
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier: Y65KQMDx7sMGe++goOpotCLgKFpRrJN/3lJ+c9NaVys=
Subject key identifier: 8F:52:0F:2D:1D:18:91:65:8C:DF:CB:B3:7C:07:24:34:7B:EE:65:E6
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number: 0134
Signing time: Wed 25 Mar 2026 04:41:54 +0000
Manifest this update: Wed 25 Mar 2026 04:41:53 +0000
Manifest next update: Wed 01 Apr 2026 04:41:53 +0000
Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: BTWsMyx9pPvNO8X43P94D7tt+g59E9sYiO01mlIqlCo=)
2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: PEAQA7XsorRIuwWsKNbIKqHHMZSV9adPGMNrwws+mao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Mar 25 04:41:53 2026 GMT
Not After : Apr 1 04:41:53 2026 GMT
Subject: CN=69c36791-0648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:02:3a:c9:e6:77:00:60:0d:3b:03:43:5b:
65:b1:c8:48:84:b2:39:c1:52:0d:95:0a:f4:58:f5:
c1:fb:ab:d1:3e:09:f7:f2:a1:86:57:18:44:65:75:
f3:09:b6:f7:4e:4c:92:eb:f1:16:82:4e:4a:41:66:
7c:03:6a:ec:aa:5e:af:95:3f:20:0b:23:e1:a0:6d:
0d:27:10:61:c4:73:1a:db:4e:b3:e2:cf:b3:44:d5:
bd:99:ec:c1:5f:3f:87:25:5a:70:02:b4:79:92:47:
43:fd:f5:86:60:58:96:9f:8c:3f:ab:81:d4:f7:18:
98:37:8f:4a:ac:a6:de:ee:e3:97:af:30:b2:9a:59:
52:32:72:b3:5f:dc:03:6c:30:ad:ee:ae:48:a5:f5:
b0:75:d1:10:b2:b6:97:8d:e8:aa:52:92:c9:7f:c5:
70:ac:66:f3:49:0d:bd:2a:4e:b7:00:e8:77:6e:a4:
38:36:b1:4e:8d:41:fc:2d:c6:cc:84:45:ba:e7:9d:
20:bc:75:c9:d2:41:15:0f:db:b2:7b:a7:71:92:25:
6e:ac:c3:36:c4:a7:c3:ec:a0:d6:e1:34:0f:57:54:
14:fc:10:f4:70:36:7a:f4:5e:5e:70:4a:73:11:50:
87:54:8c:70:dd:95:2f:41:38:90:7f:f4:db:45:a5:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:0F:2D:1D:18:91:65:8C:DF:CB:B3:7C:07:24:34:7B:EE:65:E6
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:9c:9e:2f:f5:f5:37:d9:d2:b4:c2:81:32:77:82:20:ab:65:
47:fc:cc:f4:ac:bf:bd:24:92:31:b3:4c:02:fa:d8:94:1a:9e:
00:98:23:8d:7c:5f:14:6b:23:97:fd:be:6c:2b:bb:2d:c3:dc:
c8:26:7a:99:ad:d6:19:14:13:67:94:e2:e6:22:29:2c:df:19:
5a:28:12:94:79:c2:93:4d:56:0a:cb:3a:1b:11:82:ba:24:ce:
14:a5:1d:b0:f3:dd:c4:25:52:4a:95:fb:2f:50:c3:63:60:d8:
dd:7f:39:2a:7b:3d:f2:cb:be:82:95:c7:ad:a6:ae:ef:b5:f2:
08:0c:b7:37:4f:c5:39:b4:57:fe:77:5f:4d:0d:f1:6e:02:e3:
c1:88:35:02:31:dd:e1:be:a0:2d:c2:aa:7e:6e:b6:e4:0a:aa:
8b:47:46:97:ff:4d:4b:6c:11:69:b0:92:5a:35:5f:fb:5d:6d:
e4:35:d2:62:1d:58:3b:77:16:6b:85:e8:35:fb:68:2f:39:80:
02:46:e6:4d:59:3e:d1:44:97:42:5e:d7:37:79:4a:a5:ac:80:
5b:35:5a:3b:7c:d9:72:5b:13:f8:bd:9f:7b:c4:be:f8:48:3b:
e8:3c:fb:e4:27:5f:51:75:7f:f6:0a:4a:21:7b:2a:b7:59:3c:
e4:04:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:16 2026 by rpki-client