
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier: kpy+K4a5RnDLqc4AuOOgqNr+1Ma5maA/YWBOXv/N/UE=
Subject key identifier: 8B:22:93:C2:AD:DB:6A:1D:A5:40:14:1B:6A:4F:BE:79:6B:44:BB:09
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number: 0ACA
Signing time: Sat 10 Oct 2026 21:13:22 +0000
Manifest this update: Sat 10 Oct 2026 21:13:22 +0000
Manifest next update: Sat 17 Oct 2026 21:13:22 +0000
Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: 4+0l1qGDsYKU/6cnCgRCHo4i9qJK5Eg//TmFPR9v7gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Validity
Not Before: Oct 10 21:13:22 2026 GMT
Not After : Oct 17 21:13:22 2026 GMT
Subject: CN=6acaaa72-88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:c2:0b:19:eb:eb:46:d7:e2:ed:00:3d:d5:
cb:a4:01:2a:dc:19:a9:cc:7e:9b:6f:67:ec:c2:d0:
9f:e3:e0:57:f4:22:1f:46:9f:b6:ea:0e:c4:f2:3b:
70:0a:ca:c9:45:97:eb:ef:4d:fa:ef:03:e4:9a:24:
37:0a:ad:97:e4:8a:4a:2e:07:2d:81:0a:d1:ed:0c:
05:73:e1:ca:41:76:0f:6f:11:78:14:ad:cf:c7:4e:
c0:ce:8d:3f:9a:29:a0:54:7d:25:97:37:d2:20:de:
94:94:37:33:22:9b:dc:21:2f:ba:92:73:c2:9a:fe:
14:b2:f2:95:e0:ff:00:26:b2:a9:ce:69:04:2f:23:
f4:55:b2:ce:5b:0e:d6:87:af:16:7f:0a:0e:c7:08:
db:e0:07:7e:8c:4f:a0:7c:c2:a1:e5:f4:80:11:6e:
15:81:f6:d3:74:07:84:23:d4:8b:e4:82:aa:0f:d8:
09:75:c7:9b:24:80:4b:77:c8:61:83:e3:f6:ee:4a:
6e:33:9c:d4:e9:3c:7c:89:ae:4a:c5:e3:a4:e1:d6:
49:a8:0f:31:f1:32:58:f8:8c:55:fc:cf:a5:44:9b:
71:35:57:4f:80:79:9b:de:d2:72:a9:7f:b4:1a:83:
95:63:2c:b0:dd:74:12:71:8e:2d:8f:7e:1d:53:85:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:93:C2:AD:DB:6A:1D:A5:40:14:1B:6A:4F:BE:79:6B:44:BB:09
X509v3 Authority Key Identifier:
keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:69:8c:14:0f:ba:2f:dc:4c:c1:c3:a7:3d:f5:6d:71:93:
a9:b5:53:1d:a5:0b:3e:3d:36:83:17:e3:a8:7a:f8:b3:d0:9c:
4c:f7:04:87:43:54:35:67:5a:a1:33:89:87:1c:bf:36:2b:62:
78:1b:d5:cf:b8:b3:a3:bb:a4:24:2f:e9:2e:d4:9e:fa:d4:af:
ce:49:e0:2c:67:b9:3b:1c:3c:cb:bd:f0:71:d4:69:f5:f4:4e:
11:82:67:be:a5:09:a2:f5:e0:6a:4b:d7:37:15:7a:5a:ff:5b:
b6:5b:7f:ad:0f:3c:01:31:89:29:9f:6f:91:64:b1:38:2d:ee:
95:25:2c:10:f2:fb:fa:26:8e:2a:cf:61:06:f2:5f:6e:31:f9:
43:c9:55:c2:be:7b:fe:c2:51:1e:e3:2f:27:9e:f3:56:0d:3f:
e1:81:20:21:7f:2b:3b:e4:40:cc:b7:00:55:d0:67:4a:b6:ce:
75:2e:a4:f7:e5:af:80:26:81:fb:cf:d6:ad:70:50:fe:7b:57:
12:2d:9a:77:75:e2:7f:49:c1:30:f5:9d:8a:e7:76:e6:70:50:
24:34:4e:b6:68:a1:c0:1e:e7:cc:c8:8d:cd:99:1a:d9:a6:09:
0a:79:c3:1c:e6:22:39:ea:5e:8e:e8:f6:ea:03:b2:b0:c3:b0:
70:ad:a6:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1
QTI1OEExNTIwHhcNMjYxMDEwMjExMzIyWhcNMjYxMDE3MjExMzIyWjAYMRYwFAYD
VQQDEw02YWNhYWE3Mi04OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt47CCxnr60bX4u0APdXLpAEq3BmpzH6bb2fswtCf4+BX9CIfRp+26g7E8jtw
CsrJRZfr70367wPkmiQ3Cq2X5IpKLgctgQrR7QwFc+HKQXYPbxF4FK3Px07Azo0/
mimgVH0llzfSIN6UlDczIpvcIS+6knPCmv4UsvKV4P8AJrKpzmkELyP0VbLOWw7W
h68WfwoOxwjb4Ad+jE+gfMKh5fSAEW4VgfbTdAeEI9SL5IKqD9gJdcebJIBLd8hh
g+P27kpuM5zU6Tx8ia5KxeOk4dZJqA8x8TJY+IxV/M+lRJtxNVdPgHmb3tJyqX+0
GoOVYyyw3XQScY4tj34dU4W8gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsik8Kt
22odpUAUG2pPvnlrRLsJMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1
MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV
bzB4d1FOcTBkY05hSllvVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtjtpjBQPui/cTMHDpz31bXGTqbVTHaULPj02gxfjqHr4s9CcTPcEh0NUNWda
oTOJhxy/NitieBvVz7izo7ukJC/pLtSe+tSvzkngLGe5Oxw8y73wcdRp9fROEYJn
vqUJovXgakvXNxV6Wv9btlt/rQ88ATGJKZ9vkWSxOC3ulSUsEPL7+iaOKs9hBvJf
bjH5Q8lVwr57/sJRHuMvJ57zVg0/4YEgIX8rO+RAzLcAVdBnSrbOdS6k9+WvgCaB
+8/WrXBQ/ntXEi2ad3Xif0nBMPWdiud25nBQJDROtmihwB7nzMiNzZka2aYJCnnD
HOYiOepejuj26gOysMOwcK2m2Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:05:11 2026 by rpki-client