
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier: tmTrEDuBjFNNZaw8thOX4xQe5yvuBTj2Rw54QBuFZyA=
Subject key identifier: 1F:4A:4F:B2:99:51:15:95:86:C1:44:5C:37:40:49:55:68:E7:BE:F1
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0CB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number: 0CA2
Signing time: Tue 24 Mar 2026 18:22:10 +0000
Manifest this update: Tue 24 Mar 2026 18:22:10 +0000
Manifest next update: Tue 31 Mar 2026 18:22:10 +0000
Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: iRc3JcbMV9dsKOr2JPmWZ9IdVIlJWXciNDqjy+SmH1k=)
2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: itG/2TEeUAiOGwgLnnnphos/UoKB0vtQptEJXIBL+5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Mar 24 18:22:10 2026 GMT
Not After : Mar 31 18:22:10 2026 GMT
Subject: CN=69c2d652-8a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:27:bd:37:b0:10:87:97:a7:94:84:48:0a:
5a:d8:f5:e2:86:36:95:70:b2:18:9c:8e:b8:e4:23:
ed:df:e5:3f:1e:d3:50:11:00:bd:6a:53:f6:43:ca:
c5:e9:55:c2:49:7e:34:f3:41:56:b4:82:03:f7:f9:
17:a0:3a:50:7b:cc:38:e0:3f:66:f9:52:4c:13:d2:
5b:5f:f0:37:d4:14:4d:94:06:7e:ec:25:1e:c2:b5:
42:ef:e0:42:86:b5:55:98:4e:2b:d4:07:0c:94:2c:
2b:19:d2:1d:42:ce:2b:35:34:0d:ef:37:04:7c:f5:
56:12:39:1a:0f:c8:72:0a:ba:4b:94:c1:4e:8e:70:
30:53:98:04:0f:b6:28:b3:66:5f:d3:76:66:a8:52:
6a:5f:ee:18:e6:cb:43:49:8e:4c:32:0c:00:86:ac:
e2:a2:ee:37:4a:9d:13:7d:45:a2:de:91:23:7f:6a:
e1:4f:0d:70:85:e0:ad:9a:ef:db:00:ee:aa:ac:89:
ec:bd:25:a6:6f:a8:f5:ab:72:b3:c3:7c:df:8a:1f:
88:0c:31:b6:65:e7:f4:0e:de:9e:aa:01:b7:22:6e:
bb:7f:69:85:e9:8c:73:c9:ad:74:00:45:8f:0d:02:
f1:a0:aa:96:d8:93:b3:b7:eb:9a:c8:c7:92:8e:9b:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:4F:B2:99:51:15:95:86:C1:44:5C:37:40:49:55:68:E7:BE:F1
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:e2:a4:21:55:92:46:0c:44:2d:38:d9:ab:02:60:af:7b:
5f:16:cc:e4:73:c3:e8:0e:a2:52:18:eb:30:ce:df:40:15:e6:
12:b9:5d:9f:af:69:22:f0:19:b6:73:65:df:0c:a6:c6:52:8d:
94:f0:76:d0:99:6a:79:fb:73:36:af:c0:63:d3:3b:0c:cf:fe:
4d:c7:93:cb:20:a7:03:57:a4:3a:6c:ea:3d:95:34:9f:86:46:
d4:8e:8d:d5:1a:8a:74:38:10:1f:28:fb:4d:06:d9:a6:bd:2a:
5f:ec:42:65:40:07:7d:c6:8b:35:54:7f:7e:11:2e:a6:fd:63:
b2:fb:44:2d:84:03:68:22:35:b6:c6:b6:48:47:01:ff:ac:87:
39:e8:95:57:78:85:6d:e8:44:b7:68:55:e5:72:81:d5:a8:ba:
66:bb:94:b3:c3:e6:2e:81:e6:bc:a2:95:e7:dd:2b:82:b1:82:
74:2c:a2:bd:8b:ca:d6:fe:d3:d6:b9:a0:d9:69:9f:60:b7:79:
e3:6a:43:0f:ac:f5:d1:89:f1:35:df:7b:87:57:73:9d:b8:6a:
a9:50:a2:ec:e4:74:c5:a2:6d:05:51:02:16:2c:f0:ed:33:bd:
ac:56:20:d0:56:9c:4c:f9:0c:d9:ed:99:74:46:9b:56:c3:ec:
17:ee:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:57 2026 by rpki-client