
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier: FmMQDJICUjw6L5Ar99TBIlDKxY3zg2AV8wFptnxJ/6E=
Subject key identifier: 9B:35:F9:B3:9A:81:E2:6B:20:40:1B:F5:93:53:C3:D2:59:4B:7D:2F
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number: 01A0
Signing time: Sat 10 Oct 2026 16:17:42 +0000
Manifest this update: Sat 10 Oct 2026 16:17:41 +0000
Manifest next update: Sat 17 Oct 2026 16:17:41 +0000
Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: crsjer0XNWnhPKK1Lz2t7qzW7V37Ikko/hHW3BL5sbs=)
2: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
3: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Validity
Not Before: Oct 10 16:17:41 2026 GMT
Not After : Oct 17 16:17:41 2026 GMT
Subject: CN=6aca6525-10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:48:57:66:be:5c:69:04:9c:1b:b8:6e:3a:
15:f0:f4:f5:9c:10:d3:3d:7c:1c:04:4d:fb:c2:8f:
66:ed:a4:70:b3:f2:b7:a7:db:38:81:84:b1:74:41:
ef:8f:14:fc:2d:04:2c:a3:e0:90:a9:e6:cb:74:75:
e3:bf:56:d6:dc:b9:d4:5f:ab:1c:16:49:1b:af:5f:
db:78:91:c4:b3:a3:35:1b:fa:14:8b:0e:b1:d3:7d:
df:28:8e:aa:81:4f:27:ef:85:24:af:00:7e:9b:81:
7a:e4:54:31:42:96:6d:07:38:93:15:be:34:57:16:
89:ae:38:93:c7:c3:d1:6e:84:7a:44:b6:47:81:7b:
d5:c5:4e:91:78:c9:71:c7:06:a4:a9:03:a2:e3:cf:
40:b7:ab:ec:1e:33:46:12:44:98:1f:8e:44:13:75:
5c:f9:1b:41:3f:0a:fb:8e:0a:65:17:9d:31:6f:17:
39:dd:0e:77:b0:ef:7c:09:65:80:ca:87:1b:25:c5:
f9:d3:95:9d:9a:ca:db:ee:f9:45:39:06:43:34:3a:
bc:68:b3:ef:01:4f:57:7a:97:eb:5a:17:72:88:61:
9e:ae:bd:ce:b1:dc:88:02:80:d8:2b:b0:0c:c1:e5:
c4:38:2f:38:53:06:35:0c:14:d8:05:b9:0a:ea:ef:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:F9:B3:9A:81:E2:6B:20:40:1B:F5:93:53:C3:D2:59:4B:7D:2F
X509v3 Authority Key Identifier:
keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:9e:8e:72:a0:3a:2e:c2:26:96:5c:13:3b:29:81:bd:6d:
f3:15:f4:a8:55:cc:db:f0:3e:dc:ff:4f:e1:e2:19:1b:b4:25:
6f:f4:f3:9e:ce:87:35:ce:99:39:28:f1:53:95:87:68:ad:ec:
65:b4:a4:ff:7a:29:2f:e8:38:40:c3:49:36:9f:77:9b:18:67:
52:17:d5:65:2f:d0:26:f3:39:77:2a:1d:ea:fc:58:5d:0d:94:
45:23:91:28:e0:24:33:dd:8c:a3:c0:5a:4f:18:0b:21:9d:c4:
a8:b4:cb:ee:fa:04:e1:fb:e8:a0:26:57:2a:18:03:ab:55:ea:
e8:17:34:57:d8:26:ec:de:f2:db:7e:a3:13:b2:e3:81:29:e1:
5d:2d:92:9a:7e:38:50:8f:84:6b:8d:81:d3:5a:f5:8c:9d:b1:
3f:9e:e7:d9:ab:53:2b:dd:4e:4c:fc:c1:06:30:f6:d0:86:ca:
b4:47:58:ce:d3:be:62:b4:95:02:2a:f9:48:cc:18:74:59:80:
a0:7e:ad:f0:8f:99:99:c9:16:b7:25:dd:40:8c:e1:c3:03:9e:
15:ef:eb:87:af:56:58:32:d7:3a:f3:43:62:eb:eb:9c:5c:12:
f2:03:99:31:1e:e7:c3:97:3b:72:77:8a:c6:26:79:6a:85:c4:
e8:d7:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:06:35 2026 by rpki-client