
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json)
Hash identifier: Ozo5m7CZ5rDqzPFn2maudSoMjUVMqDu96fOwGmhAvrw=
Subject key identifier: 0B:00:E4:5C:E3:69:01:CE:21:7E:B0:88:F9:57:27:C2:72:25:99:77
Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
Manifest number: 02DA
Signing time: Sun 05 Apr 2026 01:07:06 +0000
Manifest this update: Sun 05 Apr 2026 01:07:06 +0000
Manifest next update: Sun 12 Apr 2026 01:07:06 +0000
Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: BrKPHB+87LE8nM4NQIVpoL4Mt/3mbNOlbnMCVtB4KrM=)
2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: LLGJ17Nou/4s6iU/phgh61bl/Dsvbl9fuqtoB8+Y6Fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Validity
Not Before: Apr 5 01:07:06 2026 GMT
Not After : Apr 12 01:07:06 2026 GMT
Subject: CN=69d1b5ba-7f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:44:31:d5:ff:40:8d:e8:36:3c:3a:84:32:
a8:f5:13:b5:81:b1:4a:4f:9c:4e:71:d6:de:e0:5d:
b7:7c:6f:cd:de:d9:43:bc:8d:f0:1e:4d:9f:e9:65:
2f:3e:2e:f4:fc:3e:97:77:e5:23:03:fd:58:35:bb:
ae:1b:6e:4a:8a:ef:2e:94:11:90:a1:42:68:58:80:
61:0e:da:cd:27:52:4c:f2:20:01:e9:95:b1:f7:fc:
9a:dd:34:21:14:c1:cb:5a:a5:d0:e7:a6:03:9e:13:
7a:28:c5:7d:ef:b0:15:7c:a5:ef:44:cc:3f:69:e4:
9c:27:9f:86:c1:c4:03:3f:28:96:99:15:cd:7a:0f:
b8:35:76:b8:8b:44:3d:08:1d:bc:d4:23:74:fa:56:
ef:05:c4:59:5d:fa:60:bf:60:09:03:b2:22:a2:50:
17:08:5d:dd:9e:c8:32:a2:73:05:ea:f7:05:21:ba:
79:76:6d:0d:67:77:1c:4e:da:64:86:04:42:94:cc:
a2:09:0d:2e:a4:bb:8b:cf:b5:10:63:61:55:0a:b1:
86:ab:de:8d:e9:b0:a0:ca:62:2b:7a:80:7d:ad:80:
5c:70:62:d5:e6:40:e8:6e:e4:e1:f7:fb:28:da:09:
68:03:2f:cc:bd:33:89:e0:ba:79:a8:c4:2d:04:0f:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:E4:5C:E3:69:01:CE:21:7E:B0:88:F9:57:27:C2:72:25:99:77
X509v3 Authority Key Identifier:
keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:6f:78:81:37:94:7e:d3:ba:87:fb:ed:1b:6f:a5:21:c5:7a:
94:87:21:cf:10:a9:5b:1c:ce:e0:63:04:1b:1c:b9:0a:c0:e4:
96:88:96:e9:2c:bf:db:7a:c0:a1:bc:3e:10:1f:3f:88:5b:be:
fb:89:8f:dd:2f:59:30:30:d5:e5:2a:88:3c:b7:26:c0:a5:1c:
32:5a:b9:df:66:05:f4:c1:f6:b1:71:9c:bd:e0:8b:ec:74:a7:
c7:71:cd:4f:a0:6e:57:4d:e1:f7:64:19:bb:0e:14:bd:fe:ce:
c2:98:82:00:7d:1f:9c:61:55:80:9e:3a:b5:1a:36:78:b8:86:
b6:84:42:68:c4:5e:b5:f7:87:63:15:1e:f0:3f:c0:09:08:13:
29:97:9e:6c:38:99:e2:2c:37:ca:0e:ef:e7:5d:1d:3a:c4:9b:
ca:9d:9a:8d:04:30:a7:a5:4f:ae:78:09:bd:b0:70:3a:2e:51:
ab:1a:52:ff:f7:ba:d7:5c:3f:41:d9:e6:01:df:2e:2e:4b:83:
74:e6:2b:2b:08:28:45:98:6c:8a:11:fc:42:d7:12:9c:7a:6d:
63:0d:3d:d3:b8:fb:53:a6:34:b9:60:57:7f:b6:3f:be:55:96:
8b:70:c3:3a:64:7a:d5:ad:65:b7:b6:89:ef:e8:37:0b:91:9e:
1b:b9:7c:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3
N0JFOTM3QkMwHhcNMjYwNDA1MDEwNzA2WhcNMjYwNDEyMDEwNzA2WjAYMRYwFAYD
VQQDEw02OWQxYjViYS03ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7AREMdX/QI3oNjw6hDKo9RO1gbFKT5xOcdbe4F23fG/N3tlDvI3wHk2f6WUv
Pi70/D6Xd+UjA/1YNbuuG25Kiu8ulBGQoUJoWIBhDtrNJ1JM8iAB6ZWx9/ya3TQh
FMHLWqXQ56YDnhN6KMV977AVfKXvRMw/aeScJ5+GwcQDPyiWmRXNeg+4NXa4i0Q9
CB281CN0+lbvBcRZXfpgv2AJA7IiolAXCF3dnsgyonMF6vcFIbp5dm0NZ3ccTtpk
hgRClMyiCQ0upLuLz7UQY2FVCrGGq96N6bCgymIreoB9rYBccGLV5kDobuTh9/so
2gloAy/MvTOJ4Lp5qMQtBA+12wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsA5Fzj
aQHOIX6wiPlXJ8JyJZl3MB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4
MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL
b3NHWmUyTnZSUVYzdnBON3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlW94gTeUftO6h/vtG2+lIcV6lIchzxCpWxzO4GMEGxy5CsDkloiW6Sy/23rA
obw+EB8/iFu++4mP3S9ZMDDV5SqIPLcmwKUcMlq532YF9MH2sXGcveCL7HSnx3HN
T6BuV03h92QZuw4Uvf7OwpiCAH0fnGFVgJ46tRo2eLiGtoRCaMRetfeHYxUe8D/A
CQgTKZeebDiZ4iw3yg7v510dOsSbyp2ajQQwp6VPrngJvbBwOi5RqxpS//e611w/
QdnmAd8uLkuDdOYrKwgoRZhsihH8QtcSnHptYw0907j7U6Y0uWBXf7Y/vlWWi3DD
OmR61a1lt7aJ7+g3C5GeG7l8Jw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:06 2026 by rpki-client