
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: fcYzu1W4egjHSaboBSXrq1O0nDXDQ/tn7M2rrXrKSuk=
Subject key identifier: 6B:48:12:6F:7D:B2:C7:4A:5A:B3:9D:29:A1:F4:C2:1E:11:3A:36:3B
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B00
Signing time: Thu 26 Mar 2026 16:15:53 +0000
Manifest this update: Thu 26 Mar 2026 16:15:52 +0000
Manifest next update: Thu 02 Apr 2026 16:15:52 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: vFNhuhxaOTSAVYd/OSy6c9BwToiMr9rOh0XbNwShf2A=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6927 (0x1b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Mar 26 16:15:52 2026 GMT
Not After : Apr 2 16:15:52 2026 GMT
Subject: CN=69c55bb9-0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:6e:75:21:a6:48:39:a6:40:93:f2:c3:2f:
75:e4:fb:d0:e0:9e:8b:90:fb:94:1b:51:7b:d2:60:
ff:c1:be:91:36:15:dd:83:39:0b:32:70:b1:20:1e:
55:12:1b:ac:7a:fc:f0:69:e4:c7:7b:56:c6:4f:3e:
d5:fd:54:34:17:86:0a:d8:53:e0:55:09:c4:90:19:
28:c0:60:84:38:18:14:12:1c:9b:76:86:27:06:96:
41:5e:a4:58:5d:40:97:60:50:73:02:1a:3f:e4:8d:
5b:96:3e:a2:91:2f:3c:f8:ef:76:16:0e:f9:07:ee:
26:37:29:ac:8d:1d:86:ed:4d:a1:ea:d0:30:50:e5:
02:b9:77:2b:32:ee:81:53:a6:76:6c:2a:5a:36:a0:
84:d9:2a:42:d1:3a:82:ec:99:fa:b5:7a:df:49:6d:
48:f8:81:c7:44:68:5f:22:45:6c:6a:1b:bd:48:3b:
84:57:8c:7e:69:67:79:c2:f0:d1:bf:1b:7b:12:81:
c4:bb:db:60:bd:f1:fa:5e:fe:3b:47:09:c7:d7:18:
cf:69:75:6e:80:67:e3:2b:77:80:d2:84:88:54:80:
09:76:d0:c1:af:6f:1a:c7:3e:1a:44:e9:9b:56:27:
7b:98:d1:6b:78:31:e8:02:9a:4e:16:a8:a5:b5:99:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:12:6F:7D:B2:C7:4A:5A:B3:9D:29:A1:F4:C2:1E:11:3A:36:3B
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b4:5f:70:dc:fb:78:87:d2:c9:a0:a7:30:f7:2a:ab:04:dd:
78:e2:41:23:95:82:d4:f1:c1:e3:8d:44:d8:79:a4:74:44:4d:
2a:66:ab:59:f2:84:7b:93:f9:c5:90:68:16:f4:6a:e2:6a:9f:
e7:e7:d9:0b:a4:fb:b7:d6:2b:26:1e:62:de:71:fc:50:60:8a:
c0:0f:8a:73:5c:4a:ca:f8:c1:46:5c:da:af:e3:0a:5c:a1:1a:
c6:5e:e1:6c:50:bb:15:fb:26:d4:7a:3b:13:f2:d2:8b:f2:34:
d5:cf:5f:14:f3:f2:13:d5:2e:09:fd:df:94:e0:de:c6:30:52:
61:ba:30:e5:3b:82:6b:80:5e:b6:ae:9f:3a:26:40:8d:95:12:
0d:24:ff:88:3f:83:dc:b3:59:92:fc:9e:f8:05:b1:7a:8a:c0:
f0:e8:d7:fe:3d:fe:77:1a:48:79:d1:d9:4f:b8:ce:48:6d:d9:
aa:d7:eb:2f:f4:89:aa:b0:e6:5f:7a:5a:42:1f:08:15:bd:42:
4e:5e:d8:de:9d:a9:25:38:3b:fb:1c:ec:3f:15:c1:2d:16:91:
0c:27:05:33:b1:ff:6e:ff:fe:c7:a3:db:31:0d:b0:80:a3:c5:
27:22:9a:a9:ad:76:85:b4:0f:77:99:3e:d8:27:40:c9:9c:f0:
7a:b9:5c:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy
NjcwQzYyMTEwHhcNMjYwMzI2MTYxNTUyWhcNMjYwNDAyMTYxNTUyWjAYMRYwFAYD
VQQDEw02OWM1NWJiOS0wYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoBudSGmSDmmQJPywy915PvQ4J6LkPuUG1F70mD/wb6RNhXdgzkLMnCxIB5V
EhusevzwaeTHe1bGTz7V/VQ0F4YK2FPgVQnEkBkowGCEOBgUEhybdoYnBpZBXqRY
XUCXYFBzAho/5I1blj6ikS88+O92Fg75B+4mNymsjR2G7U2h6tAwUOUCuXcrMu6B
U6Z2bCpaNqCE2SpC0TqC7Jn6tXrfSW1I+IHHRGhfIkVsahu9SDuEV4x+aWd5wvDR
vxt7EoHEu9tgvfH6Xv47RwnH1xjPaXVugGfjK3eA0oSIVIAJdtDBr28axz4aROmb
Vid7mNFreDHoAppOFqiltZlbiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtIEm99
ssdKWrOdKaH0wh4ROjY7MB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG
OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP
VUhBbS1mTDFUMHNtY01ZaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh7RfcNz7eIfSyaCnMPcqqwTdeOJBI5WC1PHB441E2HmkdERNKmarWfKEe5P5
xZBoFvRq4mqf5+fZC6T7t9YrJh5i3nH8UGCKwA+Kc1xKyvjBRlzar+MKXKEaxl7h
bFC7Ffsm1Ho7E/LSi/I01c9fFPPyE9UuCf3flODexjBSYbow5TuCa4Betq6fOiZA
jZUSDST/iD+D3LNZkvye+AWxeorA8OjX/j3+dxpIedHZT7jOSG3ZqtfrL/SJqrDm
X3paQh8IFb1CTl7Y3p2pJTg7+xzsPxXBLRaRDCcFM7H/bv/+x6PbMQ2wgKPFJyKa
qa12hbQPd5k+2CdAyZzwerlcXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:00 2026 by rpki-client