
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier: /JVUlsGLOBJ7BoKOLukxThQB6Y8ssOM2caaubnwqzjU=
Subject key identifier: 0D:11:E8:2C:FD:EC:E9:29:8D:5A:8B:98:C0:0A:37:B5:5B:73:1E:CF
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number: 017E
Signing time: Wed 19 Aug 2026 05:13:47 +0000
Manifest this update: Wed 19 Aug 2026 05:13:46 +0000
Manifest next update: Wed 26 Aug 2026 05:13:46 +0000
Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: RK4LHRzfwPhdcpu8Nge+Q8bgo7PnJwJYW9IiCTYjQuY=)
2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: PEAQA7XsorRIuwWsKNbIKqHHMZSV9adPGMNrwws+mao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Aug 19 05:13:46 2026 GMT
Not After : Aug 26 05:13:46 2026 GMT
Subject: CN=6a853b8a-a9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:39:00:ff:5c:7b:c1:ee:62:25:6a:1a:7a:
4f:6d:5f:6b:36:63:40:ac:f8:25:cf:95:a0:c8:fe:
5c:5d:cf:d3:90:89:70:4c:ad:95:2e:a8:81:b0:fa:
b2:36:8d:e8:ce:35:48:fe:d4:91:b4:1e:8f:c1:90:
a8:d9:8e:d3:8b:bd:03:e9:6b:fe:ee:12:a8:ab:d7:
0a:d8:ef:b0:14:9c:46:3c:ac:5f:fe:47:2f:91:f2:
14:2b:12:c7:e6:2d:77:61:e9:b1:85:b8:83:cf:78:
5a:5c:93:4f:f6:d3:f3:bf:10:5f:56:ed:41:62:69:
cc:ec:d3:e7:e3:dd:d3:8f:d5:3c:1c:a2:95:6c:d2:
27:a4:03:47:88:99:eb:e0:26:18:ca:9a:57:a4:b6:
7d:01:b4:c4:67:fe:76:89:65:8e:43:5b:83:a8:b2:
33:fe:d6:7a:6d:73:55:a8:c0:8c:f1:28:72:18:d2:
66:c1:e1:32:3b:ee:18:92:8d:ae:4e:11:7a:44:a3:
52:37:cc:17:3e:e7:00:1f:57:87:75:5b:3f:3b:b9:
ca:36:eb:a5:82:2d:5f:2f:87:f4:04:27:0e:06:42:
29:9b:c8:7a:69:bd:fc:b7:d2:e4:40:c2:f4:f2:23:
6e:74:07:66:69:2f:f3:f6:c3:25:e0:b0:26:3c:b7:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:E8:2C:FD:EC:E9:29:8D:5A:8B:98:C0:0A:37:B5:5B:73:1E:CF
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:38:6f:a8:3b:c8:28:50:f7:27:44:46:a1:c8:61:c6:71:1e:
c0:35:a9:9e:53:8a:44:76:d3:34:5c:25:f8:5d:ea:5c:40:c0:
43:62:27:cc:44:8b:2d:a0:d6:ed:08:43:57:6e:66:92:68:04:
a8:2c:84:c8:f9:c3:de:44:f2:43:f5:10:8d:39:b2:9f:52:e8:
b4:8e:e3:6e:15:aa:15:93:ac:ed:f7:f0:03:6d:6e:90:7b:67:
72:4c:81:d9:e9:86:16:9e:ca:17:0e:c6:de:83:04:ec:19:df:
f9:19:6c:c2:71:d7:18:6e:53:87:84:f1:7e:c3:f3:b1:6a:e1:
16:d1:f2:c2:ef:3a:76:ed:14:8a:35:2c:ad:6b:80:18:4c:b1:
d3:4d:49:87:d9:59:4b:04:8c:d8:02:26:a8:65:06:36:8c:35:
8a:44:a6:8c:4e:64:a0:6a:1b:e2:43:c3:37:a1:2e:fc:40:61:
21:d5:74:b8:68:46:6e:78:43:67:ec:17:35:fd:c0:12:00:33:
b4:00:d3:17:99:6c:8d:58:19:a4:e5:52:da:a4:96:3e:d9:cf:
2f:27:60:75:a7:74:94:e9:b6:60:38:65:11:16:74:0d:e6:81:
84:94:56:73:de:2a:ff:d2:46:cc:c5:68:40:6f:44:a8:10:6b:
4d:b9:df:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5
MTUzOEM1NUMwHhcNMjYwODE5MDUxMzQ2WhcNMjYwODI2MDUxMzQ2WjAYMRYwFAYD
VQQDEw02YTg1M2I4YS1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAry85AP9ce8HuYiVqGnpPbV9rNmNArPglz5WgyP5cXc/TkIlwTK2VLqiBsPqy
No3ozjVI/tSRtB6PwZCo2Y7Ti70D6Wv+7hKoq9cK2O+wFJxGPKxf/kcvkfIUKxLH
5i13YemxhbiDz3haXJNP9tPzvxBfVu1BYmnM7NPn493Tj9U8HKKVbNInpANHiJnr
4CYYyppXpLZ9AbTEZ/52iWWOQ1uDqLIz/tZ6bXNVqMCM8ShyGNJmweEyO+4Yko2u
ThF6RKNSN8wXPucAH1eHdVs/O7nKNuulgi1fL4f0BCcOBkIpm8h6ab38t9LkQML0
8iNudAdmaS/z9sMl4LAmPLcZ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0R6Cz9
7OkpjVqLmMAKN7Vbcx7PMB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB
MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkNEQS8yQzdFNzJCODVBMTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJu
ZmhpYlViNG00bHlSVTR4VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAjhvqDvIKFD3J0RGochhxnEewDWpnlOKRHbTNFwl+F3qXEDAQ2InzESLLaDW
7QhDV25mkmgEqCyEyPnD3kTyQ/UQjTmyn1LotI7jbhWqFZOs7ffwA21ukHtnckyB
2emGFp7KFw7G3oME7Bnf+RlswnHXGG5Th4TxfsPzsWrhFtHywu86du0UijUsrWuA
GEyx001Jh9lZSwSM2AImqGUGNow1ikSmjE5koGob4kPDN6Eu/EBhIdV0uGhGbnhD
Z+wXNf3AEgAztADTF5lsjVgZpOVS2qSWPtnPLydgdad0lOm2YDhlERZ0DeaBhJRW
c94q/9JGzMVoQG9EqBBrTbnf0g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:53 2026 by rpki-client