
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier: 1Ei0dR6U7UVzTz1ow/LrRv4H8bxVxOrRmGaRiKtxo6A=
Subject key identifier: 15:AB:B3:F4:45:86:39:33:92:78:D1:76:F5:5F:60:00:20:11:0D:46
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0D74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number: 0D37
Signing time: Wed 14 Oct 2026 18:33:43 +0000
Manifest this update: Wed 14 Oct 2026 18:33:42 +0000
Manifest next update: Wed 21 Oct 2026 18:33:42 +0000
Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: de5JWlrzXQPvYUQCEYXwVVz0UrAWNleRRXEerg211d0=)
2: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: hZp7olEbo87CPfwcpXGolxxsRwDGl7OYM854o3cjQGY=)
3: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: LowaWp7qm1ZrOD8Fkf5D763sZqEhXEDxVq8xLp3xfhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3444 (0xd74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Oct 14 18:33:42 2026 GMT
Not After : Oct 21 18:33:42 2026 GMT
Subject: CN=6acfcb07-0c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:bb:6a:b8:9b:8a:e5:45:51:f1:ca:90:25:
56:3a:5b:a3:0f:58:b3:d8:3e:82:ff:e9:ca:f2:4f:
13:56:d2:5a:e7:69:31:60:d7:7d:4e:6a:28:85:d4:
a9:c7:4a:d4:f5:96:ac:58:be:42:6b:1b:d1:ac:a6:
30:61:fe:0e:0c:57:7e:44:48:73:17:ba:c8:d3:bd:
a2:3f:8e:36:ad:5c:79:94:6e:53:89:65:22:fb:14:
e7:17:9a:94:b5:0d:6d:f5:f9:18:6f:38:f5:95:34:
41:41:f3:78:c2:6c:2c:45:92:9b:17:0d:24:43:c9:
96:45:a3:af:ac:c1:22:ff:a7:ad:19:c1:64:4c:cf:
b7:1c:98:b3:e7:e4:2b:e8:8b:60:a3:71:80:2a:35:
55:3b:a6:36:f1:30:0d:b9:c1:0d:2d:68:25:37:b0:
dd:26:74:f2:70:69:b4:3a:1d:23:2b:1e:47:27:bf:
5d:e6:2e:45:d4:0a:9f:97:b5:a1:ec:a8:67:f6:3c:
09:46:bb:14:81:c5:5c:86:3a:8e:00:a4:db:62:d4:
c2:a8:0d:cb:a9:12:7b:5f:24:2a:bf:d2:b4:96:98:
1d:ec:e7:72:48:52:d8:c2:2a:80:4a:63:00:74:f1:
01:13:d1:e5:b7:3c:1f:a2:99:be:b9:f3:06:59:b7:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:B3:F4:45:86:39:33:92:78:D1:76:F5:5F:60:00:20:11:0D:46
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:11:81:6d:95:aa:43:f1:5a:77:9a:3a:d5:95:aa:21:8c:7d:
d7:d2:73:9a:0d:76:a8:05:d1:87:36:da:98:6b:a8:7b:57:87:
dd:fc:f2:1e:b4:42:81:2b:74:e1:fc:be:4e:51:a3:0b:6b:87:
37:d8:6f:39:dc:c5:f7:f9:a7:73:0c:7b:92:f3:b3:a6:bd:ea:
dc:23:10:8c:db:a1:0a:e1:54:66:2e:9a:d8:c7:60:6c:8d:10:
a5:58:55:38:6d:ea:61:4f:7d:1e:b2:59:ad:36:e0:76:6f:03:
6a:52:26:e2:d8:c1:57:8a:30:76:44:da:f1:0b:08:c1:86:ef:
c9:16:4d:d5:36:fb:db:43:e6:a8:8e:50:14:bc:e7:f7:4f:3a:
cb:18:29:0d:96:e0:53:35:1e:0d:57:4c:44:42:04:4b:97:d8:
50:fb:af:b2:41:2c:9d:79:63:c8:48:44:80:0c:31:3f:1a:6c:
8e:5f:a7:ea:dc:ce:7f:64:c1:fb:54:17:03:73:f3:89:59:0d:
94:e6:01:f4:cb:dd:53:42:43:cb:9c:46:35:34:45:29:fe:69:
e1:46:a1:16:e2:99:d3:02:9d:fc:00:e6:7b:dd:b5:13:e3:d6:
47:7a:08:23:ea:b5:ee:7c:ab:a7:e6:98:96:35:1e:d5:8c:48:
73:d9:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:28:42 2026 by rpki-client