
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: MLsA1WgKfk/03bmszkIdz4CC1V09MqSSrur297+3j3U=
Subject key identifier: B4:25:E8:E8:AD:95:8A:81:8B:26:4D:36:D7:FB:B3:9B:97:60:DE:EA
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B66
Signing time: Mon 12 Oct 2026 16:18:21 +0000
Manifest this update: Mon 12 Oct 2026 16:18:20 +0000
Manifest next update: Mon 19 Oct 2026 16:18:20 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: G8/JjwvDvRsPHPPY+fngDLWePnI8mLIgUPP6Q8plvbQ=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7029 (0x1b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Oct 12 16:18:20 2026 GMT
Not After : Oct 19 16:18:20 2026 GMT
Subject: CN=6acd084d-0eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:f3:77:64:e3:55:23:5e:f1:a4:a5:73:23:
82:46:62:32:5b:2e:44:3c:4a:67:fc:68:1c:d6:d5:
60:96:5c:93:b5:fe:91:ae:6f:ee:62:62:f4:e2:da:
05:5c:af:ce:94:bc:06:51:4c:37:2f:19:d6:84:8d:
09:39:18:f9:0e:1d:82:da:3c:77:92:97:69:95:cf:
41:97:c8:db:fe:33:5a:28:28:e0:ff:cd:b5:f7:a1:
fe:7a:41:de:ce:1f:43:e0:bf:98:ca:0d:84:60:f8:
1b:14:d7:5a:37:c8:9a:ac:3d:5c:73:e1:87:cb:36:
25:a2:fb:ba:77:1e:91:92:8b:93:be:1a:c3:8d:ce:
2d:3f:91:a3:7f:8b:44:98:46:43:a6:2a:13:8d:50:
94:eb:49:ea:d0:4d:08:4c:1c:d8:a7:ce:a2:9e:18:
d4:48:34:59:41:5f:18:bf:d4:07:25:ae:6b:83:e6:
5c:65:38:b0:30:66:35:4d:94:29:1b:e3:50:64:57:
f5:61:49:a5:fd:2c:24:ca:99:f3:a0:22:f7:ae:2b:
5f:00:45:4e:91:2e:b0:c5:a1:0e:7b:13:26:dc:b5:
e4:5b:26:5c:39:de:e2:43:07:ca:04:cf:a4:db:a4:
61:0d:d5:33:44:a3:cd:00:f1:1b:99:8f:ef:23:56:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:E8:E8:AD:95:8A:81:8B:26:4D:36:D7:FB:B3:9B:97:60:DE:EA
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:13:98:9c:97:88:e9:a4:1a:16:13:93:2f:5a:ac:87:39:
0e:02:48:93:db:ed:9e:3a:a4:4c:db:d2:f1:79:44:33:c4:f1:
d6:b4:4a:5c:8f:f8:34:58:e5:7c:80:20:63:49:ef:79:86:b0:
6d:d8:4d:15:a1:7b:50:c3:54:80:2b:e3:ea:66:42:fe:6c:54:
96:b3:15:a5:55:b0:0d:e2:ad:83:9f:b6:3c:fe:10:75:88:e9:
7b:60:eb:4f:cf:7a:ca:03:3f:70:fe:61:46:3b:7a:cc:c4:8d:
26:7e:71:49:26:cc:de:68:6f:93:2e:11:f9:6b:ff:2b:77:17:
1f:db:0a:06:f1:0a:0a:32:68:df:57:49:2c:6d:71:e0:b4:cb:
fa:ae:2f:72:17:97:66:e5:fc:c5:82:b6:ea:77:ea:5c:d5:c3:
7f:5a:e8:c1:52:74:21:e0:01:ae:11:5f:87:1e:4f:b0:e9:a5:
1d:57:7b:46:50:35:57:20:26:aa:79:ea:83:3c:74:3b:c3:75:
47:3f:9b:88:df:a7:0f:24:34:66:0d:26:1b:93:f1:04:18:71:
5c:d4:a6:2e:19:a1:57:6e:8f:aa:ec:6c:a3:72:20:37:84:e3:
86:3a:2d:9f:4e:35:34:d9:20:ca:7f:2f:fe:2b:9d:9f:15:96:
25:aa:7e:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy
NjcwQzYyMTEwHhcNMjYxMDEyMTYxODIwWhcNMjYxMDE5MTYxODIwWjAYMRYwFAYD
VQQDEw02YWNkMDg0ZC0wZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Vbzd2TjVSNe8aSlcyOCRmIyWy5EPEpn/Ggc1tVgllyTtf6Rrm/uYmL04toF
XK/OlLwGUUw3LxnWhI0JORj5Dh2C2jx3kpdplc9Bl8jb/jNaKCjg/82196H+ekHe
zh9D4L+Yyg2EYPgbFNdaN8iarD1cc+GHyzYlovu6dx6RkouTvhrDjc4tP5Gjf4tE
mEZDpioTjVCU60nq0E0ITBzYp86inhjUSDRZQV8Yv9QHJa5rg+ZcZTiwMGY1TZQp
G+NQZFf1YUml/SwkypnzoCL3ritfAEVOkS6wxaEOexMm3LXkWyZcOd7iQwfKBM+k
26RhDdUzRKPNAPEbmY/vI1aZ8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQl6Oit
lYqBiyZNNtf7s5uXYN7qMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG
OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP
VUhBbS1mTDFUMHNtY01ZaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg4sTmJyXiOmkGhYTky9arIc5DgJIk9vtnjqkTNvS8XlEM8Tx1rRKXI/4NFjl
fIAgY0nveYawbdhNFaF7UMNUgCvj6mZC/mxUlrMVpVWwDeKtg5+2PP4QdYjpe2Dr
T896ygM/cP5hRjt6zMSNJn5xSSbM3mhvky4R+Wv/K3cXH9sKBvEKCjJo31dJLG1x
4LTL+q4vcheXZuX8xYK26nfqXNXDf1rowVJ0IeABrhFfhx5PsOmlHVd7RlA1VyAm
qnnqgzx0O8N1Rz+biN+nDyQ0Zg0mG5PxBBhxXNSmLhmhV26Pquxso3IgN4Tjhjot
n041NNkgyn8v/iudnxWWJap+XQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:30:08 2026 by rpki-client