
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: qlWEK2ggcK364VD5BCGc2f7G0dAZLd0ol8eYa7oIcsc=
Subject key identifier: F2:BC:D7:A5:13:A0:B3:A6:E0:19:71:CB:58:6D:AC:84:DA:D6:AF:A9
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 0250
Signing time: Sun 23 Aug 2026 02:27:57 +0000
Manifest this update: Sun 23 Aug 2026 02:27:57 +0000
Manifest next update: Sun 30 Aug 2026 02:27:57 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: AD5QnlV/1gUA3aZuSbrI1vUfwWeh99opoEJfxMAbyYM=)
2: 33A6923A5FF211F1A6FEF4E07C47A888.roa (hash: fEjt+6tuQF9PeQS8T6j6inMv06NeHodZot88n+pL2WI=)
3: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: f4VcaiBvVbV4voltwiUU/yymYJQXCHVhkFgjZ9diLy0=)
4: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4frxygrIFh7Y+rXGxz8LtjS0GjPhlQB8SSCF8zDQdkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 02:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Aug 23 02:27:57 2026 GMT
Not After : Aug 30 02:27:57 2026 GMT
Subject: CN=6a8a5aad-4f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:f8:e1:cc:46:45:fe:bd:9a:af:3d:fe:fc:
ed:a1:72:20:07:36:91:4e:d8:eb:da:3a:d3:18:29:
e0:32:7a:e9:d0:c3:70:7b:97:4a:0c:87:1f:76:99:
a1:8f:01:93:37:ba:45:3c:7e:a6:4a:03:ef:7c:00:
aa:93:ee:66:6c:36:1c:17:73:62:7e:84:42:7f:55:
d0:0e:ce:ac:ba:11:c4:74:5c:87:77:4f:be:96:7c:
8b:86:5d:4b:f1:8f:a2:08:55:a7:e2:67:20:74:b5:
c3:8c:a4:bc:64:f7:40:49:fe:2d:f2:1f:c6:90:7c:
f7:ba:89:b2:0b:67:59:a8:25:f6:de:85:74:fb:37:
99:20:dc:4a:ea:f5:03:b9:86:e8:be:28:4e:42:d2:
f4:4a:25:fd:a6:e5:11:55:c9:d3:a5:c2:c1:b4:87:
6c:b7:fd:63:74:3b:e5:0a:0a:2e:67:07:4a:cc:99:
21:f9:65:79:9d:12:bf:92:8f:ff:df:59:e8:7e:f3:
6e:f3:33:3b:b9:77:5a:55:92:e0:fb:77:5a:72:33:
ed:1e:f2:99:18:13:e1:79:63:e2:3e:73:37:ea:89:
84:3c:66:80:98:90:30:b7:11:96:63:78:b1:76:84:
e3:1c:22:30:23:07:82:35:19:4a:30:a7:25:aa:6c:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:D7:A5:13:A0:B3:A6:E0:19:71:CB:58:6D:AC:84:DA:D6:AF:A9
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:91:80:4d:5a:2b:90:f4:0e:2c:18:2a:97:91:57:69:a2:
e6:02:ca:c1:6b:0b:a5:7b:4f:c4:3e:f0:c0:12:60:ff:38:77:
a9:ad:eb:a6:be:11:cc:d8:26:87:1d:03:6e:a1:c8:50:31:92:
70:98:5e:45:bc:ec:89:6c:5c:b9:9a:f0:19:aa:ec:b0:9b:1a:
0d:f0:dc:9e:e8:cb:23:60:a7:02:47:2a:60:03:db:37:0d:57:
46:4d:fc:8e:a6:73:17:c2:14:4a:a8:22:89:dd:0d:79:bf:5d:
a7:8d:60:d9:d5:7e:ad:3a:bb:38:64:46:7e:25:64:25:8b:80:
ab:20:f7:f8:16:14:18:f8:be:42:32:2e:fd:34:dd:3e:22:fd:
ca:81:26:b2:14:60:72:04:ea:e8:e6:cc:82:16:0d:0c:0b:bb:
bf:68:54:30:c6:d4:73:fb:d3:95:40:80:97:fd:db:5f:4c:02:
c5:62:20:9d:99:e8:ed:38:1a:97:e3:51:c9:a8:1d:d5:70:71:
f0:c1:81:a4:9e:47:99:26:c4:f9:d7:19:c4:aa:a3:f7:0b:bd:
a7:a4:8b:32:0f:10:11:e7:4f:0b:db:67:3b:26:ad:c0:97:ff:
5d:3f:2b:c4:81:9d:fe:38:0f:9e:9a:9d:64:14:55:8b:cf:5d:
5b:39:9d:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw
MDZCQjUxODYwHhcNMjYwODIzMDIyNzU3WhcNMjYwODMwMDIyNzU3WjAYMRYwFAYD
VQQDEw02YThhNWFhZC00ZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmS744cxGRf69mq89/vztoXIgBzaRTtjr2jrTGCngMnrp0MNwe5dKDIcfdpmh
jwGTN7pFPH6mSgPvfACqk+5mbDYcF3NifoRCf1XQDs6suhHEdFyHd0++lnyLhl1L
8Y+iCFWn4mcgdLXDjKS8ZPdASf4t8h/GkHz3uomyC2dZqCX23oV0+zeZINxK6vUD
uYbovihOQtL0SiX9puURVcnTpcLBtIdst/1jdDvlCgouZwdKzJkh+WV5nRK/ko//
31nofvNu8zM7uXdaVZLg+3dacjPtHvKZGBPheWPiPnM36omEPGaAmJAwtxGWY3ix
doTjHCIwIweCNRlKMKclqmyLxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPK816UT
oLOm4Blxy1htrITa1q+pMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF
MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY
NlpsVUVmZHRYRThBYTdVWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYlmRgE1aK5D0DiwYKpeRV2mi5gLKwWsLpXtPxD7wwBJg/zh3qa3rpr4RzNgm
hx0DbqHIUDGScJheRbzsiWxcuZrwGarssJsaDfDcnujLI2CnAkcqYAPbNw1XRk38
jqZzF8IUSqgiid0Neb9dp41g2dV+rTq7OGRGfiVkJYuAqyD3+BYUGPi+QjIu/TTd
PiL9yoEmshRgcgTq6ObMghYNDAu7v2hUMMbUc/vTlUCAl/3bX0wCxWIgnZno7Tga
l+NRyagd1XBx8MGBpJ5HmSbE+dcZxKqj9wu9p6SLMg8QEedPC9tnOyatwJf/XT8r
xIGd/jgPnpqdZBRVi89dWzmdRA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 21:00:07 2026 by rpki-client