
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier: bbAFitcdDgoX3A/ZhPxzVK11vGc9dNYavAItLcCqjJI=
Subject key identifier: E7:DE:52:4E:63:7E:24:60:BF:4B:7B:66:B3:4D:57:42:5C:26:75:4E
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number: 03D2
Signing time: Fri 25 Sep 2026 01:26:45 +0000
Manifest this update: Fri 25 Sep 2026 01:26:44 +0000
Manifest next update: Fri 02 Oct 2026 01:26:44 +0000
Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: KL2FQNUAQOWDmYGxaoS3lsDVmReX0xDTEteZm3rMJOM=)
2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Validity
Not Before: Sep 25 01:26:44 2026 GMT
Not After : Oct 2 01:26:44 2026 GMT
Subject: CN=6ab5cdd4-4dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:8e:b5:99:28:2f:03:9a:a3:73:91:4b:46:
ac:ff:0f:88:46:93:f7:93:9b:2c:40:60:5c:50:47:
bd:96:a8:cf:5f:39:6d:c8:ba:d9:cd:71:60:d6:c4:
43:58:1e:9d:c9:a0:e2:31:5f:cb:d6:3d:8a:e6:91:
4d:c3:f2:1d:25:b8:e3:d4:8c:10:e1:0e:8f:02:d3:
73:62:ff:33:fd:7a:f7:48:6a:0f:76:8e:b7:68:d1:
f6:5d:f7:50:49:a9:25:7f:5b:43:cf:b8:7e:55:cf:
47:d7:8e:46:47:f0:73:ac:b2:3f:16:f3:52:93:1b:
8d:64:66:00:c5:84:a0:b7:b7:4a:d2:e5:72:5f:b0:
01:60:1d:3f:4c:54:e8:da:a8:27:7c:15:1b:ee:01:
a2:62:05:f6:4a:c4:64:82:c0:9f:07:7a:a8:28:3d:
20:e8:ee:77:d0:75:14:81:14:46:79:1c:08:79:ad:
3a:91:6d:ad:51:aa:64:fa:c8:be:95:27:85:70:1a:
e2:ab:9b:33:bd:99:32:de:aa:14:13:fb:cc:f0:c4:
fe:36:49:a3:58:c3:4a:83:f1:ab:0a:fd:69:c5:03:
2f:4e:c8:37:66:61:29:40:4a:92:ef:62:21:ed:81:
53:eb:de:3d:cc:1b:04:8b:79:8b:a2:85:92:c6:60:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:52:4E:63:7E:24:60:BF:4B:7B:66:B3:4D:57:42:5C:26:75:4E
X509v3 Authority Key Identifier:
keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:c6:01:c3:d9:c0:5d:7f:70:18:db:e7:33:36:3a:a6:e6:
8b:ee:f6:f6:cd:94:17:65:c3:dc:73:05:90:cf:c4:cf:72:05:
a5:6e:00:cb:55:38:db:41:f3:c3:91:85:4a:4a:ac:1f:94:cd:
2a:b9:3f:02:88:f4:e0:11:dd:27:c3:cd:41:34:29:78:f0:82:
cd:a6:73:37:b5:f0:cd:5b:5f:52:3c:01:6f:91:43:4a:bf:f1:
5f:8e:99:12:83:08:bd:1a:52:fd:2b:6e:43:4d:e5:0f:0e:a7:
90:8f:19:b9:5a:be:c3:c3:df:de:cf:7a:51:0a:8c:d3:98:22:
9d:90:9d:87:8d:f7:92:d4:3b:ba:b5:20:a5:57:1d:7d:a7:5d:
60:eb:03:31:cb:07:6c:88:30:b5:0d:f2:80:80:d3:67:f1:02:
1c:6b:a0:93:92:b3:f2:07:90:41:91:cd:92:ad:fc:5a:a0:94:
d1:2c:21:34:60:c6:1b:b0:5b:ca:60:a8:64:ca:d4:f8:70:77:
a4:83:3c:30:d8:dc:0b:92:5f:82:25:17:d9:16:5b:c7:a4:ee:
5c:2e:a8:04:c6:3d:3a:1b:e3:e7:db:64:52:66:2e:8e:ba:8e:
41:94:38:1e:e4:06:72:70:18:ae:a9:7e:27:b6:96:ad:18:67:
6e:f9:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:21:50 2026 by rpki-client