
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier: /1phBelw6qGuCk0CV+3TrHPTwzEXrc/ugDaIfw6QfoQ=
Subject key identifier: CA:79:F9:5D:65:38:59:5A:DF:D2:A3:8C:89:B3:6B:9C:BD:5F:85:46
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number: 0115
Signing time: Wed 25 Mar 2026 05:08:10 +0000
Manifest this update: Wed 25 Mar 2026 05:08:10 +0000
Manifest next update: Wed 01 Apr 2026 05:08:10 +0000
Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: vZqSdL2G11cdjomS5TvGALDFDf1q9LyFutFJkKk0tb0=)
2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Validity
Not Before: Mar 25 05:08:10 2026 GMT
Not After : Apr 1 05:08:10 2026 GMT
Subject: CN=69c36dba-8963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:15:a3:6a:87:4f:51:29:78:da:87:c1:83:
2d:65:35:26:b0:c4:f8:3b:fb:53:5f:d5:59:82:e6:
ca:8a:cc:ee:79:07:1e:06:86:d7:9e:41:07:77:ad:
bf:dc:81:96:7a:f9:6e:fc:e4:a5:8a:56:68:6c:48:
2e:67:0a:eb:eb:47:af:ca:ed:8a:0f:45:b1:07:4d:
05:f2:3f:f6:eb:c1:71:07:30:15:72:7a:f1:4a:d6:
ac:1d:f3:fd:72:74:37:8a:e6:28:52:23:8b:53:07:
4c:7d:ec:56:96:f4:e6:a1:64:01:cc:f4:a8:65:a2:
39:3e:99:de:d0:d3:28:ca:50:7f:cf:62:e1:b4:eb:
83:57:06:cc:4d:6d:7f:3d:bd:24:8e:5a:5a:02:e3:
fa:9e:ea:aa:b9:02:50:d2:03:c0:ee:a0:09:a9:51:
9a:a2:96:a7:98:7d:ce:03:60:fc:bd:2f:55:2c:91:
d9:64:4a:ac:c5:c6:cf:0a:14:b0:c1:db:10:fe:34:
0e:fb:0e:8a:cc:7e:46:2b:0d:41:7e:1b:d4:c2:87:
3c:95:da:cc:47:f6:cf:41:66:56:78:e1:b6:c6:c4:
b4:b5:5d:82:e9:3b:fa:36:c3:a6:e7:b5:c0:ae:06:
9d:3b:09:26:e3:a7:18:8a:d6:b6:b8:8f:c9:20:ec:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:F9:5D:65:38:59:5A:DF:D2:A3:8C:89:B3:6B:9C:BD:5F:85:46
X509v3 Authority Key Identifier:
keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:65:1c:21:7e:a9:c5:ab:c4:fe:e3:75:a0:a3:39:eb:e1:df:
ea:53:96:e9:d9:24:81:c1:70:45:f0:cb:10:80:1d:f4:17:0d:
4e:95:ca:25:2d:81:75:84:42:a4:ea:b1:fb:5a:1d:a5:33:00:
04:f4:c0:f3:f0:b7:53:93:16:35:bb:f7:94:7a:43:81:0c:0c:
f5:6f:94:d4:af:9f:fb:e5:0d:3b:03:3a:5c:c8:ef:10:a0:a8:
b4:23:2f:7c:a6:a2:64:a5:a8:cb:f6:e6:67:24:ca:46:d5:77:
71:16:41:97:96:74:7e:e9:ce:9e:b7:26:0d:81:0e:61:64:dc:
34:75:2c:8e:f8:58:05:c5:6c:22:bf:26:6a:99:60:53:13:ef:
8e:11:2b:2e:0d:32:7e:47:67:da:c1:47:8c:23:bc:b9:32:ac:
0d:f7:2a:2e:bd:1d:89:9a:22:9a:2e:3f:e7:d3:d6:0f:7b:19:
94:85:35:83:33:45:6d:58:76:c2:0c:ce:1b:00:35:2e:97:45:
c9:f5:ce:b6:4f:b5:b2:23:39:e7:2d:8e:6a:5b:10:41:90:cf:
7b:77:18:b9:94:dc:d1:7c:6d:54:2c:69:ed:42:62:c8:bf:bf:
aa:e9:ee:4e:51:9b:7b:5b:26:8f:47:f8:ce:42:96:2a:e1:aa:
65:5f:67:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy
NzREMDY2Q0IwHhcNMjYwMzI1MDUwODEwWhcNMjYwNDAxMDUwODEwWjAYMRYwFAYD
VQQDEw02OWMzNmRiYS04OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdsVo2qHT1EpeNqHwYMtZTUmsMT4O/tTX9VZgubKiszueQceBobXnkEHd62/
3IGWevlu/OSlilZobEguZwrr60evyu2KD0WxB00F8j/268FxBzAVcnrxStasHfP9
cnQ3iuYoUiOLUwdMfexWlvTmoWQBzPSoZaI5Ppne0NMoylB/z2LhtOuDVwbMTW1/
Pb0kjlpaAuP6nuqquQJQ0gPA7qAJqVGaopanmH3OA2D8vS9VLJHZZEqsxcbPChSw
wdsQ/jQO+w6KzH5GKw1BfhvUwoc8ldrMR/bPQWZWeOG2xsS0tV2C6Tv6NsOm57XA
rgadOwkm46cYita2uI/JIOyrowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMp5+V1l
OFla39KjjImza5y9X4VGMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5
RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzM4OC9FMEU3MzYwQTg5RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rx
b3BhR1ozVHFZdlluVFFac3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzmUcIX6pxavE/uN1oKM56+Hf6lOW6dkkgcFwRfDLEIAd9BcNTpXKJS2BdYRC
pOqx+1odpTMABPTA8/C3U5MWNbv3lHpDgQwM9W+U1K+f++UNOwM6XMjvEKCotCMv
fKaiZKWoy/bmZyTKRtV3cRZBl5Z0funOnrcmDYEOYWTcNHUsjvhYBcVsIr8maplg
UxPvjhErLg0yfkdn2sFHjCO8uTKsDfcqLr0diZoimi4/59PWD3sZlIU1gzNFbVh2
wgzOGwA1LpdFyfXOtk+1siM55y2OalsQQZDPe3cYuZTc0XxtVCxp7UJiyL+/qunu
TlGbe1smj0f4zkKWKuGqZV9npA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:47:39 2026 by rpki-client