
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier: ZdK549a4+vZ6r33Jot3I3ylFrm/w5uOK08U3aOZBlnA=
Subject key identifier: D0:EC:EA:E8:3D:DA:44:AE:B1:75:EA:9A:08:D0:A9:50:CC:3B:92:85
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number: 1E9C
Signing time: Tue 22 Sep 2026 16:00:25 +0000
Manifest this update: Tue 22 Sep 2026 16:00:25 +0000
Manifest next update: Tue 29 Sep 2026 16:00:25 +0000
Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: r9YRitOtyTmoVFl3fbMPRze23dIwdbxlbUqph1M1NwE=)
2: C47CF15486EF11F19E006003A7EE528E.roa (hash: RzDPG9QsjUOtGowh+MQ0k1kpFF4PUc3OuFrwrmQUeJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7864 (0x1eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Sep 22 16:00:25 2026 GMT
Not After : Sep 29 16:00:25 2026 GMT
Subject: CN=6ab2a619-81be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:d2:32:52:13:ae:94:cd:94:73:77:e2:cc:
45:ea:01:71:af:14:d1:0a:4a:a2:51:1c:ec:8f:c1:
80:cb:d9:ad:67:03:a0:db:11:8a:7d:2c:a3:62:1e:
95:45:62:0f:d4:39:22:47:90:25:86:2e:96:17:61:
11:4e:10:d7:f5:32:4f:50:61:27:26:de:ee:f3:6e:
15:76:83:09:2a:fb:64:6e:d9:54:8e:44:02:5b:72:
05:4f:54:df:ed:73:55:13:d4:f3:46:5a:e5:e6:1a:
7a:cc:02:25:e9:aa:21:6b:99:46:8c:81:b3:d5:77:
19:97:cf:f9:2e:26:19:77:7f:c4:36:3f:87:4d:6f:
f3:a2:21:c3:66:47:00:b6:7e:35:2f:fb:79:02:00:
c0:c9:1c:25:bd:75:d6:e7:3a:52:8d:df:6e:81:76:
4d:0c:68:36:fb:ac:be:0c:4a:91:ff:7a:2f:cf:5f:
84:fa:c1:0f:9b:44:4c:14:da:a8:8d:eb:c3:1b:5e:
07:f0:37:4e:b5:1f:2c:dc:2c:7c:ee:5d:92:b6:69:
36:b5:54:70:c5:65:25:81:18:2b:82:3b:01:4a:30:
a7:42:d0:92:2d:07:eb:94:12:cb:b2:e5:14:16:bc:
c8:2b:06:b4:49:30:f5:36:9e:26:89:b4:bf:13:5b:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:EA:E8:3D:DA:44:AE:B1:75:EA:9A:08:D0:A9:50:CC:3B:92:85
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:ba:cd:31:03:ca:d9:83:53:1c:c4:0a:f1:7c:85:36:c5:
e8:0a:7e:c2:47:40:c3:73:fc:32:ab:6c:e4:f7:6b:a5:a4:38:
d8:49:c2:27:09:e0:4b:5a:87:26:ee:46:4e:19:c4:c2:bb:ea:
3f:ef:14:95:6a:ef:24:3f:ec:ee:82:88:ba:c0:57:64:57:64:
03:ed:5e:3e:52:f3:41:dc:98:c6:13:fa:cb:81:2f:61:0b:55:
52:f6:4b:fd:7f:5f:45:d7:be:cc:8d:34:10:53:bf:40:fd:9b:
dd:1a:d6:87:dd:f6:01:82:87:21:58:7f:45:dd:b1:11:36:e8:
bb:00:1d:71:d9:68:4d:c4:51:50:07:a3:95:4b:cb:61:84:99:
3e:ed:35:c3:42:d4:73:d9:06:ff:5b:75:dc:c3:02:62:49:b0:
06:ea:09:a7:fc:75:45:25:4b:d2:e7:09:44:2b:39:0c:c9:83:
c1:ee:01:3e:5e:82:99:d2:0e:09:7e:40:d2:59:c7:df:a4:5c:
bc:3e:cc:cf:6f:50:57:1c:2c:76:c6:99:3b:29:c2:33:e5:1f:
06:19:41:03:5f:64:57:84:8d:dd:42:4b:3d:f8:2a:31:04:62:
11:fd:b6:cb:f1:bf:38:49:2d:69:31:58:36:83:e0:72:48:69:
7a:f3:0c:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5
NjNEODdFMUMwHhcNMjYwOTIyMTYwMDI1WhcNMjYwOTI5MTYwMDI1WjAYMRYwFAYD
VQQDEw02YWIyYTYxOS04MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zbSMlITrpTNlHN34sxF6gFxrxTRCkqiURzsj8GAy9mtZwOg2xGKfSyjYh6V
RWIP1DkiR5Alhi6WF2ERThDX9TJPUGEnJt7u824VdoMJKvtkbtlUjkQCW3IFT1Tf
7XNVE9TzRlrl5hp6zAIl6aoha5lGjIGz1XcZl8/5LiYZd3/ENj+HTW/zoiHDZkcA
tn41L/t5AgDAyRwlvXXW5zpSjd9ugXZNDGg2+6y+DEqR/3ovz1+E+sEPm0RMFNqo
jevDG14H8DdOtR8s3Cx87l2Stmk2tVRwxWUlgRgrgjsBSjCnQtCSLQfrlBLLsuUU
FrzIKwa0STD1Np4mibS/E1tAvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDs6ug9
2kSusXXqmgjQqVDMO5KFMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy
NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1
Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNW6zTEDytmDUxzECvF8hTbF6Ap+wkdAw3P8Mqts5PdrpaQ42EnCJwngS1qH
Ju5GThnEwrvqP+8UlWrvJD/s7oKIusBXZFdkA+1ePlLzQdyYxhP6y4EvYQtVUvZL
/X9fRde+zI00EFO/QP2b3RrWh932AYKHIVh/Rd2xETbouwAdcdloTcRRUAejlUvL
YYSZPu01w0LUc9kG/1t13MMCYkmwBuoJp/x1RSVL0ucJRCs5DMmDwe4BPl6CmdIO
CX5A0lnH36RcvD7Mz29QVxwsdsaZOynCM+UfBhlBA19kV4SN3UJLPfgqMQRiEf22
y/G/OEktaTFYNoPgckhpevMMow==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:54 2026 by rpki-client