
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: UWtryg9lHzT9MhFRBi4gKkoYW+fzeDKHr6Uj63HdSF4=
Subject key identifier: 35:B6:C0:57:F8:9F:2D:24:1B:C5:4F:60:1B:E5:72:E0:09:CE:11:3B
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 0272
Signing time: Wed 25 Mar 2026 01:29:28 +0000
Manifest this update: Wed 25 Mar 2026 01:29:28 +0000
Manifest next update: Wed 01 Apr 2026 01:29:28 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: RiMa/ZcdoIwFdAhnG8M/VvUwXQenLYJ/obDKUaqh64c=)
2: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
3: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
4: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
5: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Mar 25 01:29:28 2026 GMT
Not After : Apr 1 01:29:28 2026 GMT
Subject: CN=69c33a78-94ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:04:c2:0e:d2:3e:1f:c6:1e:04:b8:9c:e9:
bc:18:b3:5a:6b:cf:8f:36:77:fe:92:de:c1:84:76:
e0:1e:5d:b6:c1:98:60:85:97:e7:bd:dd:ea:83:cc:
65:66:2d:c6:27:30:9a:ba:6c:45:9f:16:6b:97:10:
9f:87:c1:ed:1f:54:cc:13:90:2f:70:12:3a:24:4d:
fd:fe:47:7f:f4:99:5a:b9:d0:18:b8:52:54:56:3d:
e7:71:bb:0f:a8:d7:94:f6:3e:08:43:b4:2f:b8:01:
77:b6:34:52:0d:44:ca:ae:20:45:84:48:5a:45:cb:
e9:e4:ee:66:4e:c1:a9:6a:df:ca:4e:aa:90:e7:87:
90:c8:b2:b2:d4:2d:ba:42:42:d9:eb:37:cf:2b:67:
41:08:a9:33:11:9a:ce:77:16:9c:ce:58:fc:33:4f:
09:27:45:00:61:8e:84:44:24:f7:fe:bc:7a:1f:31:
5f:8a:37:f8:35:f3:df:de:14:c8:63:46:b3:33:a8:
6a:f4:ba:2d:14:3a:e2:b0:91:85:7e:e8:c5:5b:4f:
3b:f2:43:8f:ed:f0:b6:85:76:9b:6e:d4:bf:82:a8:
77:b2:60:fc:30:72:ac:89:a0:6b:1a:7f:6c:eb:02:
c8:05:e9:b9:81:6c:5c:ac:8c:dc:92:18:cf:95:5c:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:C0:57:F8:9F:2D:24:1B:C5:4F:60:1B:E5:72:E0:09:CE:11:3B
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:80:25:d3:68:c7:f0:c5:7b:01:0b:98:09:0e:53:81:7c:
d3:cc:04:2b:7d:a4:a0:78:cb:64:c1:97:99:04:e4:1f:dc:6e:
a4:61:ec:ab:f4:bd:69:ae:da:0e:1b:16:2f:90:50:40:d1:23:
7a:d8:18:e6:84:bc:df:d7:47:c7:90:3b:1a:93:d7:5d:e6:f3:
b0:ce:2d:66:f6:a7:77:df:c1:13:0e:23:a5:10:86:f7:34:37:
22:0f:3d:1b:a5:30:82:84:5a:5b:6d:50:d9:95:30:63:1a:bc:
86:11:d8:2a:15:26:e1:de:25:05:46:f9:37:33:76:8a:ee:06:
ae:c8:d9:84:cb:9e:bc:67:c1:13:17:a2:49:e8:e5:95:3b:0c:
90:a1:6d:f5:67:df:c6:86:9a:c3:e0:fb:63:71:ee:b5:10:4c:
ed:24:1e:f1:47:a7:59:a0:22:f1:f6:4c:e3:57:23:e6:e4:d5:
e7:b0:47:0e:6b:10:a0:45:1f:28:71:2d:b4:61:2a:e9:e9:08:
ac:6e:5c:b5:03:fd:7c:38:57:ba:d7:24:09:31:68:e2:d4:bf:
c2:4d:a0:cf:f9:2b:bd:76:da:03:d5:75:94:10:68:f7:f0:f6:
c9:47:7f:88:2d:1e:b5:e3:74:3e:29:85:35:7a:f9:61:d4:be:
37:ae:ca:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx
MTBENDVCRTMwHhcNMjYwMzI1MDEyOTI4WhcNMjYwNDAxMDEyOTI4WjAYMRYwFAYD
VQQDEw02OWMzM2E3OC05NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8U0Ewg7SPh/GHgS4nOm8GLNaa8+PNnf+kt7BhHbgHl22wZhghZfnvd3qg8xl
Zi3GJzCaumxFnxZrlxCfh8HtH1TME5AvcBI6JE39/kd/9JlaudAYuFJUVj3ncbsP
qNeU9j4IQ7QvuAF3tjRSDUTKriBFhEhaRcvp5O5mTsGpat/KTqqQ54eQyLKy1C26
QkLZ6zfPK2dBCKkzEZrOdxaczlj8M08JJ0UAYY6ERCT3/rx6HzFfijf4NfPf3hTI
Y0azM6hq9LotFDrisJGFfujFW0878kOP7fC2hXabbtS/gqh3smD8MHKsiaBrGn9s
6wLIBem5gWxcrIzckhjPlVyYpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDW2wFf4
ny0kG8VPYBvlcuAJzhE7MB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD
REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU
aTBkelJWUzJrRk1SRFVXLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgJGAJdNox/DFewELmAkOU4F808wEK32koHjLZMGXmQTkH9xupGHsq/S9aa7a
DhsWL5BQQNEjetgY5oS839dHx5A7GpPXXebzsM4tZvand9/BEw4jpRCG9zQ3Ig89
G6UwgoRaW21Q2ZUwYxq8hhHYKhUm4d4lBUb5NzN2iu4GrsjZhMuevGfBExeiSejl
lTsMkKFt9Wffxoaaw+D7Y3HutRBM7SQe8UenWaAi8fZM41cj5uTV57BHDmsQoEUf
KHEttGEq6ekIrG5ctQP9fDhXutckCTFo4tS/wk2gz/krvXbaA9V1lBBo9/D2yUd/
iC0eteN0PimFNXr5YdS+N67KHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:07 2026 by rpki-client