
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json)
Hash identifier: YlayNFz5aP5xLY3R32bdXsQd7T97NVnPWbJGU1hmPrY=
Subject key identifier: F4:16:DA:E4:CA:34:9F:52:B1:65:A8:A4:63:F5:98:52:72:9C:9D:03
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial: 0505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
Manifest number: 04E0
Signing time: Fri 18 Sep 2026 23:38:15 +0000
Manifest this update: Fri 18 Sep 2026 23:38:14 +0000
Manifest next update: Fri 25 Sep 2026 23:38:14 +0000
Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: H25qbybVZUYgkpIWnXSEuAVa2m7a26FePT+87y3OEzk=)
2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: acqTZFyzsES/Jw8lzPnjdR3O1fOEuCWSbHFZnsAZDc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Validity
Not Before: Sep 18 23:38:14 2026 GMT
Not After : Sep 25 23:38:14 2026 GMT
Subject: CN=6aadcb66-575f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:4d:9c:e7:50:ef:95:a9:70:ee:4e:2a:83:
7c:4e:24:c8:84:47:4c:28:d8:a1:16:4e:4a:ce:d9:
08:16:0a:2f:0d:5d:f2:82:ec:55:1a:7f:f8:08:0f:
0e:b4:e3:4c:f6:23:fb:b2:50:18:75:5e:a4:bd:fb:
c7:55:71:75:7c:94:e6:0f:5d:4a:ed:6e:b2:3f:36:
4a:ba:39:f9:c9:7f:07:c1:24:21:43:33:4c:cf:66:
1d:43:1e:ec:5f:9c:48:77:04:20:5b:55:61:29:ee:
ae:87:31:93:ac:c1:34:f5:78:f7:77:d2:e3:b5:bc:
68:b4:03:8f:dc:70:f9:cf:cf:9b:ea:c9:95:a4:a0:
49:5c:97:d7:29:05:35:6e:fe:8d:3c:26:a4:6f:da:
45:de:a8:6c:8c:5b:a1:76:64:dc:a3:d2:21:16:19:
5a:98:a3:1b:af:86:9b:f8:89:77:b4:2a:a3:92:30:
dd:2b:19:7f:d5:11:18:ca:b9:38:5b:ad:56:0e:db:
75:6d:27:19:46:d9:6c:b0:85:69:6c:2b:39:96:e2:
a2:d7:6b:c4:b5:7e:60:ea:e7:f3:55:01:73:ac:a7:
61:ee:2d:d4:af:66:0a:8b:5d:7e:38:64:48:0f:6f:
23:cb:1f:bb:3b:c3:10:5c:f8:36:10:d6:b9:28:18:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:DA:E4:CA:34:9F:52:B1:65:A8:A4:63:F5:98:52:72:9C:9D:03
X509v3 Authority Key Identifier:
keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:57:97:b4:51:1b:8c:ec:94:7a:89:83:23:c5:e7:77:3c:
f7:ab:e9:eb:67:40:73:1f:8d:57:d7:5f:53:e6:ea:10:d0:57:
2d:78:6a:a3:99:8f:3d:54:2b:4e:46:df:84:9a:e2:10:24:a2:
4c:8f:2d:39:21:90:f2:c7:95:a1:d4:04:64:79:3e:22:37:30:
0b:fd:9e:dc:b7:5a:f1:ed:07:3a:c8:01:bb:e5:fc:03:d2:24:
63:cc:da:aa:85:15:56:7a:b1:6d:ea:8c:a4:c1:11:5e:81:f4:
6a:90:5a:cf:9d:fe:de:f8:45:e8:ef:a6:04:2a:2d:fc:29:fd:
3f:8d:b6:10:e6:36:4c:e1:96:42:ad:90:4c:a0:c0:c0:3f:6d:
80:e5:5d:70:e5:c3:a4:b9:0d:6d:83:ef:88:b2:2a:ab:7b:d3:
a5:0a:48:1d:69:5d:eb:4f:1a:f1:bd:03:80:35:31:9b:8c:35:
68:86:1c:d3:98:32:4c:e1:dd:fb:97:e2:82:1c:35:30:46:2e:
d8:92:d8:2c:e0:d2:1f:24:33:8b:8e:90:7d:5a:5c:d1:7f:8d:
35:85:2d:6b:e4:17:9a:14:a8:88:94:d5:21:aa:8f:93:1a:2d:
f5:6b:72:73:36:d3:2d:b3:b7:72:46:de:3b:c5:4e:d2:0f:cf:
73:c6:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:26 2026 by rpki-client