
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier: kSVq/LLc9+Q3O3oXWy4Nr+gHgGeX6TRi4HTWnZEmH5M=
Subject key identifier: 8D:DA:41:31:93:70:BD:FC:E7:13:AE:58:18:7D:A2:CA:58:F3:99:DE
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial: 0574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number: 0568
Signing time: Sat 04 Apr 2026 23:07:17 +0000
Manifest this update: Sat 04 Apr 2026 23:07:17 +0000
Manifest next update: Sat 11 Apr 2026 23:07:17 +0000
Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: LFBfXP+fFQdfBBIlIdzpK5egzBUc4xnkTC/V3yMoRvk=)
2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: nqt0HcD1EVYLOzTSMy3qSz9HYLHCtp2w+DxH+GzK3ds=)
3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Validity
Not Before: Apr 4 23:07:17 2026 GMT
Not After : Apr 11 23:07:17 2026 GMT
Subject: CN=69d199a5-6459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:88:88:54:4e:30:24:c2:fa:c7:51:a4:87:
fa:b1:6f:53:e2:e1:b3:99:73:85:6f:2e:a7:b8:33:
a1:12:2c:d2:24:11:c0:6b:79:28:4d:11:25:01:ce:
7d:18:b4:33:40:ab:fa:20:d8:36:dd:7a:a3:ef:3d:
e4:6d:93:2d:c6:df:ce:68:ea:8c:91:b1:cb:1e:6f:
2b:c0:ec:85:d9:bc:7e:36:8a:d2:70:37:9f:b5:00:
4b:a4:92:69:f4:13:7c:e8:63:9e:e5:76:32:cb:31:
80:05:16:9a:70:d4:83:99:cd:9a:8b:1d:59:1b:f1:
8c:7a:10:61:d2:b4:d4:81:ad:b8:c0:7f:64:2d:e0:
db:a2:88:f5:3e:dd:58:88:36:36:37:f4:ed:dd:4c:
84:9d:de:cc:ea:81:20:7c:5c:3d:ec:e0:a1:dd:d2:
c0:6f:54:d4:65:47:98:bc:fd:76:6e:9e:89:84:65:
fd:1a:2c:bc:40:4c:f5:2c:7a:e9:a1:9d:12:90:65:
12:82:7a:08:9e:ea:8b:6b:89:33:c6:22:c9:6b:7e:
cf:2a:12:e6:47:a4:b8:74:ed:39:47:e5:28:a1:d8:
54:6b:80:a4:29:49:ac:e1:a1:e4:1d:09:16:cf:3f:
a2:f9:e1:56:25:ab:ce:ed:dc:25:c9:ff:73:48:97:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:41:31:93:70:BD:FC:E7:13:AE:58:18:7D:A2:CA:58:F3:99:DE
X509v3 Authority Key Identifier:
keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:3d:6f:98:7a:17:01:e1:6a:4f:dd:1c:77:0d:71:2b:56:
65:4a:b5:bd:63:4c:4e:2f:3a:c8:7c:77:6a:46:1d:c1:09:8d:
9b:4b:7f:95:62:96:10:6e:74:14:f0:bd:48:39:56:a6:fb:59:
36:e5:9e:06:7d:57:46:e1:77:b7:6e:1f:80:8d:a1:be:fc:bb:
f5:e8:a8:f5:7a:be:d2:ef:79:4d:c1:29:75:0a:6e:10:4c:84:
4e:a7:12:dc:7b:b0:f3:76:b1:59:91:b3:68:b3:32:c3:05:2c:
6c:35:0f:34:70:36:0b:1b:96:6d:9d:81:27:bc:ac:6c:87:c0:
c7:6a:db:fa:05:5f:61:86:50:66:2e:87:fc:1e:47:dc:c1:f6:
de:a9:dc:5d:7f:2f:99:64:b6:7d:0a:de:bd:55:ce:4d:74:3f:
1b:12:89:7c:82:eb:b0:93:17:cf:15:ae:9b:3a:c5:76:d1:e2:
91:e8:1b:f9:ea:61:f2:61:da:e3:ff:50:b0:f1:02:71:cc:c8:
56:5b:59:95:e7:4a:f9:7a:cb:6f:62:26:38:3a:84:8e:58:1d:
e7:5a:86:e5:79:f3:15:3f:8a:4e:06:78:a1:c0:5e:a7:80:1c:
8c:02:0e:d2:7e:2f:03:90:39:81:73:df:00:e2:af:03:0f:4b:
04:1b:c8:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5
N0U2NUNBMTkwHhcNMjYwNDA0MjMwNzE3WhcNMjYwNDExMjMwNzE3WjAYMRYwFAYD
VQQDEw02OWQxOTlhNS02NDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5bOIiFROMCTC+sdRpIf6sW9T4uGzmXOFby6nuDOhEizSJBHAa3koTRElAc59
GLQzQKv6INg23Xqj7z3kbZMtxt/OaOqMkbHLHm8rwOyF2bx+NorScDeftQBLpJJp
9BN86GOe5XYyyzGABRaacNSDmc2aix1ZG/GMehBh0rTUga24wH9kLeDbooj1Pt1Y
iDY2N/Tt3UyEnd7M6oEgfFw97OCh3dLAb1TUZUeYvP12bp6JhGX9Giy8QEz1LHrp
oZ0SkGUSgnoInuqLa4kzxiLJa37PKhLmR6S4dO05R+UoodhUa4CkKUms4aHkHQkW
zz+i+eFWJavO7dwlyf9zSJfC/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3aQTGT
cL385xOuWBh9ospY85neMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1
Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi
eVpacXppUlB5X0tYNWx5aGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE2c9b5h6FwHhak/dHHcNcStWZUq1vWNMTi86yHx3akYdwQmNm0t/lWKWEG50
FPC9SDlWpvtZNuWeBn1XRuF3t24fgI2hvvy79eio9Xq+0u95TcEpdQpuEEyETqcS
3Huw83axWZGzaLMywwUsbDUPNHA2CxuWbZ2BJ7ysbIfAx2rb+gVfYYZQZi6H/B5H
3MH23qncXX8vmWS2fQrevVXOTXQ/GxKJfILrsJMXzxWumzrFdtHikegb+eph8mHa
4/9QsPECcczIVltZledK+XrLb2ImODqEjlgd51qG5XnzFT+KTgZ4ocBep4AcjAIO
0n4vA5A5gXPfAOKvAw9LBBvIUA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:22 2026 by rpki-client