
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json)
Hash identifier: syv5UEfZwQwN3/jaK9LU6esU5/EGa8UJc4a5i3dSXX4=
Subject key identifier: 17:22:77:98:38:AC:3F:DE:AD:40:73:8D:1D:6A:8B:BC:1A:BC:49:32
Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
Manifest number: A9
Signing time: Mon 21 Sep 2026 07:19:31 +0000
Manifest this update: Mon 21 Sep 2026 07:19:31 +0000
Manifest next update: Mon 28 Sep 2026 07:19:31 +0000
Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: LvnvdHKXDKDx9UYAx7JZuDAkEZSuJxSV6E5EQLGTOJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Validity
Not Before: Sep 21 07:19:31 2026 GMT
Not After : Sep 28 07:19:31 2026 GMT
Subject: CN=6ab0da83-2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:fa:64:ab:a1:8a:b4:6a:3e:43:c6:48:64:
a8:6d:e2:8a:2c:d4:d6:2c:8a:c2:e0:77:65:0a:6e:
89:2f:1a:3d:89:21:f2:36:d2:ec:ef:71:c1:1b:12:
8f:c4:d2:0c:35:0a:1a:6f:e4:b6:bd:04:18:84:8d:
f6:3a:ba:ac:87:43:f6:f7:f4:01:70:4c:44:96:a5:
2c:e5:6a:fe:3c:ff:8f:aa:cf:c7:44:73:f2:9a:f0:
e6:53:51:e5:f9:9d:a4:58:27:e9:49:d0:0f:c8:64:
d2:14:fb:5b:de:91:39:65:c8:1f:d4:22:33:a6:5f:
6f:6a:cf:00:ce:66:b6:22:69:df:0c:0e:e3:5a:9b:
b1:09:ee:a3:dd:bd:47:74:32:36:56:8d:f4:72:51:
34:06:58:83:01:9d:f1:64:b7:04:d1:03:b6:24:d3:
51:df:6b:40:b8:26:b6:01:a5:b4:58:bd:99:59:50:
a3:89:c0:69:15:08:95:8f:ae:fc:18:eb:4a:3c:b5:
7c:c8:9f:00:9c:35:2d:80:22:9c:2a:78:63:7c:8e:
fd:37:16:24:14:be:36:22:1d:e6:bc:21:09:80:26:
92:af:6d:da:d7:1f:ed:3f:d8:67:96:f9:83:02:88:
73:6c:b3:00:43:96:ea:1a:ae:46:6b:ce:03:a5:42:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:77:98:38:AC:3F:DE:AD:40:73:8D:1D:6A:8B:BC:1A:BC:49:32
X509v3 Authority Key Identifier:
keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:39:55:9a:16:33:be:63:c1:bc:cd:bf:b6:fd:59:13:70:
62:e9:fb:ca:be:08:25:78:d7:6a:02:be:7e:f5:65:ff:71:ad:
34:47:3a:d4:e8:4f:b5:8e:5f:de:d5:a8:2b:1b:b6:2a:f8:1b:
06:af:96:de:e5:06:1e:92:d8:18:eb:cc:d0:76:63:09:d4:a7:
93:5b:3f:e7:8d:ea:f7:30:1c:0b:8c:2c:f2:e3:42:b3:4c:7a:
eb:48:eb:18:dc:64:c0:c9:de:de:18:81:0e:14:fe:e3:ea:d6:
0f:59:6d:fc:11:49:e4:28:2f:65:f3:7b:69:fe:c2:bc:9c:6d:
2a:39:f1:05:3c:2c:e5:74:a6:f5:99:e9:52:e9:3e:75:9d:63:
7d:52:11:dc:4c:c8:c1:bc:a0:02:17:7b:90:27:d1:b5:c4:0b:
ae:c6:75:b5:a2:4a:55:a1:27:3f:37:fd:b1:c6:87:47:e2:68:
2b:9e:50:03:d8:35:2d:83:56:e2:9b:66:84:3e:be:aa:d4:cb:
32:f9:c0:2c:af:77:1d:24:ce:db:5e:2a:d4:15:b4:ad:70:67:
55:25:1c:0c:35:b3:83:06:c7:a1:f0:e9:65:62:47:57:43:84:
c8:fc:d5:2a:81:85:94:f6:ab:61:d8:06:a2:79:f3:73:d8:f9:
9e:99:33:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NEQUUxMTAvBgNVBAUTKDc0RDlGRTFENjE2QTczQzhGRDlEMDBBNzRBMEU2MkMw
NUE5MUUwOUEwHhcNMjYwOTIxMDcxOTMxWhcNMjYwOTI4MDcxOTMxWjAYMRYwFAYD
VQQDEw02YWIwZGE4My0yNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveb6ZKuhirRqPkPGSGSobeKKLNTWLIrC4HdlCm6JLxo9iSHyNtLs73HBGxKP
xNIMNQoab+S2vQQYhI32Orqsh0P29/QBcExElqUs5Wr+PP+Pqs/HRHPymvDmU1Hl
+Z2kWCfpSdAPyGTSFPtb3pE5Zcgf1CIzpl9vas8Azma2ImnfDA7jWpuxCe6j3b1H
dDI2Vo30clE0BliDAZ3xZLcE0QO2JNNR32tAuCa2AaW0WL2ZWVCjicBpFQiVj678
GOtKPLV8yJ8AnDUtgCKcKnhjfI79NxYkFL42Ih3mvCEJgCaSr23a1x/tP9hnlvmD
AohzbLMAQ5bqGq5Ga84DpUKwOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcid5g4
rD/erUBzjR1qi7wavEkyMB8GA1UdIwQYMBaAFHTZ/h1hanPI/Z0Ap0oOYsBakeCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8wNUMxRUNGRUM4
NDIxMUYwOEQ5NzlBN0VDNEY5QUUwMi9kTm4tSFdGcWM4ajluUUNuU2c1aXdGcVI0
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RObi1IV0ZxYzhqOW5RQ25TZzVpd0ZxUjRKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0RBRS8wNUMxRUNGRUM4NDIxMUYwOEQ5NzlBN0VDNEY5QUUwMi9kTm4tSFdGcWM4
ajluUUNuU2c1aXdGcVI0Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdwY5VZoWM75jwbzNv7b9WRNwYun7yr4IJXjXagK+fvVl/3GtNEc61OhPtY5f
3tWoKxu2KvgbBq+W3uUGHpLYGOvM0HZjCdSnk1s/543q9zAcC4ws8uNCs0x660jr
GNxkwMne3hiBDhT+4+rWD1lt/BFJ5CgvZfN7af7CvJxtKjnxBTws5XSm9ZnpUuk+
dZ1jfVIR3EzIwbygAhd7kCfRtcQLrsZ1taJKVaEnPzf9scaHR+JoK55QA9g1LYNW
4ptmhD6+qtTLMvnALK93HSTO214q1BW0rXBnVSUcDDWzgwbHofDpZWJHV0OEyPzV
KoGFlParYdgGonnzc9j5npkzBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:52 2026 by rpki-client