
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier: sc54j1wpzQ/kEFJA2/4GazrZF5d/RuM/9E0RoR6FPeQ=
Subject key identifier: AC:A3:B7:80:22:B3:C9:9D:F3:BA:D0:37:0B:C1:02:9E:24:80:54:6B
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number: 065D
Signing time: Sun 20 Sep 2026 22:38:40 +0000
Manifest this update: Sun 20 Sep 2026 22:38:39 +0000
Manifest next update: Sun 27 Sep 2026 22:38:39 +0000
Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: SYtfYkFtzfOXYkaYBHm2Y/plsiN80a9j+n6++quv1bw=)
2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Sep 20 22:38:39 2026 GMT
Not After : Sep 27 22:38:39 2026 GMT
Subject: CN=6ab06070-3741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:d6:c0:3f:85:2c:62:0a:4d:f2:d5:fe:9a:
01:12:91:e6:f4:fa:9d:6d:8c:4c:e7:70:fc:38:63:
fc:e7:ac:6d:34:83:20:c8:d4:cb:50:7d:be:4f:45:
fb:1d:93:13:25:30:75:f5:fb:a5:0c:3d:e9:4b:20:
09:3b:f1:5f:30:fb:cd:ee:c6:47:ba:82:4b:33:4b:
8a:f4:84:75:99:ed:9d:be:36:38:5e:25:d1:ca:ea:
23:7b:84:a7:91:c7:25:93:81:f1:40:bd:33:c8:39:
92:27:5e:e2:2b:f9:3c:82:68:6d:94:13:ea:65:1a:
be:f1:c8:0b:ff:a3:2d:44:b8:ef:2c:ef:36:65:2b:
80:06:ea:73:42:39:96:25:c5:38:bf:a1:0e:82:4a:
42:05:a5:74:43:27:25:8d:f2:3f:e1:c5:64:1c:b5:
43:30:93:00:69:f3:ba:8b:b5:57:16:ad:86:31:cd:
e9:e8:aa:67:fc:43:44:b1:e1:f2:28:c9:d2:61:09:
33:ff:ca:5e:eb:76:ef:eb:95:48:88:ca:83:f8:25:
b0:b4:3e:1d:db:02:69:0b:37:56:04:37:dd:c6:fe:
e6:cf:ca:dc:ba:28:98:8a:fb:16:05:cc:da:9a:bc:
1d:eb:d7:37:31:34:db:84:3c:c4:ba:5d:bf:13:51:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:B7:80:22:B3:C9:9D:F3:BA:D0:37:0B:C1:02:9E:24:80:54:6B
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:bb:c3:37:71:13:e4:10:12:fe:61:f0:c3:cc:d0:0b:91:c8:
58:1d:e0:7c:2b:d2:a3:9d:5b:2c:4d:df:d2:ef:2a:f3:bd:03:
d1:26:d1:02:49:a1:ff:45:9b:e7:a2:ff:d9:d4:24:3d:45:de:
5a:07:58:4e:60:34:c5:1b:44:93:6b:88:a1:06:25:dd:f9:21:
aa:92:c9:5b:d0:18:d7:50:a5:c7:c5:ac:14:ce:7f:37:54:c7:
8b:27:d8:80:e1:dc:fe:97:87:d4:bc:16:38:f2:a7:2b:c9:34:
36:d2:98:2e:7d:2f:b4:e4:1e:21:44:a2:31:33:5a:bf:5d:c4:
d7:c0:90:9e:d7:58:38:1a:87:65:11:c0:1f:1e:53:b3:f9:74:
0c:de:20:61:9f:b8:d4:f8:83:9f:5d:ed:88:6a:f0:8b:71:35:
61:67:a5:d4:f3:c5:36:d5:73:c9:27:ef:98:06:72:4d:64:15:
db:28:69:d1:f8:df:a2:29:6a:25:ed:69:5d:53:15:37:56:b5:
2a:60:48:ab:ff:70:11:34:4b:bc:6b:26:0c:8f:52:18:68:cc:
c9:dc:e8:07:c4:91:47:da:3b:8e:2f:3a:f4:98:01:c3:77:89:
75:82:4c:e9:88:72:fd:89:04:41:a2:cf:c9:b2:f6:8b:0a:a8:
31:90:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:15:43 2026 by rpki-client