
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json)
Hash identifier: /CZm/nxeczMLPCikvxz61AUexopyzhDlvVM9iKPpOG0=
Subject key identifier: 98:1B:26:49:11:DD:87:6B:DE:6C:9B:0B:50:7F:BC:6E:25:95:8C:93
Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Certificate serial: 0638
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
Manifest number: 0638
Signing time: Sat 10 Oct 2026 22:46:08 +0000
Manifest this update: Sat 10 Oct 2026 22:46:08 +0000
Manifest next update: Sat 17 Oct 2026 22:46:08 +0000
Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: fgGyV8YQ8ORKTj55pFmr6M6+5ly1bjCxU48bZ4XDIqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Validity
Not Before: Oct 10 22:46:08 2026 GMT
Not After : Oct 17 22:46:08 2026 GMT
Subject: CN=6acac030-85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:13:77:f9:f3:8c:91:46:b7:3e:ed:db:05:
fc:ce:8e:65:43:be:e8:bf:b2:8e:3e:eb:c3:0a:bd:
c7:86:ff:d5:34:2d:1a:91:bb:7f:35:f7:ca:91:31:
52:20:f4:17:7a:f2:32:73:d2:05:0b:19:40:09:d2:
1f:44:b4:cd:e9:0b:d4:80:be:e6:60:87:86:47:71:
d8:2e:6a:fb:e3:79:d8:1a:3b:33:fd:72:1c:ed:e5:
d0:b4:2e:4d:44:6b:8b:d6:67:d4:48:e6:34:4d:08:
0c:f0:85:7c:3a:9a:41:24:b8:e7:04:2d:a4:ec:f6:
a3:09:53:50:db:c4:98:93:6d:06:47:5e:3f:c9:c4:
7f:56:aa:61:ed:67:5f:13:c1:29:ce:5f:cc:6a:43:
67:1a:39:6a:2b:5d:c4:bb:d5:d8:f1:35:ae:96:cf:
ba:33:3b:ad:91:4a:40:5c:a4:86:f6:a1:0e:b2:a0:
fe:82:cd:8f:59:2c:30:21:7e:4b:7d:57:1a:8a:28:
10:b5:7c:10:ae:c7:b5:77:95:b3:43:c5:7c:5c:4e:
8a:99:44:ce:cb:9d:6e:3f:29:d7:67:eb:25:38:06:
a3:b0:aa:5e:35:c9:5e:67:51:88:4d:2b:e9:1b:7a:
ad:8e:9a:1a:b8:59:b0:3d:40:9f:ed:8b:6a:eb:4f:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:26:49:11:DD:87:6B:DE:6C:9B:0B:50:7F:BC:6E:25:95:8C:93
X509v3 Authority Key Identifier:
keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f6:dd:72:ef:04:ae:da:54:e5:cb:98:04:62:82:a9:d0:fb:
7a:76:d8:ad:30:fd:72:d2:d6:a3:56:99:df:ad:5c:11:8d:94:
4e:55:c1:98:f5:da:b6:93:aa:47:c8:66:2e:09:38:c4:27:f1:
45:a0:66:fd:ba:e2:11:f7:fb:d2:c4:63:29:5a:27:79:f9:83:
e1:de:af:f0:4c:12:8d:cb:81:c8:29:de:98:91:3c:de:f4:c4:
14:28:3d:a9:f4:9a:50:e9:65:d2:49:2f:1e:e8:5e:8b:5a:30:
23:39:73:b6:a1:bf:48:2c:73:9a:24:f9:79:da:8d:09:fe:d4:
b3:11:d4:23:26:1e:95:c0:7b:08:8d:f4:ba:c0:7f:f4:df:ef:
fb:52:0b:f3:77:4f:fd:54:8f:e4:56:cf:44:2c:52:17:3d:1f:
85:73:68:6e:4b:95:90:1a:eb:50:5b:62:89:78:a4:2b:cc:ac:
ee:b2:cf:01:a3:c6:fd:fe:c2:3f:9a:69:e7:28:ec:46:7f:be:
39:9d:4a:89:96:01:e8:a4:6c:0a:93:e6:00:14:56:17:6b:66:
56:08:14:ee:aa:bf:18:6d:fb:e9:2e:46:db:11:46:c6:66:3b:
55:83:ce:3f:ce:2b:91:62:e7:60:e2:6a:3d:ff:a1:5a:08:1f:
ec:6e:21:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG
NjRFOTc5OTcwHhcNMjYxMDEwMjI0NjA4WhcNMjYxMDE3MjI0NjA4WjAYMRYwFAYD
VQQDEw02YWNhYzAzMC04NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskkTd/nzjJFGtz7t2wX8zo5lQ77ov7KOPuvDCr3Hhv/VNC0akbt/NffKkTFS
IPQXevIyc9IFCxlACdIfRLTN6QvUgL7mYIeGR3HYLmr743nYGjsz/XIc7eXQtC5N
RGuL1mfUSOY0TQgM8IV8OppBJLjnBC2k7PajCVNQ28SYk20GR14/ycR/Vqph7Wdf
E8Epzl/MakNnGjlqK13Eu9XY8TWuls+6MzutkUpAXKSG9qEOsqD+gs2PWSwwIX5L
fVcaiigQtXwQrse1d5WzQ8V8XE6KmUTOy51uPynXZ+slOAajsKpeNcleZ1GITSvp
G3qtjpoauFmwPUCf7Ytq60+8mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgbJkkR
3Ydr3mybC1B/vG4llYyTMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1
QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH
MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvbdcu8ErtpU5cuYBGKCqdD7enbYrTD9ctLWo1aZ361cEY2UTlXBmPXatpOq
R8hmLgk4xCfxRaBm/briEff70sRjKVonefmD4d6v8EwSjcuByCnemJE83vTEFCg9
qfSaUOll0kkvHuhei1owIzlztqG/SCxzmiT5edqNCf7UsxHUIyYelcB7CI30usB/
9N/v+1IL83dP/VSP5FbPRCxSFz0fhXNobkuVkBrrUFtiiXikK8ys7rLPAaPG/f7C
P5pp5yjsRn++OZ1KiZYB6KRsCpPmABRWF2tmVggU7qq/GG376S5G2xFGxmY7VYPO
P84rkWLnYOJqPf+hWggf7G4hzg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:31:27 2026 by rpki-client