
$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
File: dqSXJWH75So6Zwt4JFETuDvo2AY.mft (raw, json)
Hash identifier: b1GyKeRaNTCI+9Pr3PjVLR9owq0WHsQlhZbAnHV6tgI=
Subject key identifier: 3D:B3:02:38:D7:DF:14:66:F1:36:BD:C3:0B:83:E9:75:D2:64:EF:24
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Certificate issuer: /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
Manifest number: 1D
Signing time: Tue 23 Jun 2026 09:11:45 +0000
Manifest this update: Tue 23 Jun 2026 09:11:45 +0000
Manifest next update: Tue 30 Jun 2026 09:11:45 +0000
Files and hashes: 1: dqSXJWH75So6Zwt4JFETuDvo2AY.crl (hash: mLvj4RegRlgFKsx+eTLsttvrXc3sUI4R+kaLqU2kqxs=)
2: CAB4E520455111F1948CBD49A9833773.roa (hash: QPCmy8z5Tsl2gxw51p+EgKnHOdeHl/XaVRVpoOC+to0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Validity
Not Before: Jun 23 09:11:45 2026 GMT
Not After : Jun 30 09:11:45 2026 GMT
Subject: CN=6a3a4dd1-fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:de:cc:42:6f:e4:cc:58:35:46:42:51:97:
4f:25:bc:de:96:15:80:9b:54:1e:b2:0d:5b:c6:9b:
6a:9b:ae:f8:5d:d9:03:a7:96:e3:40:b7:36:93:60:
e7:c8:4b:2c:20:b7:24:f7:33:12:b5:ee:a3:3f:b3:
39:79:b2:8e:d6:df:44:11:93:e6:d9:43:b7:7c:b2:
23:56:74:79:d3:10:fc:eb:7c:f5:e9:e9:cd:68:43:
f8:6c:f9:bf:cb:8b:25:d8:09:5b:aa:2b:b7:35:05:
c8:a8:07:32:18:06:bb:8f:19:22:58:e5:77:82:28:
86:22:0e:c4:c4:3b:42:21:24:ab:5e:09:06:c9:c8:
7c:ae:a6:6e:af:66:99:9b:75:d0:75:69:f0:df:b9:
72:4d:37:30:f2:c9:99:ea:7f:84:80:15:af:16:ff:
0f:f2:59:dc:10:36:1a:d7:0e:bf:7e:21:a4:f8:87:
21:bd:e3:6d:51:e4:15:12:48:5a:f8:de:c9:0b:13:
f9:9b:7e:34:16:b3:1e:95:fe:be:dc:65:ab:e1:60:
8b:03:94:fc:0b:c1:ed:cc:73:df:db:28:ae:72:63:
44:83:90:7f:19:f0:7a:15:37:aa:af:74:7c:c3:29:
27:33:71:08:a2:c0:0d:50:6c:df:6e:e4:bd:5d:26:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:02:38:D7:DF:14:66:F1:36:BD:C3:0B:83:E9:75:D2:64:EF:24
X509v3 Authority Key Identifier:
keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:a7:67:64:e8:1e:96:39:83:fe:98:4c:d7:37:75:82:53:
21:d2:df:21:80:a4:a8:12:59:22:a6:68:f1:a9:4e:1d:37:fa:
16:7d:89:d4:91:37:dc:be:12:a3:73:ba:ef:16:8a:a9:70:2f:
53:71:fb:8c:43:83:da:37:2d:69:77:2b:ab:db:7c:43:ae:d0:
d4:64:76:e9:d4:e8:a1:3d:55:03:39:2c:9b:7a:45:f9:3b:7a:
00:d0:4d:29:bc:7c:d1:7e:53:b3:80:33:b4:d4:34:67:5e:44:
73:f0:10:e6:fd:10:7b:b5:b8:5c:87:9c:a9:64:a1:15:88:12:
c6:fe:91:ef:bc:d8:e2:89:73:28:7e:e9:89:2c:f8:84:cd:a8:
e4:30:b3:ac:ad:4d:4f:86:b5:7d:b7:d1:b5:48:40:0e:ca:cb:
5a:f3:1f:b8:3e:fe:8b:a6:4b:07:6b:23:c4:b2:3a:09:cb:82:
ad:5c:44:6d:e5:7b:df:85:13:42:eb:a7:a2:e1:27:d2:d7:46:
96:26:7d:4c:59:72:a5:45:a3:c7:9f:07:ba:88:76:3b:f2:84:
45:46:a5:1d:21:81:a4:1e:c3:d7:8b:c7:54:40:3c:99:3c:52:
9f:a2:e8:17:f6:fb:ab:93:62:e0:36:7e:b7:c7:3d:1a:65:40:
10:64:6e:61
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDRFMjExMC8GA1UEBRMoNzZBNDk3MjU2MUZCRTUyQTNBNjcwQjc4MjQ1MTEzQjgz
QkU4RDgwNjAeFw0yNjA2MjMwOTExNDVaFw0yNjA2MzAwOTExNDVaMBgxFjAUBgNV
BAMTDTZhM2E0ZGQxLWZlOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6wN7MQm/kzFg1RkJRl08lvN6WFYCbVB6yDVvGm2qbrvhd2QOnluNAtzaTYOfI
SywgtyT3MxK17qM/szl5so7W30QRk+bZQ7d8siNWdHnTEPzrfPXp6c1oQ/hs+b/L
iyXYCVuqK7c1BcioBzIYBruPGSJY5XeCKIYiDsTEO0IhJKteCQbJyHyupm6vZpmb
ddB1afDfuXJNNzDyyZnqf4SAFa8W/w/yWdwQNhrXDr9+IaT4hyG9421R5BUSSFr4
3skLE/mbfjQWsx6V/r7cZavhYIsDlPwLwe3Mc9/bKK5yY0SDkH8Z8HoVN6qvdHzD
KSczcQiiwA1QbN9u5L1dJpNBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPbMCONff
FGbxNr3DC4PpddJk7yQwHwYDVR0jBBgwFoAUdqSXJWH75So6Zwt4JFETuDvo2AYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0NEUyL0VDRDQ1MDI4NDUy
NDExRjE4NkJGN0NGNjk5ODMzNzczL2RxU1hKV0g3NVNvNlp3dDRKRkVUdUR2bzJB
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHFTWEpXSDc1U282Wnd0NEpGRVR1RHZvMkFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
NEUyL0VDRDQ1MDI4NDUyNDExRjE4NkJGN0NGNjk5ODMzNzczL2RxU1hKV0g3NVNv
Nlp3dDRKRkVUdUR2bzJBWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2B6dnZOgeljmD/phM1zd1glMh0t8hgKSoElkipmjxqU4dN/oWfYnUkTfcvhKj
c7rvFoqpcC9TcfuMQ4PaNy1pdyur23xDrtDUZHbp1OihPVUDOSybekX5O3oA0E0p
vHzRflOzgDO01DRnXkRz8BDm/RB7tbhch5ypZKEViBLG/pHvvNjiiXMofumJLPiE
zajkMLOsrU1PhrV9t9G1SEAOysta8x+4Pv6LpksHayPEsjoJy4KtXERt5XvfhRNC
66ei4SfS10aWJn1MWXKlRaPHnwe6iHY78oRFRqUdIYGkHsPXi8dUQDyZPFKfougX
9vurk2LgNn63xz0aZUAQZG5h
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:43 2026 by rpki-client