
$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json)
Hash identifier: LP1M/LFI7NjtRoeRscNv1HGxQDxEtEoEDkqixDaEAf8=
Subject key identifier: 65:76:E7:67:0D:6F:C1:DC:03:46:89:FD:03:03:A4:D7:7B:A8:66:2A
Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Certificate serial: 0794
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
Manifest number: 078B
Signing time: Tue 12 May 2026 21:38:36 +0000
Manifest this update: Tue 12 May 2026 21:38:36 +0000
Manifest next update: Tue 19 May 2026 21:38:36 +0000
Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: kfnoYZLZ7vF2XDOlYHhrjTFHd2tIwHKy7fkGiY44utc=)
2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: /z2DGv7fYaarpOtsTpCTZorjAYHFMh4lTVORf3xDc3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Validity
Not Before: May 12 21:38:36 2026 GMT
Not After : May 19 21:38:36 2026 GMT
Subject: CN=6a039ddc-7c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:c9:f9:83:a8:76:8b:77:b3:81:07:d6:f1:
f8:20:d1:66:fd:2c:de:6c:18:da:91:f3:5c:76:fd:
12:18:9a:81:0f:02:f9:a2:a9:7d:1a:29:69:9f:89:
e9:da:32:20:92:79:23:24:69:e7:c6:8a:ba:2b:98:
d7:9a:72:2f:e0:6f:d7:b6:71:cc:30:51:e2:7d:49:
54:95:14:0e:d6:7b:67:a2:23:4b:23:9e:da:f5:97:
53:4e:4d:51:ab:c1:36:ca:07:a9:74:b5:5c:26:1b:
32:66:5d:d8:bc:ff:f7:3f:14:9f:69:bf:49:76:5f:
6d:98:45:9c:a8:5f:d5:5b:ca:4d:e4:f9:08:24:be:
54:c8:6d:35:fe:ad:3c:0a:2c:09:f4:c0:e7:12:e3:
12:ff:16:fa:88:f1:e4:e3:68:7a:2c:2f:58:8a:0e:
da:4b:05:2a:82:3d:4c:6c:81:c1:39:e8:7c:7d:de:
0c:49:0b:3c:2d:df:f1:92:f9:27:e2:13:30:89:e5:
f5:6f:2f:af:11:3d:ac:bb:b2:62:58:5a:62:ec:51:
56:91:a1:13:5c:22:9c:ac:9e:14:f4:53:5d:82:92:
fa:d6:29:d5:b2:fb:de:a4:dc:6d:72:6b:9b:2b:d8:
25:2a:41:a9:c7:bf:5b:8e:1b:26:9a:84:ae:69:b1:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:E7:67:0D:6F:C1:DC:03:46:89:FD:03:03:A4:D7:7B:A8:66:2A
X509v3 Authority Key Identifier:
keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:e0:c4:ed:7c:9b:c8:20:e2:32:c7:99:f2:85:4d:c0:f6:
b6:16:45:6e:36:7a:8b:4c:1a:1e:29:cf:7d:c8:59:ef:b9:c6:
29:62:a0:d0:f0:86:68:aa:97:0b:73:66:6c:bc:2c:a8:42:a7:
b1:44:db:4c:56:77:95:24:bd:39:3b:1f:90:51:79:d5:b9:29:
57:46:e0:da:fa:6b:e7:6c:0e:db:36:fc:6a:5f:69:4c:5b:46:
95:33:c9:52:64:a8:67:4c:46:f4:5e:59:0d:6c:4f:a9:6f:c8:
10:55:6b:5f:62:cc:97:d8:ce:1d:9d:6d:01:cc:4c:39:b2:8f:
07:1f:46:3c:d9:58:e3:f0:71:a1:e8:6a:87:c5:e3:a5:fb:a0:
36:4a:13:72:dd:a9:70:02:a8:3f:d5:f8:c9:49:ce:df:71:c1:
94:5a:8f:a6:bc:44:be:db:a5:2a:b7:ca:5d:3e:4c:30:18:5f:
1a:c3:cf:e9:4c:2e:00:9b:20:56:ee:3f:4c:d6:03:2f:b9:ee:
ec:ee:34:30:34:db:fa:90:cd:4a:0c:69:ee:86:f6:f3:0b:bc:
ae:8f:26:91:ed:e7:cb:5a:35:17:72:7a:36:f1:1b:bd:17:64:
4f:c9:18:19:51:27:59:54:c9:3c:a1:3f:e0:53:02:8c:de:ad:
58:a7:80:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4
RTU3NzM3MjQwHhcNMjYwNTEyMjEzODM2WhcNMjYwNTE5MjEzODM2WjAYMRYwFAYD
VQQDEw02YTAzOWRkYy03YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6/J+YOodot3s4EH1vH4INFm/SzebBjakfNcdv0SGJqBDwL5oql9Gilpn4np
2jIgknkjJGnnxoq6K5jXmnIv4G/XtnHMMFHifUlUlRQO1ntnoiNLI57a9ZdTTk1R
q8E2ygepdLVcJhsyZl3YvP/3PxSfab9Jdl9tmEWcqF/VW8pN5PkIJL5UyG01/q08
CiwJ9MDnEuMS/xb6iPHk42h6LC9Yig7aSwUqgj1MbIHBOeh8fd4MSQs8Ld/xkvkn
4hMwieX1by+vET2su7JiWFpi7FFWkaETXCKcrJ4U9FNdgpL61inVsvvepNxtcmub
K9glKkGpx79bjhsmmoSuabFh+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGV252cN
b8HcA0aJ/QMDpNd7qGYqMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1
OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2
TDFwWEM1bFJmS0NPVjNOeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIFTgxO18m8gg4jLHmfKFTcD2thZFbjZ6i0waHinPfchZ77nGKWKg0PCGaKqX
C3NmbLwsqEKnsUTbTFZ3lSS9OTsfkFF51bkpV0bg2vpr52wO2zb8al9pTFtGlTPJ
UmSoZ0xG9F5ZDWxPqW/IEFVrX2LMl9jOHZ1tAcxMObKPBx9GPNlY4/Bxoehqh8Xj
pfugNkoTct2pcAKoP9X4yUnO33HBlFqPprxEvtulKrfKXT5MMBhfGsPP6UwuAJsg
Vu4/TNYDL7nu7O40MDTb+pDNSgxp7ob28wu8ro8mke3ny1o1F3J6NvEbvRdkT8kY
GVEnWVTJPKE/4FMCjN6tWKeApw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:19:48 2026 by rpki-client