
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier: FuvCN+2297bSgPpGZSxoVTxFAW97ZxErTyME5tKZARg=
Subject key identifier: 4E:47:89:62:D1:AC:3B:22:5D:40:41:08:B5:19:B1:04:16:27:EA:9B
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number: A4
Signing time: Fri 18 Sep 2026 19:58:55 +0000
Manifest this update: Fri 18 Sep 2026 19:58:55 +0000
Manifest next update: Fri 25 Sep 2026 19:58:55 +0000
Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: 2tC9/yZ/JbwiBq/XbxGSGT/filyOhz2Tb3pOAWsmsAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Validity
Not Before: Sep 18 19:58:55 2026 GMT
Not After : Sep 25 19:58:55 2026 GMT
Subject: CN=6aad97ff-83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:90:23:04:de:df:23:6d:da:56:77:ab:14:
86:8f:28:fb:6b:15:2e:20:96:e7:a7:48:7b:69:e1:
6a:31:10:9c:26:12:5b:82:2a:da:c4:66:5a:a6:4c:
ea:83:31:40:0b:e2:48:e6:fb:e1:c0:91:18:2d:60:
ff:88:b6:b9:6e:ed:f6:a6:ef:12:9e:d1:73:ad:6d:
8a:03:62:0b:8f:72:22:7b:71:5f:44:67:51:49:b1:
b3:dd:72:23:16:cc:65:a2:ab:d9:1a:78:1b:4a:aa:
be:5e:bd:f4:3a:a7:59:39:52:a2:5a:2c:4a:10:86:
e5:b9:d0:da:9d:cf:44:e5:b7:f9:21:b1:60:36:53:
21:62:49:68:75:9b:e1:a1:72:44:a4:e7:01:59:2a:
ed:1e:e7:bb:7f:b3:ed:ac:e7:b7:91:e0:bf:18:d8:
86:d8:38:c9:ec:72:65:8b:93:28:c6:18:db:07:ca:
6b:58:01:97:46:99:a7:5c:e6:f7:56:0b:b4:55:9c:
3a:c7:64:19:5e:e5:ac:b3:3f:ad:69:62:be:08:9b:
58:ce:f0:91:ad:13:46:ce:c4:cd:25:f3:8c:d1:33:
36:0f:dc:1b:5c:9b:c3:da:6c:27:2f:c5:85:e1:f3:
4e:41:81:d3:ea:f1:c3:75:bc:21:7f:11:63:5c:f3:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:89:62:D1:AC:3B:22:5D:40:41:08:B5:19:B1:04:16:27:EA:9B
X509v3 Authority Key Identifier:
keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a5:6d:82:46:f9:ed:da:4d:ef:f6:ef:5f:59:28:73:67:1f:
60:e6:d5:e8:9a:59:ab:52:0d:e2:8e:6b:e3:62:1f:5c:19:d2:
f9:0e:00:67:55:68:61:35:d2:5b:5b:2d:76:a8:7c:41:6f:0c:
44:a0:54:f2:b8:9c:88:bd:26:3a:c1:c1:db:4d:58:f0:82:f5:
9c:06:29:2e:95:57:ab:2d:f2:a1:e0:8a:50:3f:f3:ab:26:5b:
aa:23:c6:22:d2:01:fc:46:37:10:cb:a8:51:a2:e5:8b:04:80:
90:bf:9f:b0:84:6d:0d:1b:25:41:3d:0b:3a:90:4c:8d:17:03:
3e:06:15:a3:68:5a:96:69:9a:69:1f:52:b8:8b:c2:9b:2c:7d:
76:9b:9f:5b:28:e3:0e:b5:3d:64:67:89:24:52:f8:f0:30:b7:
c3:b1:c3:d3:f5:28:42:e3:5b:7f:3d:45:6f:ab:c3:97:2c:23:
d4:2e:ac:02:dd:dc:40:6c:90:b3:3a:b1:36:e3:cc:19:3b:68:
0e:74:ec:1d:47:49:31:7a:da:08:6d:69:19:03:8d:07:5f:bf:
3f:d6:fb:66:44:43:b2:e6:bc:83:a6:b5:40:2b:c8:05:8c:11:
1b:f4:9f:a2:8e:9d:64:8f:0d:cd:43:51:88:71:db:eb:01:ff:
c0:c5:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:30 2026 by rpki-client