
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier: kqDN8pRqebw1MZ+fPYEXvPx0JXkokn+CYR7KQBrbvsg=
Subject key identifier: 97:0E:F6:D3:3D:75:B3:4A:E1:FC:E3:68:F4:2E:8A:8F:39:74:1B:CE
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 030A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number: 0303
Signing time: Mon 21 Sep 2026 00:56:24 +0000
Manifest this update: Mon 21 Sep 2026 00:56:23 +0000
Manifest next update: Mon 28 Sep 2026 00:56:23 +0000
Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: tWtI2yUOFXKucTRFaYT/D+EjHlydF3wFzDOJe0X14rI=)
2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Sep 21 00:56:23 2026 GMT
Not After : Sep 28 00:56:23 2026 GMT
Subject: CN=6ab080b8-25e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:03:17:d9:61:15:e6:3d:d6:d7:9e:74:e6:
ef:97:df:ec:86:ab:bc:c2:3c:82:ff:32:62:eb:2b:
92:1c:cb:d2:b8:c4:42:97:7e:4d:3f:a5:49:de:96:
b5:ec:62:28:0a:fc:61:cd:08:00:b1:2b:0e:b2:8d:
77:63:10:d8:bc:3f:80:6a:3c:64:e2:68:48:48:eb:
74:96:d8:ea:db:e6:0b:07:ca:96:61:4c:91:1c:17:
97:a6:80:b3:32:2e:16:77:7e:94:56:b2:a1:76:44:
5d:63:fd:5f:54:23:fc:93:e4:76:1b:d9:de:65:a5:
7c:f4:03:df:40:e9:42:33:df:0d:eb:40:82:70:78:
cc:b5:93:6e:a1:7e:a5:0a:b0:e7:84:9b:26:5b:b8:
c3:12:5b:cf:e1:4e:21:fa:7a:cd:64:e2:55:41:3e:
cd:6b:fc:10:c9:37:81:72:51:fb:50:b7:6e:86:93:
9f:e0:a6:79:31:f8:36:4f:9b:b3:15:2e:cc:7d:b1:
22:39:a5:3b:8e:d9:06:aa:25:06:31:ca:97:0c:65:
90:70:f7:35:c5:e5:bd:a9:ea:3a:b5:de:35:60:40:
50:5d:9f:d9:eb:a9:95:c7:00:35:17:4a:42:67:0a:
cd:62:ce:49:55:7d:0f:34:8e:90:45:4d:6f:a6:5a:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:F6:D3:3D:75:B3:4A:E1:FC:E3:68:F4:2E:8A:8F:39:74:1B:CE
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:94:92:e9:27:f7:e9:81:70:d6:fe:05:d4:95:22:b2:f6:51:
02:c4:fe:75:eb:ff:fb:0d:54:14:0f:6c:30:2c:3a:7b:41:29:
e7:ff:93:fc:9c:b5:da:c9:db:f2:10:93:35:d7:97:00:f3:e8:
e5:5e:86:3e:b9:fb:80:af:f7:40:20:8b:f7:f2:e8:7e:d3:cd:
11:6d:9d:0f:1d:91:2c:06:db:19:1d:5c:60:d2:58:ff:ce:eb:
5b:60:1b:06:c7:bd:f1:b5:f5:cf:e3:73:d2:79:2f:72:c2:93:
61:fe:6f:c4:be:e7:1e:d3:b4:74:d2:d5:12:25:38:9f:28:94:
59:e0:0f:7c:f1:11:4a:8e:87:53:4c:e6:58:42:ec:2e:fc:a1:
81:93:96:ef:84:b1:ae:de:33:c2:89:69:ad:b0:66:c1:7f:94:
0a:e9:66:ce:ec:38:e8:db:60:da:41:e9:ec:a3:44:0d:c5:8b:
60:ba:3c:13:85:2a:80:7b:84:4b:07:f5:15:ae:f9:94:59:0b:
be:d5:30:23:90:9c:b5:64:51:a3:3b:24:c4:80:be:37:c7:80:
50:d7:c9:9a:1f:ba:7a:3a:81:c9:ec:ba:92:e3:62:b6:4e:ef:
d2:6c:6b:fe:d7:8b:20:d0:ad:8a:19:dc:4a:e7:c3:a2:f5:ad:
a5:b5:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:29:32 2026 by rpki-client