
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: Wss1YuSd4UF8drlhGeAFAcXX+Iiweqx16gZM5UPsnVg=
Subject key identifier: BB:BF:AE:A1:DC:AF:59:8D:58:0E:7A:C5:88:F8:27:65:11:65:FC:AD
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 07F0
Signing time: Tue 24 Mar 2026 20:57:40 +0000
Manifest this update: Tue 24 Mar 2026 20:57:40 +0000
Manifest next update: Tue 31 Mar 2026 20:57:40 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: 3qnTqrUq7DQYFAAv2pBE5A9tvjAYTknry5x6+0mCi+w=)
2: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: LHyE9JquxrZVA6+YxqyZyhj2fRXxq3kNX+szFQORjMs=)
3: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: m6XByjxJzDUTkNjuzEeyi14AtxJwJj6V0wXPEnnJGWs=)
4: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 7Dc/p26scQyExOCr6ls3XR465cvStZZWQekkba/lKsA=)
5: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: zW47GWJIKBsxxAmlt2jzTuG4DK9SAdUIfdf1Khk40KQ=)
6: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: ckkrFHfHPvCjRaJjyuzP7GHAhWSZqQc+qwApdpLN6A8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Mar 24 20:57:40 2026 GMT
Not After : Mar 31 20:57:40 2026 GMT
Subject: CN=69c2fac4-7270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:16:bf:87:dc:2d:23:41:00:bd:87:e5:a8:
c6:eb:62:a9:23:5b:24:e1:7c:b8:de:be:8d:d1:16:
c9:ef:7c:ee:a3:01:df:7a:11:14:3c:d4:82:e8:10:
b6:36:4e:37:2e:f4:bf:11:bf:f2:b4:c6:69:b1:78:
22:09:e2:27:ae:e1:8c:c9:20:58:5f:55:7e:d7:2a:
7a:a5:e7:4a:46:70:4e:bc:02:af:b0:25:4e:d6:5a:
a8:85:59:ee:a9:1c:bd:93:03:b8:16:c4:25:e1:17:
7c:7f:29:5d:71:48:03:b2:97:2a:7d:8d:6a:dd:7a:
44:36:6d:83:c2:47:83:c9:1e:2a:de:eb:61:1a:8d:
11:6b:fc:b8:fc:4a:02:6f:fe:9d:eb:27:56:32:21:
98:3b:d2:5c:39:d5:84:1d:e3:80:71:60:65:09:1c:
8d:46:ac:e1:f4:05:1c:40:b5:99:8d:49:92:c0:b5:
71:5b:55:f4:c3:4c:2f:3d:00:4a:50:c7:b3:c1:8d:
17:18:b4:64:82:70:04:5c:33:82:69:a4:d1:90:5a:
6f:8d:72:53:a0:5c:f7:01:8d:41:a5:1e:3a:c9:41:
57:31:87:1e:a8:41:47:67:3d:de:20:11:b8:63:16:
74:5e:d5:88:99:a9:4f:62:73:a1:a9:ae:fc:ee:9b:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:AE:A1:DC:AF:59:8D:58:0E:7A:C5:88:F8:27:65:11:65:FC:AD
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:63:55:17:84:88:25:24:2b:c2:f0:8e:f8:aa:a4:4b:91:
9b:de:4c:54:8d:ab:9f:e0:00:e6:54:21:26:71:81:6d:0b:d2:
8e:a0:a9:85:35:8c:c8:38:bc:d5:30:40:14:13:8e:ff:52:b0:
ac:da:fa:d6:67:96:76:5f:d7:e8:eb:f7:2e:9f:ac:e6:ac:ea:
8e:7b:c0:11:f6:f7:61:78:66:5f:c5:87:07:d9:69:52:d5:75:
8d:7e:d0:5b:ce:6f:60:de:7f:21:ac:e9:35:51:cd:62:e5:ca:
79:a7:16:4a:df:68:3a:3e:3a:25:fe:df:ea:ca:31:3a:4c:15:
6d:60:cb:c7:ee:70:6b:68:92:10:22:4e:9f:56:cf:0e:ef:d6:
10:41:30:2e:9f:2e:1c:8c:8f:5e:4c:cf:e4:b5:7f:b9:4d:6c:
36:6c:87:67:3c:66:7e:ff:aa:eb:ff:60:99:f7:24:18:ea:59:
91:d9:72:9f:d7:25:81:24:79:2f:20:e9:d9:99:20:c7:0a:10:
dd:73:5b:1f:99:f2:9d:cc:10:a4:0a:b4:21:21:3a:4a:f0:2d:
17:e6:8a:95:e2:6b:f4:72:c9:ba:82:2c:ad:fe:07:03:41:be:
45:95:06:c5:2a:39:03:06:47:6a:3f:f0:d6:43:00:2d:17:c3:
ab:00:7c:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYwMzI0MjA1NzQwWhcNMjYwMzMxMjA1NzQwWjAYMRYwFAYD
VQQDEw02OWMyZmFjNC03MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIYWv4fcLSNBAL2H5ajG62KpI1sk4Xy43r6N0RbJ73zuowHfehEUPNSC6BC2
Nk43LvS/Eb/ytMZpsXgiCeInruGMySBYX1V+1yp6pedKRnBOvAKvsCVO1lqohVnu
qRy9kwO4FsQl4Rd8fyldcUgDspcqfY1q3XpENm2DwkeDyR4q3uthGo0Ra/y4/EoC
b/6d6ydWMiGYO9JcOdWEHeOAcWBlCRyNRqzh9AUcQLWZjUmSwLVxW1X0w0wvPQBK
UMezwY0XGLRkgnAEXDOCaaTRkFpvjXJToFz3AY1BpR46yUFXMYceqEFHZz3eIBG4
YxZ0XtWImalPYnOhqa787ptGpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLu/rqHc
r1mNWA56xYj4J2URZfytMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz
bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAE1jVReEiCUkK8LwjviqpEuRm95MVI2rn+AA5lQhJnGBbQvSjqCphTWMyDi8
1TBAFBOO/1KwrNr61meWdl/X6Ov3Lp+s5qzqjnvAEfb3YXhmX8WHB9lpUtV1jX7Q
W85vYN5/IazpNVHNYuXKeacWSt9oOj46Jf7f6soxOkwVbWDLx+5wa2iSECJOn1bP
Du/WEEEwLp8uHIyPXkzP5LV/uU1sNmyHZzxmfv+q6/9gmfckGOpZkdlyn9clgSR5
LyDp2ZkgxwoQ3XNbH5nyncwQpAq0ISE6SvAtF+aKleJr9HLJuoIsrf4HA0G+RZUG
xSo5AwZHaj/w1kMALRfDqwB8KA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:40 2026 by rpki-client