
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier: PHX/votC0vnAfZNn9J5QzTbOuwm8NAVQ4EsAPsxKBoo=
Subject key identifier: DD:02:2D:DB:E5:62:18:2F:34:F2:1F:14:0D:75:2E:1C:F3:BE:2F:7A
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number: BD
Signing time: Mon 09 Nov 2026 07:09:23 +0000
Manifest this update: Mon 09 Nov 2026 07:09:23 +0000
Manifest next update: Mon 16 Nov 2026 07:09:23 +0000
Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: pZ5RfvVUiyxbORG8Zj4i/ulGx0TnahrD+Y62KvLn0+0=)
2: F3D0F394A9E811F1B4B821653A11F970.roa (hash: Ke4nsI9PbT1sUSAw9ynvVPd9L5zGagRzSrYV1iiyUT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 07:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Validity
Not Before: Nov 9 07:09:23 2026 GMT
Not After : Nov 16 07:09:23 2026 GMT
Subject: CN=6af171a3-05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:26:4d:55:36:e6:0e:ad:5a:93:53:bf:27:
3d:9f:c2:37:a2:4d:3a:83:aa:57:98:5f:af:f3:9d:
e1:b1:44:7c:55:f0:d7:48:70:55:c0:0b:48:73:44:
d1:b9:cc:fc:36:d4:57:4a:58:4a:50:24:06:b4:7d:
77:3b:b2:9e:38:94:5d:47:c0:20:27:df:6a:03:13:
fd:1e:9f:94:45:70:b3:f5:75:f2:95:e6:a6:04:75:
3c:26:41:ef:81:c1:fe:f2:46:f8:14:ac:b1:fb:51:
a6:e6:25:8f:cb:b1:ba:9d:b8:3b:b6:fe:71:d8:53:
28:7f:8c:18:aa:f1:93:51:74:cf:76:ea:48:a1:ba:
a5:e2:dc:67:ce:99:69:6a:f7:47:c8:84:98:aa:dd:
12:c2:ca:06:d1:a3:22:fc:08:01:81:cd:12:44:83:
06:0c:13:a8:33:cb:eb:b5:a3:22:df:c4:5f:cf:84:
34:3c:54:87:20:9b:14:2c:fc:72:01:bf:b5:8e:82:
f5:1e:ad:2f:0f:b7:1b:32:96:41:ad:6c:df:89:78:
bd:84:e0:5f:6c:1e:57:2e:83:4c:5e:44:62:a6:36:
d8:d7:50:d5:c9:c3:b7:6f:70:0c:4b:c9:ba:ab:d5:
d7:30:00:74:69:54:94:af:16:ee:5e:87:53:ef:81:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:2D:DB:E5:62:18:2F:34:F2:1F:14:0D:75:2E:1C:F3:BE:2F:7A
X509v3 Authority Key Identifier:
keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:f7:7a:e7:7f:89:e0:f2:57:48:31:9b:dc:63:60:f0:08:
03:14:d3:80:3e:b5:6e:d2:ae:46:ab:2e:f0:fb:e9:27:db:5d:
62:c7:ac:d9:ca:c3:e6:27:e5:37:d7:3e:14:92:8b:0f:3f:90:
95:77:be:a2:39:2f:69:51:71:8c:aa:d5:f1:b0:b4:90:07:c3:
54:06:68:42:14:78:5f:d1:78:e9:69:03:ce:f4:61:4c:4c:c0:
7c:6b:35:b1:82:43:9b:36:68:ed:bb:f4:d2:6f:7f:ae:c8:86:
ad:12:f0:98:d2:80:80:bb:9a:ab:05:65:38:15:aa:e0:16:7e:
4b:45:3f:a0:d9:cb:29:cd:95:eb:9a:d5:7e:c3:0c:7b:4e:8a:
1c:ab:49:84:03:43:35:30:e9:71:f1:73:71:34:36:b5:ac:92:
d0:9c:e3:cf:b7:17:4c:56:cc:71:d3:7a:f9:7e:2f:3e:c0:de:
71:09:dd:f9:89:3d:c4:43:3a:9e:fc:c8:3a:17:b3:b4:bd:05:
03:66:ed:48:c7:66:aa:18:9f:04:16:ee:54:e5:2a:22:db:40:
d5:ca:ce:36:dd:10:27:85:ed:52:70:a3:26:75:c7:81:33:c8:
84:2c:53:d3:56:c6:b5:8f:53:f7:62:73:cf:20:13:d7:57:a0:
50:22:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:21:27 2026 by rpki-client