37:c2:4d:4d:7f:ef:d9:e0:e4:8a:0f:
b2:e9:4d:68:57:08:c2:95:7c:61:cf:43:c0:05:07:f4:f5:f1:
f3:cf:37:69:ad:a6:9f:34:74:eb:24:7b:5d:04:0d:5f:d3:64:
4e:1f:44:68:6a:48:a0:ed:c1:e4:28:0b:fb:af:f5:be:6e:ea:
fb:e4:c1:29:34:45:4a:4f:83:1e:42:79:b2:d5:be:28:75:90:
32:01:2c:ba:5a:d9:24:66:57:8e:15:ef:ec:43:a5:ab:8e:aa:
f8:be:67:84:41:e6:23:db:c8:db:3a:8b:37:d2:3c:bb:1b:4d:
be:07:da:f8:92:28:52:f3:74:c6:3a:f1:5d:84:4b:12:76:97:
e9:a0:b9:04:40:53:af:41:84:b1:6a:04:44:c1:33:a5:2f:0d:
30:06:c5:33:3d:35:09:97:31:6d:da:08:8d:ab:0d:2a:c5:58:
b8:cb:2e:42:4c:b8:57:c0:69:1e:1a:f4:a0:f6:70:78:42:74:
e9:ec:cc:93:d3:53:02:2c:d8:9f:5e:2a:85:0f:84:b9:1a:94:
c9:69:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:38:24 2026 by rpki-client