
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json)
Hash identifier: wz081C4lQ1+Ez0dOe1gyb1T5FvinlfTVfOT06fmMtdU=
Subject key identifier: 60:07:68:D2:05:23:00:1D:6D:7B:4D:98:68:CE:00:2F:D8:32:71:9D
Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
Manifest number: 01F8
Signing time: Mon 28 Sep 2026 19:53:47 +0000
Manifest this update: Mon 28 Sep 2026 19:53:46 +0000
Manifest next update: Mon 05 Oct 2026 19:53:46 +0000
Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: NXkV5VtNBQca3S/NcpzlM1bqKURBb72u0OF0i4mG4j8=)
2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: DTZjvcop6RbUK3I8jOrrlZ7Of6WNd9BwpOwSxOrA3eA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Validity
Not Before: Sep 28 19:53:46 2026 GMT
Not After : Oct 5 19:53:46 2026 GMT
Subject: CN=6abac5ca-1cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:98:d8:19:bb:46:8b:5b:ca:2e:e2:44:f7:
12:b0:df:83:0b:a4:4a:73:aa:2e:68:74:49:00:19:
0e:94:1a:78:f3:69:2e:c3:90:cf:a7:87:2b:2e:5e:
6a:0d:8d:30:76:f0:33:92:e0:66:93:71:1e:54:60:
5d:9c:0e:91:2d:82:a7:9d:65:71:9c:ae:ec:7a:15:
8d:e8:c3:40:6b:17:18:52:72:da:18:ea:da:cf:ab:
0f:d3:8f:d0:fc:83:a4:12:73:65:de:75:20:4c:35:
50:10:56:b5:68:fc:a1:a8:b6:75:65:92:13:9b:3b:
c3:e3:95:cd:d6:fc:76:7e:a5:41:3b:3b:48:d2:0d:
fb:b4:1f:b2:76:32:10:b7:55:48:a9:d5:1e:94:77:
59:a6:1a:65:56:5f:24:82:43:0f:73:87:17:69:32:
11:b6:6e:bb:9f:ec:29:81:6e:b5:b7:ac:a1:e5:83:
f8:86:47:de:58:c6:df:fd:8d:49:9b:ca:89:30:d6:
b5:ce:5c:24:59:3f:ef:a2:a0:78:4e:b5:55:0e:c8:
3a:73:aa:3e:f3:c7:10:4e:2b:43:58:49:97:6d:2b:
c4:a3:4c:a1:81:d9:d5:36:e2:b5:61:a9:a3:d8:ca:
b7:b4:90:94:3a:26:9e:b0:cb:f5:3a:e2:3a:de:e8:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:68:D2:05:23:00:1D:6D:7B:4D:98:68:CE:00:2F:D8:32:71:9D
X509v3 Authority Key Identifier:
keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b5:84:b4:9d:c0:ac:b9:fe:5b:e6:37:ac:b4:18:45:6c:da:
6a:73:f3:fd:88:3b:8b:fa:18:8a:1b:17:36:dd:f6:0f:b4:94:
6c:1b:e9:f4:74:be:31:37:93:a0:b6:db:28:b0:1c:fe:1e:66:
1c:af:2a:4c:e5:c7:9f:ca:e8:ff:81:35:41:6e:97:ad:35:ee:
3e:86:be:02:13:c9:80:7c:f4:f4:90:2c:0e:54:7d:cb:f6:71:
79:3f:46:9f:ce:49:d5:cf:c0:c9:f5:d1:e2:ef:6f:b0:5d:8b:
e6:ba:55:1d:d0:18:d2:fc:f8:3c:fe:5b:73:81:7a:d0:65:74:
2c:1c:42:20:65:2e:53:67:ae:c4:1c:91:e5:8c:02:b8:ca:94:
03:ae:fd:fe:97:58:8a:57:c6:e2:e9:83:d8:19:5d:bb:d9:68:
ca:d5:b5:5b:0e:73:40:10:8f:28:2c:d5:f6:95:73:97:81:f4:
35:e4:ed:6c:3c:a3:a6:49:24:24:3f:7c:2f:34:5f:d8:77:6f:
9d:8d:4b:dc:ab:7a:6a:2f:36:a3:fb:13:e7:96:76:b7:8f:6c:
23:d3:f4:c5:4f:4e:53:cf:4b:93:85:36:f2:ea:01:63:2a:28:
87:c6:2c:b2:67:92:5c:a5:c8:fe:44:f5:2f:79:ba:fa:15:71:
ba:2d:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:26:19 2026 by rpki-client