
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier: hMBu70L6WxrzUYT+RgG+mnjNtpCZ81+UdtBX3n4305M=
Subject key identifier: 75:E1:6A:3E:48:5B:79:9B:24:A4:17:48:0A:94:F4:35:1A:2E:67:D1
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number: 07E0
Signing time: Sat 04 Apr 2026 23:03:28 +0000
Manifest this update: Sat 04 Apr 2026 23:03:28 +0000
Manifest next update: Sat 11 Apr 2026 23:03:28 +0000
Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: yvDSA7GI6ji4huc3Zgvyd+p87YwIOkFNHvJNJ36rzUQ=)
2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Apr 4 23:03:28 2026 GMT
Not After : Apr 11 23:03:28 2026 GMT
Subject: CN=69d198c0-b687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:33:ea:44:93:c1:51:94:3b:03:22:f1:19:
70:1f:36:52:8f:95:7a:a7:72:35:da:04:49:9f:8c:
e3:b4:72:37:e1:e4:83:3d:c8:ad:6b:b7:d4:ad:be:
54:f2:b9:48:6e:36:ca:7f:29:41:4b:4b:18:0e:e5:
15:94:e2:4a:ab:f2:a9:ce:65:7c:91:bc:9d:a1:f8:
bc:d3:09:bd:02:62:b6:b5:2b:86:71:0d:55:68:00:
ee:fa:6a:46:85:f9:45:1a:f1:bc:68:29:84:9b:f3:
ea:0f:7d:f8:02:a5:ef:0b:ce:54:41:53:32:95:cf:
d5:07:eb:2f:ea:6b:69:47:7d:65:1a:0b:00:5c:83:
32:33:9d:d2:53:c2:66:0b:53:5f:8f:0a:7b:4d:33:
99:1f:a3:97:47:f4:04:8d:76:84:6f:c7:e4:8c:5e:
85:b1:16:e7:30:55:ae:18:f4:40:da:c7:f4:7b:d6:
cf:07:bb:ed:a2:9d:b5:9d:8a:26:43:4b:ee:da:94:
9f:ce:09:00:00:d3:ef:f9:63:64:db:44:b1:53:e3:
5f:91:ac:b0:2e:7d:cc:02:57:cb:b0:38:6f:a3:0f:
93:d7:f2:5f:e2:02:7b:97:2a:40:66:e3:f5:30:d5:
bd:7d:4c:e0:dd:74:65:51:66:fd:54:3c:2d:30:57:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:6A:3E:48:5B:79:9B:24:A4:17:48:0A:94:F4:35:1A:2E:67:D1
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:32:9b:a0:bf:3c:5b:96:27:f9:45:54:11:cc:e5:c1:a8:10:
1b:55:fc:b1:8e:9a:46:0c:8c:2f:28:44:96:12:57:83:9a:60:
fd:0e:65:d6:01:36:40:d0:35:75:37:9d:54:d8:c5:12:fb:c7:
b3:6c:91:49:a9:f4:1d:9b:c3:85:d6:4d:e7:e9:79:92:75:80:
aa:70:dc:73:aa:21:f2:af:ce:b2:06:21:78:8d:7e:94:ef:e1:
86:a0:f5:85:8e:96:74:86:1a:ad:89:8c:99:69:71:b2:e7:bd:
a3:96:45:4d:e4:2a:a7:28:55:11:06:64:39:b7:8f:f5:e0:45:
31:37:78:bd:72:9c:84:f1:33:7e:93:c1:a5:a6:7a:09:11:1e:
07:c9:38:0d:eb:77:7d:14:52:bc:27:35:22:33:93:23:17:c4:
03:ae:11:49:4e:d2:35:56:39:d7:30:73:a2:70:bc:34:12:f2:
16:6d:ce:41:96:f3:90:4c:dd:79:76:25:2d:0c:89:76:d7:91:
6f:63:50:1b:aa:fb:86:cc:03:91:d4:16:88:ff:b7:b4:93:62:
6b:9e:dc:19:c0:4f:7f:9b:52:19:91:db:52:d2:89:b5:05:50:
f7:60:dd:cf:f5:e1:03:fa:af:76:f3:19:39:e3:83:76:03:0f:
40:1f:1b:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz
NDI0MTY3NTkwHhcNMjYwNDA0MjMwMzI4WhcNMjYwNDExMjMwMzI4WjAYMRYwFAYD
VQQDEw02OWQxOThjMC1iNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5wz6kSTwVGUOwMi8RlwHzZSj5V6p3I12gRJn4zjtHI34eSDPcita7fUrb5U
8rlIbjbKfylBS0sYDuUVlOJKq/KpzmV8kbydofi80wm9AmK2tSuGcQ1VaADu+mpG
hflFGvG8aCmEm/PqD334AqXvC85UQVMylc/VB+sv6mtpR31lGgsAXIMyM53SU8Jm
C1Nfjwp7TTOZH6OXR/QEjXaEb8fkjF6FsRbnMFWuGPRA2sf0e9bPB7vtop21nYom
Q0vu2pSfzgkAANPv+WNk20SxU+NfkaywLn3MAlfLsDhvow+T1/Jf4gJ7lypAZuP1
MNW9fUzg3XRlUWb9VDwtMFeaFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXhaj5I
W3mbJKQXSAqU9DUaLmfRMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC
QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ
N3FwQTM1WU5wUE0wSkJaMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGDKboL88W5Yn+UVUEczlwagQG1X8sY6aRgyMLyhElhJXg5pg/Q5l1gE2QNA1
dTedVNjFEvvHs2yRSan0HZvDhdZN5+l5knWAqnDcc6oh8q/OsgYheI1+lO/hhqD1
hY6WdIYarYmMmWlxsue9o5ZFTeQqpyhVEQZkObeP9eBFMTd4vXKchPEzfpPBpaZ6
CREeB8k4Det3fRRSvCc1IjOTIxfEA64RSU7SNVY51zBzonC8NBLyFm3OQZbzkEzd
eXYlLQyJdteRb2NQG6r7hswDkdQWiP+3tJNia57cGcBPf5tSGZHbUtKJtQVQ92Dd
z/XhA/qvdvMZOeODdgMPQB8bdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:32 2026 by rpki-client