
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
File: dQVcA_HORREaW3mWTntNV3H9t8k.mft (raw, json)
Hash identifier: TC8jZxmW6Kx+lDj80UUrHZxJpNtEd61qgGdvp0T3iPw=
Subject key identifier: 8F:E0:23:4A:98:33:8E:51:80:0A:86:82:2F:CB:B4:F2:98:2C:E4:9D
Authority key identifier: 75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9
Certificate issuer: /CN=A91AD69A/serialNumber=75055C03F1CE45111A5B79964E7B4D5771FDB7C9
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
Manifest number: 40
Signing time: Mon 21 Sep 2026 08:27:55 +0000
Manifest this update: Mon 21 Sep 2026 08:27:54 +0000
Manifest next update: Mon 28 Sep 2026 08:27:54 +0000
Files and hashes: 1: dQVcA_HORREaW3mWTntNV3H9t8k.crl (hash: 1nfzuqJ7UHoCDhmsnC6clWJGLVPZwPZXsdI7Akyxgng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.crl
rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD69A, serialNumber=75055C03F1CE45111A5B79964E7B4D5771FDB7C9
Validity
Not Before: Sep 21 08:27:54 2026 GMT
Not After : Sep 28 08:27:54 2026 GMT
Subject: CN=6ab0ea8b-05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:f8:8e:6e:06:ad:c8:60:d9:b6:fd:49:b4:
04:6a:69:67:7c:3b:e5:81:cb:cd:97:ea:6e:88:9b:
2b:ee:42:97:4a:3f:d3:e8:5d:cd:5f:82:67:56:dd:
6e:41:8c:dd:82:f7:79:9f:a4:a6:fc:b1:ee:30:3c:
f1:4b:bf:45:84:9c:52:80:c4:d7:8f:75:28:f1:ea:
f4:85:8d:d1:fb:6c:e6:95:35:81:e1:81:f5:c4:07:
d8:76:4f:c4:60:50:68:b9:9e:88:1a:39:a4:2e:53:
24:30:93:e3:f1:c2:fa:58:de:ba:3a:e1:b4:c8:a9:
32:ad:3b:3c:e0:cd:06:33:7b:5f:e7:65:c7:fb:0f:
a4:8e:a7:ee:8e:9b:58:e1:c0:f2:5b:27:85:c5:8e:
61:88:a8:34:fd:1f:34:5d:19:c3:89:76:fa:61:2a:
06:6b:f2:e2:5c:00:3d:e0:31:cd:4b:ac:4f:ff:2c:
71:58:d5:1c:4a:c7:d6:d5:7c:c8:62:4a:a3:ac:fc:
9f:e4:bc:12:15:14:cc:22:27:ff:40:bc:92:05:81:
42:7a:eb:09:f1:9b:36:13:3d:c3:d1:1d:83:fc:4b:
3c:5f:ac:93:b9:ba:11:08:c7:c1:63:14:94:65:19:
c9:bf:ee:10:17:16:44:14:ae:fa:3f:61:17:63:be:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:23:4A:98:33:8E:51:80:0A:86:82:2F:CB:B4:F2:98:2C:E4:9D
X509v3 Authority Key Identifier:
keyid:75:05:5C:03:F1:CE:45:11:1A:5B:79:96:4E:7B:4D:57:71:FD:B7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVcA_HORREaW3mWTntNV3H9t8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD69A/9A49A41A533F11F191A99F70CC833773/dQVcA_HORREaW3mWTntNV3H9t8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:8f:f2:f6:a9:04:a0:5d:2b:d7:d2:6f:c6:87:14:c7:b0:
42:b4:20:33:12:e2:22:ef:23:04:dc:3c:96:29:59:b1:da:c2:
a4:64:26:d4:b0:f3:39:ee:cd:5c:ec:30:c1:d1:37:d6:6c:72:
0d:e7:44:10:b2:83:95:eb:86:20:8c:a5:48:f9:04:36:2a:8e:
cf:f0:36:f2:23:cc:81:51:b6:14:e5:c5:46:f1:8d:60:cb:26:
86:ff:48:d2:9e:ad:e2:12:96:92:fe:0a:8e:95:4c:3b:d0:43:
93:b3:76:13:8e:f4:2c:b5:98:36:ad:9a:ee:36:40:44:ab:b7:
87:60:50:73:3b:bf:5e:86:18:99:98:f2:ac:a7:71:b7:85:a5:
df:d5:ac:b2:47:a3:a6:b5:9e:1a:6a:f1:d6:d8:ea:db:d7:56:
b1:cf:f5:3d:73:ed:c4:4a:36:51:ed:2b:86:a2:77:bb:ca:e5:
21:32:59:7c:fc:91:b7:fd:79:d6:1a:e9:89:93:82:d4:c2:d4:
73:e9:3a:a3:78:77:3a:5a:e3:fc:ab:9f:57:19:83:50:af:65:
6b:d3:27:7d:57:b2:d6:f3:7f:3e:45:62:bc:a7:9f:4b:1d:d5:
c1:8a:84:bd:b1:9e:a9:78:70:59:69:70:ea:09:a5:2e:4c:ac:
fa:55:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:34 2026 by rpki-client