
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier: tfkvpF+SVuOQFaE8ZQBNXaDz54rLeQ93WKguGJJRDtE=
Subject key identifier: 21:D8:CE:76:71:A2:A2:38:CC:73:18:3A:41:AB:2E:BD:34:F8:96:2E
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number: 0218
Signing time: Wed 25 Mar 2026 02:12:47 +0000
Manifest this update: Wed 25 Mar 2026 02:12:46 +0000
Manifest next update: Wed 01 Apr 2026 02:12:46 +0000
Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: HbBS5w289pOGGy7QzCYs0E59sbPA4YH597dptCPrBlc=)
2: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=)
3: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: Mar 25 02:12:46 2026 GMT
Not After : Apr 1 02:12:46 2026 GMT
Subject: CN=69c3449e-529a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:1d:e5:8f:65:75:1f:5f:8f:16:78:1b:45:
e2:4c:2b:10:2b:fe:8a:fc:f3:e0:18:79:76:fc:84:
f4:fe:ed:9e:c6:c8:23:42:19:f2:6c:75:f7:a4:2b:
b3:87:8c:c7:92:bf:81:96:dc:59:ba:38:57:b2:70:
bd:3e:27:eb:ee:25:85:7e:53:8a:96:16:58:5b:c0:
2d:a4:8e:ad:b7:41:e4:48:90:8a:eb:95:c8:e0:ad:
1f:c2:53:9a:91:f2:25:11:94:2c:1f:e0:87:c4:10:
e0:68:e7:b7:c4:28:14:69:d3:ac:2d:91:2c:09:0b:
cc:22:6c:d4:fc:91:3e:f2:41:d2:0b:1d:9a:d1:dd:
cc:f6:ed:73:b9:1c:f9:1d:f9:08:76:8e:55:eb:4d:
f2:17:2c:c7:59:46:82:42:b0:06:5a:ee:e6:5b:52:
f6:01:9b:1b:f3:ff:d2:90:05:7b:2a:3c:a0:b5:25:
87:8f:6a:d6:86:f4:69:2f:6d:4b:3c:57:ca:8c:a5:
6f:2d:ce:a2:40:b3:cb:29:be:e2:ce:d2:5d:87:dc:
be:a1:f2:33:ea:9b:2e:52:5d:81:6a:88:94:21:eb:
c9:2b:7f:77:a6:07:9f:a3:fc:8f:bd:c2:63:6d:b9:
b3:23:3e:30:c8:26:24:2d:0e:49:26:c1:36:91:77:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:CE:76:71:A2:A2:38:CC:73:18:3A:41:AB:2E:BD:34:F8:96:2E
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:3e:9a:a5:52:7c:6f:57:3e:b3:28:27:4a:75:e4:f6:d7:
a3:1e:f0:05:4e:7f:65:a4:38:c9:63:7b:c4:ef:36:6e:84:5c:
89:ea:b7:0c:b7:4b:5e:7c:ba:a7:bc:ff:d5:d0:70:c2:d2:73:
38:d3:67:89:74:c2:9f:64:ff:0c:60:8f:c8:7f:26:33:25:d8:
b8:a8:9c:c0:da:52:7f:35:78:3c:ae:46:33:ce:52:5f:2a:f5:
ab:f8:52:b3:03:02:62:f0:11:46:01:48:ce:c2:ed:8b:2b:ec:
17:9a:e5:d7:68:b3:8b:d1:33:fa:e0:bb:88:33:9f:ef:ef:e8:
5b:ba:71:93:c9:f3:f7:47:36:6f:1b:0d:b9:c6:4d:8c:c6:3e:
d5:82:73:41:b1:ad:c5:9b:c6:c7:76:a1:88:30:85:6e:30:17:
cf:35:ac:ca:19:77:0f:12:7a:49:5e:a9:08:d3:43:40:f1:6c:
ad:8c:0f:e9:fb:77:32:25:f1:78:0c:6b:53:8c:9e:ae:63:68:
6f:2c:54:02:53:5b:26:01:69:d8:2e:83:4f:73:82:59:fd:55:
ed:d9:f7:cf:43:44:d9:6d:7a:47:5b:ee:85:a5:39:c1:92:2a:
71:21:86:f3:d3:c9:66:90:ef:8a:3d:ee:60:a1:a8:58:6e:56:
1a:03:0e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE
REM0MzhGOTQwHhcNMjYwMzI1MDIxMjQ2WhcNMjYwNDAxMDIxMjQ2WjAYMRYwFAYD
VQQDEw02OWMzNDQ5ZS01MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9gd5Y9ldR9fjxZ4G0XiTCsQK/6K/PPgGHl2/IT0/u2exsgjQhnybHX3pCuz
h4zHkr+BltxZujhXsnC9Pifr7iWFflOKlhZYW8AtpI6tt0HkSJCK65XI4K0fwlOa
kfIlEZQsH+CHxBDgaOe3xCgUadOsLZEsCQvMImzU/JE+8kHSCx2a0d3M9u1zuRz5
HfkIdo5V603yFyzHWUaCQrAGWu7mW1L2AZsb8//SkAV7KjygtSWHj2rWhvRpL21L
PFfKjKVvLc6iQLPLKb7iztJdh9y+ofIz6psuUl2BaoiUIevJK393pgefo/yPvcJj
bbmzIz4wyCYkLQ5JJsE2kXfaxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHYznZx
oqI4zHMYOkGrLr00+JYuMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy
RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT
ckc1dzNONl8xVWZkeERqNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhpM+mqVSfG9XPrMoJ0p15PbXox7wBU5/ZaQ4yWN7xO82boRcieq3DLdLXny6
p7z/1dBwwtJzONNniXTCn2T/DGCPyH8mMyXYuKicwNpSfzV4PK5GM85SXyr1q/hS
swMCYvARRgFIzsLtiyvsF5rl12izi9Ez+uC7iDOf7+/oW7pxk8nz90c2bxsNucZN
jMY+1YJzQbGtxZvGx3ahiDCFbjAXzzWsyhl3DxJ6SV6pCNNDQPFsrYwP6ft3MiXx
eAxrU4yermNobyxUAlNbJgFp2C6DT3OCWf1V7dn3z0NE2W16R1vuhaU5wZIqcSGG
89PJZpDvij3uYKGoWG5WGgMOnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:20 2026 by rpki-client