
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json)
Hash identifier: 67qJoKLSrRHq/4xjc4OD/QWpsZvNkJTL7gocC9xVDpY=
Subject key identifier: EE:45:EE:B7:F0:62:E5:DB:D4:71:E9:32:81:02:B4:B6:65:3F:69:14
Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C
Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
Manifest number: 025E
Signing time: Sun 05 Apr 2026 01:50:52 +0000
Manifest this update: Sun 05 Apr 2026 01:50:51 +0000
Manifest next update: Sun 12 Apr 2026 01:50:51 +0000
Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: ySS9u8rbav7Gl9aKEEk07SM+g9rpWRJ9eIxjpTHTIeo=)
2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: FUMsjEWis+cH0kT2vFlCLJiFdNfEQlwzcUFGIGoDoIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl
rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
Validity
Not Before: Apr 5 01:50:51 2026 GMT
Not After : Apr 12 01:50:51 2026 GMT
Subject: CN=69d1bffb-68d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:2d:d6:02:5c:c2:40:4d:3e:70:d4:31:d2:
42:b0:3f:2e:91:62:69:cb:96:bf:fb:2e:15:e8:2b:
4c:7d:9e:82:a5:6a:7b:70:5d:62:d5:dd:6b:2c:49:
aa:5f:32:47:7a:8d:c0:f1:00:df:4b:51:97:59:e6:
71:7f:72:84:a7:73:55:af:13:86:a6:ba:3d:5f:f9:
b1:bd:97:8d:12:6b:14:96:0f:07:3f:38:00:40:54:
24:af:dc:c7:4b:51:6e:ee:26:73:72:1f:50:57:f4:
7b:57:d5:d5:1b:7b:8e:46:74:7c:99:96:86:e9:2d:
f2:6d:18:50:4a:fc:7d:18:42:fc:e4:11:50:32:03:
58:80:c5:5c:f6:fc:b6:69:a9:68:f8:63:5e:1e:bd:
4b:71:2f:a3:30:37:c7:b3:0d:2a:cf:ae:88:2e:36:
b4:b1:7c:09:50:91:d1:89:3b:56:56:2d:e9:e0:99:
64:68:28:3a:ff:e9:d0:a2:f9:e7:e4:f4:b3:bb:55:
e1:46:4b:e0:7c:17:cf:60:2d:d0:8c:3f:af:f3:c2:
65:8c:a9:45:78:60:02:6d:cd:bb:55:a8:67:a6:02:
40:0a:30:57:e4:11:fc:62:f6:a7:c1:ab:d1:1f:cf:
f4:ff:ee:96:d9:ce:be:8f:46:c3:e0:7d:3f:59:44:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:EE:B7:F0:62:E5:DB:D4:71:E9:32:81:02:B4:B6:65:3F:69:14
X509v3 Authority Key Identifier:
keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a2:c6:89:d6:ee:53:e0:3e:cb:ef:78:84:90:24:40:0b:05:
0e:69:b2:74:9d:5d:9c:fb:13:1c:69:9e:04:63:e9:e3:e7:14:
de:57:12:6e:da:1b:f8:9b:01:a7:5c:a3:ec:80:a5:66:31:22:
ff:78:c1:a2:4a:14:be:77:ec:3c:a2:81:e0:7f:36:95:d0:86:
b4:3e:a5:97:85:54:26:39:ce:a9:51:62:35:04:bb:66:c7:df:
77:54:41:fd:56:62:55:43:f4:4f:6d:f6:8c:3e:49:82:0c:a8:
91:ce:99:e7:0e:12:52:38:f1:c1:66:23:33:1b:fb:ce:5f:c5:
dd:ca:93:f2:ac:7c:4a:75:15:5b:17:d9:ac:0a:d6:b9:27:db:
ad:bf:96:79:82:e4:26:b1:03:2a:ff:48:00:64:da:c1:c2:bc:
71:ad:5d:76:40:89:95:eb:89:66:d2:3e:f9:48:a7:09:55:c9:
9c:76:85:a3:d1:f8:13:cb:70:71:a0:89:91:35:5c:48:17:16:
d4:7f:c9:a5:8f:b9:cf:81:51:ec:e5:54:63:a5:bd:a0:00:e3:
69:8e:a2:a1:85:61:bf:b7:ea:e7:22:b3:4e:05:0b:40:d2:8d:
e4:f1:60:a0:62:ca:64:6a:be:f9:ad:04:ef:f0:e2:14:d1:9e:
6a:6a:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client