
$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json)
Hash identifier: CcUMa71TkeDv9msHw8m3gnkManeT1fhNbVlliPxrixo=
Subject key identifier: A9:2E:D4:5E:9B:1B:52:3B:B7:C1:BE:8A:3A:8D:20:F9:67:EE:6A:B2
Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
Manifest number: 0778
Signing time: Sat 04 Apr 2026 21:24:26 +0000
Manifest this update: Sat 04 Apr 2026 21:24:26 +0000
Manifest next update: Sat 11 Apr 2026 21:24:26 +0000
Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: WxAUwfT6dSHRfTKWRKQQEkZFMFfTpZxU/rCHDmIF668=)
2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: /z2DGv7fYaarpOtsTpCTZorjAYHFMh4lTVORf3xDc3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Validity
Not Before: Apr 4 21:24:26 2026 GMT
Not After : Apr 11 21:24:26 2026 GMT
Subject: CN=69d1818a-e641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:84:2c:0b:f6:a7:e2:7d:8d:65:38:4d:de:
b5:c0:9a:c9:56:2c:46:dc:1d:42:e7:d4:2a:d5:97:
26:b9:c1:95:9e:6b:12:37:a6:47:eb:e0:6f:9c:7e:
df:68:c9:1a:f1:b6:25:e0:ac:f5:51:ed:5e:7d:15:
8a:00:3e:f0:42:5b:8b:f5:1c:6f:ed:85:94:a2:6c:
3e:1a:a7:bb:ec:b9:23:b9:37:1e:ec:75:ab:09:12:
35:4b:0a:4a:80:e1:e5:57:2f:e1:d4:64:55:53:bb:
e4:39:5d:9c:32:d1:3c:6d:d6:5d:38:3e:eb:29:4f:
4b:0f:4b:d6:96:a2:5d:c9:da:50:59:c9:9c:a6:de:
8c:a4:35:16:cd:9b:fd:44:05:fa:a3:8a:8d:19:22:
ba:78:5b:6b:7f:64:3d:2c:0d:26:2d:b2:80:ad:b5:
e5:b5:88:5a:9d:1e:9a:6d:e4:1e:7d:9b:40:ec:e5:
db:fe:28:ff:13:24:c5:e5:2f:7a:33:2c:46:d3:ce:
12:d5:fa:ee:cd:89:51:d5:3e:10:e8:c9:82:6d:43:
22:91:4c:65:e5:32:a6:b3:e4:d7:95:a2:04:26:d9:
f5:17:c9:2e:66:c4:8c:3f:dd:34:4a:5a:d7:a0:6b:
0d:d8:4f:41:99:38:8c:65:0e:ee:5b:88:2d:e4:a9:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:D4:5E:9B:1B:52:3B:B7:C1:BE:8A:3A:8D:20:F9:67:EE:6A:B2
X509v3 Authority Key Identifier:
keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5c:e4:ea:00:a4:6d:33:30:b1:c7:4e:04:e3:85:d9:1c:6f:
e9:d8:1a:54:87:90:25:29:bc:1f:6a:40:6d:b1:b7:ad:81:f9:
d7:62:90:7c:57:af:5d:1d:8a:a0:b5:5e:cc:ee:30:71:c3:96:
b6:c0:eb:f2:2c:3a:40:12:75:49:57:42:b0:7d:ad:98:f7:7e:
75:10:12:89:ec:3a:b2:1f:bc:3a:8b:18:b4:f9:07:e2:86:50:
42:47:27:7e:13:43:6d:eb:45:c1:7c:8c:36:f7:45:67:3d:ec:
1f:a2:2d:3e:a8:84:df:c4:9a:3f:87:d2:3f:06:c1:89:31:7a:
61:8f:cc:9b:3b:eb:b1:46:7b:ba:50:76:b6:3a:77:9c:9b:f8:
02:20:30:de:cf:f3:a8:80:33:09:b8:d5:4c:1b:75:5e:dd:b2:
f0:57:64:98:79:e7:31:46:83:78:b9:d2:45:f6:02:99:5c:6c:
aa:a8:38:b3:9b:d1:67:fa:7a:ad:2f:0d:48:a4:6d:40:8f:83:
0c:35:58:57:03:b2:cc:50:5a:2e:36:e0:72:c6:5f:a0:07:44:
3a:3c:7a:93:2b:e1:7f:cd:42:d5:07:ee:ca:0b:f4:3a:40:c2:
5a:db:81:46:02:4c:ea:7a:02:cc:d0:59:7f:a9:91:2f:35:06:
a4:14:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:00 2026 by rpki-client