
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier: m/Dq7UsCY6NK3ldDuyfeJKkbSnxrAdPV0Rk3DCDzgQY=
Subject key identifier: 01:95:4B:F1:8C:EC:79:B4:C3:ED:14:5B:87:22:A6:7F:98:69:3B:8F
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number: 0119
Signing time: Sun 05 Apr 2026 05:18:26 +0000
Manifest this update: Sun 05 Apr 2026 05:18:26 +0000
Manifest next update: Sun 12 Apr 2026 05:18:26 +0000
Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: zKIM8kU+vjh8msqb5rqMtUhuk7ruC/1RmP1PT6vnU0k=)
2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=)
3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Validity
Not Before: Apr 5 05:18:26 2026 GMT
Not After : Apr 12 05:18:26 2026 GMT
Subject: CN=69d1f0a2-cab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:e9:bd:9a:94:4d:f5:a4:5c:54:ac:2e:c1:
e2:92:58:02:17:bc:48:76:99:c9:b6:98:5d:79:a7:
ac:48:2b:44:ea:53:42:a3:17:22:86:fc:51:ae:e1:
89:ef:65:5b:e1:23:ee:a4:75:2e:22:b1:df:61:80:
db:70:7b:02:a9:64:16:77:ac:00:34:ff:a8:92:db:
5e:1f:68:91:f8:bc:0b:ee:aa:bd:e5:5a:9b:25:cb:
52:9e:47:97:2c:05:6a:3a:e4:95:fb:b9:d1:28:c4:
e2:00:7f:45:70:80:1f:e0:fb:56:06:b7:1f:88:9b:
08:7c:1f:37:55:a4:07:44:f3:36:63:41:3d:cf:9b:
7c:fd:3d:43:1a:0c:88:e7:40:e9:37:0c:a8:f0:90:
7c:28:46:c1:6f:2c:4c:f6:cf:16:f7:f7:bd:40:86:
fe:9f:70:29:ac:93:66:79:0b:42:99:8a:d7:99:63:
d8:e1:25:79:52:9d:76:5a:d5:35:60:9d:3a:2e:a2:
e8:88:62:d0:85:ee:52:99:8f:71:f6:84:34:9c:3e:
7e:86:4c:d3:3b:2c:e7:fe:a8:ca:7a:22:83:65:09:
c0:c8:72:be:61:65:78:d8:ba:56:95:b6:59:2f:bb:
4f:ea:63:4b:65:dd:1a:5e:0e:5e:a1:f7:bb:65:db:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:4B:F1:8C:EC:79:B4:C3:ED:14:5B:87:22:A6:7F:98:69:3B:8F
X509v3 Authority Key Identifier:
keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cb:70:80:81:86:9e:02:81:f2:f2:75:4b:8d:96:3a:11:71:
41:dd:79:70:a8:21:f8:de:f5:a9:5a:21:30:23:3d:01:b9:ac:
51:c4:6e:ca:79:ab:18:92:ad:75:bb:1a:dc:70:51:2e:3e:b7:
17:12:a5:89:10:3a:44:e4:5f:66:0a:b5:43:69:c0:d9:a4:cd:
4a:70:bc:b5:6e:cc:7a:8f:2a:10:1f:ea:e7:70:33:85:83:b8:
77:b5:dd:d9:33:d8:db:76:9c:cb:c9:f1:41:08:ac:0d:16:01:
8b:ca:89:dd:71:ad:49:7b:c5:8f:5f:9a:36:67:17:93:98:d4:
29:9a:d5:cc:0f:78:66:53:a1:98:86:0c:62:c3:64:82:aa:09:
48:f3:2b:21:53:d2:40:9b:69:89:65:36:8b:f5:ee:e7:f1:d2:
2e:97:bc:f3:3d:02:b6:d7:d9:d8:df:65:66:2d:94:56:8d:37:
02:3d:fe:a0:7b:2d:4d:2a:d9:5a:97:62:f9:6e:c1:cd:ce:d0:
69:7f:08:e0:61:7c:15:33:2b:34:47:fd:b2:2e:37:21:b6:14:
52:13:6b:ba:56:49:67:39:eb:5d:06:a1:ce:1c:59:2e:da:6f:
9a:a7:fc:36:4b:89:d6:15:31:a6:2c:1a:73:5d:64:f6:73:83:
6c:4b:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:24 2026 by rpki-client