
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json)
Hash identifier: 7tkiCREY4dutgpJFd4uYCRurKnqNFfp/fLe9EWRB+Ro=
Subject key identifier: D3:15:B5:C3:11:EF:12:B3:6C:C5:5A:0C:CE:FB:7A:28:CD:1D:7A:04
Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
Manifest number: 03D5
Signing time: Mon 21 Sep 2026 03:25:31 +0000
Manifest this update: Mon 21 Sep 2026 03:25:31 +0000
Manifest next update: Mon 28 Sep 2026 03:25:31 +0000
Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: msE53QDoJlmHYyPnRc1AeQ8PgOr5UKC3HNDUZzm5SP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl
rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Validity
Not Before: Sep 21 03:25:31 2026 GMT
Not After : Sep 28 03:25:31 2026 GMT
Subject: CN=6ab0a3ab-0033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:53:31:a9:97:38:6a:90:cc:ca:00:a5:e5:
9a:53:0f:ac:95:38:34:53:13:cd:be:ab:3e:48:e5:
81:97:57:1b:05:bd:0e:16:b0:a9:23:8a:e5:ac:9a:
cd:6e:d2:b2:68:ee:21:34:08:b1:7a:05:8e:54:8f:
1a:8b:2d:51:60:69:82:97:7c:54:c1:96:4b:17:b1:
23:1d:91:57:ff:a4:f9:a3:27:d9:1e:5e:55:2d:58:
a5:9a:7a:2d:7a:e3:c3:78:63:f8:ae:73:20:e7:35:
7e:3e:8c:16:e2:cd:fd:13:2d:29:57:71:b9:0a:e8:
dd:a8:cf:fa:ab:6d:31:a7:de:b3:fe:ee:81:5e:e9:
22:82:d2:60:e3:49:86:2e:c5:b1:8e:30:77:73:78:
ca:d3:07:11:f9:db:9b:c6:8e:61:3d:c5:93:77:52:
f6:2a:0a:5f:a8:0a:cb:e9:c3:0d:d1:09:c5:90:0b:
47:ef:35:c4:4d:2c:ee:d9:04:51:b1:34:83:dd:19:
02:fe:0b:fe:95:1a:7c:36:7f:ba:a0:27:3b:ef:73:
d6:62:af:83:80:eb:a2:62:f0:8b:86:57:d1:a9:24:
fa:89:7e:a6:87:bc:c6:0a:1f:4a:25:cf:50:2f:5d:
f0:91:21:af:36:93:81:89:c4:e5:c8:00:00:14:fe:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:B5:C3:11:EF:12:B3:6C:C5:5A:0C:CE:FB:7A:28:CD:1D:7A:04
X509v3 Authority Key Identifier:
keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:54:76:7b:d3:52:bf:2e:09:49:e9:6a:4a:60:20:9c:1c:
9d:5d:10:7a:72:a9:8d:c7:a6:b6:c1:64:e6:ca:c3:2d:51:51:
f5:cb:01:e5:f0:26:1a:a6:35:2f:e6:5d:9b:98:ea:50:59:1c:
96:12:aa:b2:f2:86:1f:60:13:6c:d3:34:88:a0:d0:87:8b:35:
ca:b7:56:0b:80:dd:63:fc:c8:60:37:c6:97:bf:ea:4b:99:60:
54:ef:bb:e4:0a:8c:98:44:43:33:f1:db:c5:f3:8b:d7:d2:12:
9a:ca:57:50:62:7a:5d:dc:a3:0a:64:4b:1b:e3:08:c4:28:a9:
cb:0d:04:67:1b:eb:74:f2:3f:db:0a:6c:bf:98:38:a1:16:eb:
32:20:33:ba:f4:a7:3e:e6:e2:b7:7f:ad:2d:87:01:c4:fa:ad:
16:e0:5e:d8:6b:98:36:15:ac:37:39:b1:29:a6:1b:41:e1:1a:
0c:cb:d4:c8:db:bc:33:96:1a:40:98:a4:94:ce:44:73:64:09:
cc:a4:db:7e:3a:fe:d7:ee:24:22:be:d4:c0:8e:f4:ac:00:e9:
4c:67:56:aa:0d:af:28:f0:8d:e5:7d:1b:85:a1:6b:bc:ef:f0:
02:9e:28:cb:82:0a:af:c7:a3:26:04:aa:2f:24:dc:b0:f0:db:
6c:aa:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:36 2026 by rpki-client