
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File: kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier: ILII1ycVUtUT1a/D39XSKyf1ajzlKUpRIV/HsljAoww=
Subject key identifier: 02:F8:F4:B6:2C:E1:39:BE:B7:AD:84:CD:D8:E9:32:01:3C:50:00:06
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number: 021B
Signing time: Sun 11 Oct 2026 03:29:18 +0000
Manifest this update: Sun 11 Oct 2026 03:29:17 +0000
Manifest next update: Sun 18 Oct 2026 03:29:17 +0000
Files and hashes: 1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: CThcKJ/xTCWN6H7dKEhEXz6lAtP4te7YU0kpv868+C0=)
2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: EaakEgdFwicKWl6P4v+HQcFOhGMzWeAMEZbE1mBKQ84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Oct 11 03:29:17 2026 GMT
Not After : Oct 18 03:29:17 2026 GMT
Subject: CN=6acb028e-f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:f3:f8:79:f2:6c:48:04:f2:85:43:12:35:
44:ca:0b:e3:7f:43:8d:09:cb:31:da:96:ea:05:4b:
98:aa:27:f5:62:9b:87:6b:f7:25:c0:46:a5:4d:8e:
c5:51:3b:78:63:f6:56:91:c3:e3:32:d8:60:dc:ac:
ba:c0:5f:e9:28:0b:db:e4:8a:6d:ee:8d:5e:99:55:
fe:28:cd:83:01:ce:13:28:1e:a5:0d:18:19:ec:49:
a7:0e:2d:69:7c:80:37:85:ae:4d:d6:76:ff:e1:51:
fb:4b:77:11:1e:96:f9:40:14:4b:42:25:ce:a0:8b:
b2:cd:75:51:92:aa:2c:00:c7:ae:ab:51:9d:43:fa:
df:49:c3:65:aa:31:9e:dc:2e:22:65:99:f0:e3:06:
44:a5:9a:aa:99:51:8e:3c:64:93:4f:d9:bd:6c:23:
b4:20:c5:72:40:5c:d6:ad:9d:1b:96:64:00:59:5e:
44:36:cf:38:3b:fc:55:0d:14:b2:2c:12:c6:8e:73:
7f:fb:01:b2:dc:96:24:3a:d8:b4:13:1f:59:74:34:
a8:da:af:42:a6:7e:5e:b8:5e:58:d0:1c:1b:22:ab:
28:33:e9:dd:4b:0a:72:53:9d:4d:62:27:eb:a0:8f:
86:19:a2:59:5f:ce:ac:ca:a5:10:51:66:87:2a:72:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:F4:B6:2C:E1:39:BE:B7:AD:84:CD:D8:E9:32:01:3C:50:00:06
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:d8:a1:41:84:e6:20:77:ed:09:45:9f:48:5f:a8:42:91:
10:5f:18:64:ec:2b:a2:17:d0:0e:7a:d8:36:56:fb:62:bb:97:
bc:d8:a6:4c:91:99:1e:53:8d:42:ba:36:b3:bf:4d:73:13:61:
d4:1a:30:38:2e:fa:5e:83:bf:4e:62:54:e4:41:13:0e:a2:52:
b5:d8:3d:70:41:23:ac:9b:56:20:77:45:1d:88:e5:30:4c:d6:
cd:b1:29:92:3a:99:ec:88:19:85:64:af:b9:5f:f2:16:fb:2f:
d0:66:40:00:96:08:fb:ca:09:42:e4:d7:14:d8:c7:80:d9:e2:
5a:3e:ba:b1:63:10:f2:76:9c:f3:dc:99:dd:02:80:be:a7:b3:
54:f5:58:ac:a2:db:d0:3f:e1:81:1d:4a:0d:37:19:15:5f:5f:
e2:f3:5b:6c:87:aa:03:35:01:4a:1d:71:a4:e1:7a:33:87:37:
d9:99:78:8d:33:c1:2e:7e:e4:c4:60:5f:d2:3f:c2:3d:e3:4c:
6b:a5:3d:b7:05:98:01:68:1e:0b:70:41:74:e9:d5:c0:37:77:
23:5c:4a:64:72:97:67:9a:71:50:78:5e:e4:28:c9:5f:c6:bb:
6e:ee:47:91:57:38:5e:ee:11:1e:92:6a:30:3e:3b:55:e7:93:
fa:5d:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:29:41 2026 by rpki-client