
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier: BQNaCN2FAtCWgVDSVJphkatd3j2/F5XL+/eGFNUsGXA=
Subject key identifier: E3:D0:16:60:ED:A4:DF:86:9C:F0:4D:EB:CE:D6:F4:33:AB:A1:17:E3
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number: 0194
Signing time: Sun 27 Sep 2026 04:49:10 +0000
Manifest this update: Sun 27 Sep 2026 04:49:10 +0000
Manifest next update: Sun 04 Oct 2026 04:49:10 +0000
Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: LAlnY81YP01B9OlST1NDbGf2BMIW648HOsNp4Lvzc18=)
2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: Xbr4HHduQ5p04uMR/+foEnmQEUiUNgTT394PYMTCxSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Sep 27 04:49:10 2026 GMT
Not After : Oct 4 04:49:10 2026 GMT
Subject: CN=6ab8a046-d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:8d:b0:ce:6e:9f:ff:78:c7:97:9a:73:3c:
b2:3b:04:8e:43:13:ee:1c:1b:31:f9:95:0f:3f:b8:
e3:de:c7:94:ee:ea:04:87:ef:9c:6d:59:c2:2a:c7:
94:05:11:2c:a0:db:af:c0:a5:18:c3:a8:90:79:6a:
9f:37:da:85:04:1b:1b:96:6b:47:a1:0d:83:bf:43:
7f:80:49:ac:5b:51:08:09:5d:a7:e6:26:00:ca:8c:
19:f4:a1:75:67:03:21:dd:a8:fb:39:96:0c:be:08:
a0:a7:d8:7d:6c:ef:07:2b:ba:ec:83:d5:14:84:92:
89:92:dc:58:85:da:ea:83:48:c7:5d:f2:61:47:56:
d3:f4:3f:11:e3:46:86:18:f5:7f:29:a3:da:6a:2d:
37:78:7c:d2:7f:67:8e:38:bd:8e:69:73:46:bc:34:
e5:6b:cd:6b:4e:bc:2d:69:73:fb:70:5f:6d:f4:01:
ec:d6:3e:2b:b6:de:04:4b:6f:ee:90:ad:bc:63:b5:
d7:04:59:5a:79:13:4a:bc:a5:94:bf:83:bb:4d:8f:
cd:07:4a:28:64:b8:c0:e1:58:de:f9:bf:ba:ae:7b:
7b:19:8e:ba:d0:8b:f8:66:6e:a9:9b:55:c4:2e:5b:
63:94:76:de:69:bd:30:de:9e:9c:2d:9e:2b:5e:08:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:16:60:ED:A4:DF:86:9C:F0:4D:EB:CE:D6:F4:33:AB:A1:17:E3
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d3:b7:31:ea:53:73:e2:d9:75:ae:29:62:ae:ca:ac:48:d5:
13:45:a0:26:5c:30:89:95:c2:67:b9:59:02:03:92:ca:2d:9f:
48:74:66:07:4f:9b:82:f1:79:77:0d:4c:ba:c6:bf:a8:a5:e8:
dd:92:48:de:ab:90:f8:2b:c2:e1:54:89:45:a8:a3:24:85:b7:
a7:4b:5e:48:57:2b:93:fa:6b:1a:62:a5:a1:c5:bc:ab:38:fc:
3b:61:5b:6a:77:59:3f:85:61:69:f1:6c:d7:fd:36:b0:a3:a2:
60:be:75:95:90:0f:d8:52:49:a1:31:11:3b:b9:a7:9f:b1:f7:
de:11:e8:a6:b2:57:2a:bf:91:b4:21:06:f0:56:a2:0e:d0:9f:
f2:05:45:f1:73:7b:d1:a6:d7:8c:53:7f:c9:77:4b:1e:73:b2:
f3:da:24:af:13:32:cb:b2:f1:b7:79:23:f0:02:25:be:f1:02:
fa:7e:8e:30:55:2e:6a:52:3a:40:c6:8b:5b:3a:5b:89:e0:2c:
24:1c:e5:47:1b:aa:b0:eb:54:94:d7:c1:85:f9:0e:da:25:70:
cc:fc:77:b1:43:ae:6e:5f:05:58:08:0f:0f:a4:00:42:e4:17:
7b:55:19:9d:82:9b:7e:0c:5a:00:c5:a1:3d:33:46:d1:a5:50:
a7:a8:98:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5
MTUzOEM1NUMwHhcNMjYwOTI3MDQ0OTEwWhcNMjYxMDA0MDQ0OTEwWjAYMRYwFAYD
VQQDEw02YWI4YTA0Ni1kNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUWNsM5un/94x5eaczyyOwSOQxPuHBsx+ZUPP7jj3seU7uoEh++cbVnCKseU
BREsoNuvwKUYw6iQeWqfN9qFBBsblmtHoQ2Dv0N/gEmsW1EICV2n5iYAyowZ9KF1
ZwMh3aj7OZYMvgigp9h9bO8HK7rsg9UUhJKJktxYhdrqg0jHXfJhR1bT9D8R40aG
GPV/KaPaai03eHzSf2eOOL2OaXNGvDTla81rTrwtaXP7cF9t9AHs1j4rtt4ES2/u
kK28Y7XXBFlaeRNKvKWUv4O7TY/NB0ooZLjA4Vje+b+6rnt7GY660Iv4Zm6pm1XE
LltjlHbeab0w3p6cLZ4rXgik6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPQFmDt
pN+GnPBN687W9DOroRfjMB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB
MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkNEQS8yQzdFNzJCODVBMTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJu
ZmhpYlViNG00bHlSVTR4VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtNO3MepTc+LZda4pYq7KrEjVE0WgJlwwiZXCZ7lZAgOSyi2fSHRmB0+bgvF5
dw1Musa/qKXo3ZJI3quQ+CvC4VSJRaijJIW3p0teSFcrk/prGmKlocW8qzj8O2Fb
andZP4VhafFs1/02sKOiYL51lZAP2FJJoTERO7mnn7H33hHoprJXKr+RtCEG8Fai
DtCf8gVF8XN70abXjFN/yXdLHnOy89okrxMyy7Lxt3kj8AIlvvEC+n6OMFUualI6
QMaLWzpbieAsJBzlRxuqsOtUlNfBhfkO2iVwzPx3sUOubl8FWAgPD6QAQuQXe1UZ
nYKbfgxaAMWhPTNG0aVQp6iY/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:18:13 2026 by rpki-client