
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json)
Hash identifier: B9qUlcJKo7OFtcDd3wzjubsTcNmTseRLoPqM+8fN+r8=
Subject key identifier: 10:7A:B1:2B:B7:05:BB:DA:74:BB:56:6A:45:26:57:7D:95:5A:73:B3
Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
Manifest number: 0112
Signing time: Sun 15 Nov 2026 06:15:01 +0000
Manifest this update: Sun 15 Nov 2026 06:15:01 +0000
Manifest next update: Sun 22 Nov 2026 06:15:01 +0000
Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: oo8MP22BiQrdOYiSrCKaJYtjgcMkh6X40viY8t7Eo/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Validity
Not Before: Nov 15 06:15:01 2026 GMT
Not After : Nov 22 06:15:01 2026 GMT
Subject: CN=6af94de5-af66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:4a:aa:39:7f:ce:94:57:6d:1f:a5:e9:64:
c6:6f:13:1e:dd:41:02:c3:5e:14:24:3d:92:f8:21:
20:35:1d:c5:11:d6:10:78:1b:97:9f:1a:6f:fa:68:
d9:7d:1d:df:bd:4d:da:70:42:6a:87:f4:60:e3:be:
46:02:3c:f0:02:c8:eb:84:24:03:99:a7:6b:d6:07:
56:e9:ec:54:bf:23:30:0f:7b:9b:c2:28:a4:0e:f0:
1f:96:10:9d:b5:ef:68:a1:da:93:12:76:b7:a4:56:
6e:5c:93:f5:a9:52:79:ee:9a:be:a1:37:7f:d7:5b:
76:c2:4d:07:5e:a7:3e:46:9d:e6:d3:2b:45:a8:ab:
7e:2d:15:29:0e:e4:9a:cb:a3:1e:ab:3b:5f:0c:91:
61:10:8e:8f:12:3d:5e:cb:ce:b8:70:54:3c:f3:7a:
9d:80:85:97:ab:53:a1:03:48:c7:a3:7d:c3:8d:30:
89:d8:0f:6d:8c:b9:fa:65:1c:de:89:71:eb:05:09:
82:18:ec:44:86:20:43:e0:5c:df:0f:2a:2f:af:64:
00:17:8b:d3:d0:ec:b2:be:bf:c5:42:9d:cf:f6:f4:
ec:12:ad:b9:f0:21:01:5a:e1:ec:da:b6:ac:4e:7f:
36:05:f1:cf:51:40:03:fe:23:ac:83:81:19:c5:78:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7A:B1:2B:B7:05:BB:DA:74:BB:56:6A:45:26:57:7D:95:5A:73:B3
X509v3 Authority Key Identifier:
keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:24:13:ef:94:5e:ba:2a:29:1c:2e:70:3c:a1:14:80:7c:
26:64:da:ea:e9:b1:70:67:d9:b9:bf:64:60:d9:0e:68:e0:25:
a4:8f:5e:24:dd:f1:d1:80:74:63:27:44:ee:2e:f3:d8:a5:d8:
50:5e:77:75:12:12:10:07:5c:27:f3:1e:1c:d6:07:46:6a:53:
5c:61:b0:11:8b:05:37:1c:c8:5f:fb:9a:48:c0:43:a0:aa:74:
46:bc:3f:39:08:31:80:1b:14:38:aa:13:57:b9:2a:51:e4:60:
b2:09:4b:bc:ac:96:7f:c8:b2:d3:e3:6f:63:23:de:a0:9b:f2:
d9:45:ac:af:1e:ab:88:76:7f:07:83:4e:b2:27:8a:ed:80:1a:
e8:9f:e8:41:87:ad:0e:d1:17:da:2e:8d:34:03:f3:2e:c7:3f:
51:55:fa:9c:e7:82:ed:cb:89:ed:8d:b6:90:e9:f7:65:ca:24:
13:69:fb:11:28:11:c4:ba:2f:bc:4b:48:1e:2a:50:55:68:e7:
35:10:64:da:43:84:18:f6:3f:ea:ec:70:06:5f:93:5c:3f:d2:
6f:1d:8d:b3:c9:ca:d0:2e:4e:03:e3:2c:aa:4d:ab:76:65:c8:
2d:cc:36:50:69:92:77:77:4e:de:ce:d7:fe:c8:9f:38:12:b7:
68:89:73:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdFRkMxMTAvBgNVBAUTKEZDMzQ3Rjk5RkFENENGRUVDQUIzMTUyMTAyNDI3NzFB
RUIwODZENzUwHhcNMjYxMTE1MDYxNTAxWhcNMjYxMTIyMDYxNTAxWjAYMRYwFAYD
VQQDEw02YWY5NGRlNS1hZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmShKqjl/zpRXbR+l6WTGbxMe3UECw14UJD2S+CEgNR3FEdYQeBuXnxpv+mjZ
fR3fvU3acEJqh/Rg475GAjzwAsjrhCQDmadr1gdW6exUvyMwD3ubwiikDvAflhCd
te9oodqTEna3pFZuXJP1qVJ57pq+oTd/11t2wk0HXqc+Rp3m0ytFqKt+LRUpDuSa
y6MeqztfDJFhEI6PEj1ey864cFQ883qdgIWXq1OhA0jHo33DjTCJ2A9tjLn6ZRze
iXHrBQmCGOxEhiBD4FzfDyovr2QAF4vT0Oyyvr/FQp3P9vTsEq258CEBWuHs2ras
Tn82BfHPUUAD/iOsg4EZxXj5eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBB6sSu3
BbvadLtWakUmV32VWnOzMB8GA1UdIwQYMBaAFPw0f5n61M/uyrMVIQJCdxrrCG11
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0VGQy8xRDkzODJFQzQ1
QkMxMUYwQUI5N0NDMDlDNEY5QUUwMi9fRFJfbWZyVXotN0tzeFVoQWtKM0d1c0li
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0VGQy8xRDkzODJFQzQ1QkMxMUYwQUI5N0NDMDlDNEY5QUUwMi9fRFJfbWZyVXot
N0tzeFVoQWtKM0d1c0liWFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALw4kE++UXroqKRwucDyhFIB8JmTa6umxcGfZub9kYNkOaOAlpI9eJN3x0YB0
YydE7i7z2KXYUF53dRISEAdcJ/MeHNYHRmpTXGGwEYsFNxzIX/uaSMBDoKp0Rrw/
OQgxgBsUOKoTV7kqUeRgsglLvKyWf8iy0+NvYyPeoJvy2UWsrx6riHZ/B4NOsieK
7YAa6J/oQYetDtEX2i6NNAPzLsc/UVX6nOeC7cuJ7Y22kOn3ZcokE2n7ESgRxLov
vEtIHipQVWjnNRBk2kOEGPY/6uxwBl+TXD/Sbx2Ns8nK0C5OA+Msqk2rdmXILcw2
UGmSd3dO3s7X/sifOBK3aIlzrg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:20:31 2026 by rpki-client