
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier: 8aTW8jSv+T1dknFl+ShFUW/sd7s0SN1q7GGzZsMqqOo=
Subject key identifier: 5B:29:34:C4:D6:23:6B:00:04:DA:61:D8:8B:51:C3:8F:C8:6E:93:84
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number: 0170
Signing time: Thu 23 Jul 2026 06:17:37 +0000
Manifest this update: Thu 23 Jul 2026 06:17:37 +0000
Manifest next update: Thu 30 Jul 2026 06:17:37 +0000
Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: N9UjryfExr7raUDihHB8b/5WxIU7paMAWpG05KEdtZg=)
2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: PEAQA7XsorRIuwWsKNbIKqHHMZSV9adPGMNrwws+mao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Jul 23 06:17:37 2026 GMT
Not After : Jul 30 06:17:37 2026 GMT
Subject: CN=6a61b201-09aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:c4:3e:c6:4c:5b:a1:87:e7:df:40:94:e8:
e8:3d:9f:56:b0:29:c7:02:0a:41:eb:d5:c0:5f:52:
d5:21:c5:bb:56:4f:32:4d:22:4a:c5:e7:8f:a4:7e:
51:77:5e:e6:ad:d0:01:36:09:b7:79:07:2a:98:5e:
8b:df:90:f3:a7:7e:f8:55:97:9b:64:95:3b:26:6e:
b7:c2:e4:04:91:8c:fa:f7:d8:bf:18:88:5b:f3:0a:
46:6f:89:b2:03:9d:62:34:48:82:13:d9:a7:2f:4f:
81:8a:76:9f:9b:ef:b4:91:4b:1d:4d:e9:74:0b:d5:
96:2e:17:58:a1:33:7e:2c:7c:ba:e1:c4:ba:9e:7b:
7d:61:5f:35:d9:86:28:94:d7:30:1a:c8:fa:69:31:
95:69:b4:fb:a9:28:e3:90:ef:d1:46:de:21:da:8c:
84:61:5e:b1:d7:9c:25:40:d8:f4:97:dd:f3:0e:2d:
bc:fa:37:fa:dd:58:5b:8e:01:93:26:b3:2e:13:82:
8d:ea:df:f1:a8:53:ba:e2:32:e6:88:9e:07:32:8e:
eb:26:f8:a0:2b:25:88:b8:61:be:c6:a6:c2:48:16:
57:8c:27:42:c1:2f:c8:7a:33:2b:e0:0e:9a:99:b7:
37:d8:a5:42:87:6c:c5:98:68:91:2a:6f:b2:a9:5b:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:34:C4:D6:23:6B:00:04:DA:61:D8:8B:51:C3:8F:C8:6E:93:84
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:89:1f:a9:d6:e4:71:05:62:21:28:31:f4:9c:04:e0:82:
84:9d:9f:17:0c:1b:9f:96:90:65:61:f4:40:ad:57:38:0b:42:
17:bb:29:d3:07:e8:50:bd:04:9c:26:29:2a:fe:95:48:75:6e:
18:28:a9:02:20:c4:b1:b8:72:3f:ce:ce:ac:63:57:2d:3f:28:
99:b3:36:62:c1:52:e1:f1:f9:74:6a:ae:39:77:7a:33:14:e0:
a8:cb:00:db:3e:81:3c:31:58:cf:8e:b4:d9:d8:ce:fa:0a:b9:
38:17:de:ec:db:a2:6b:59:66:e6:f0:b5:3d:49:84:30:5e:c5:
ca:f6:15:7a:c7:46:ca:2b:fb:8d:4c:d9:e7:9d:4d:39:e9:f4:
4a:b4:d8:96:74:98:21:9c:7a:51:3a:ba:68:85:28:84:0a:37:
71:43:bf:7e:dc:cf:68:16:44:ad:5b:2f:31:25:4d:7f:a7:45:
2b:db:b0:77:8e:71:01:e1:a1:78:5f:14:dd:90:04:39:de:23:
3d:c9:82:0d:e8:60:09:8d:85:08:83:5e:c5:29:86:89:da:80:
92:aa:99:54:b9:e0:c6:44:9c:f6:81:01:c6:dc:72:4c:ab:b7:
80:5d:cb:d4:a4:84:15:2f:c4:10:a0:c9:a0:0f:07:82:b8:3a:
cd:61:f0:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5
MTUzOEM1NUMwHhcNMjYwNzIzMDYxNzM3WhcNMjYwNzMwMDYxNzM3WjAYMRYwFAYD
VQQDEw02YTYxYjIwMS0wOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKbEPsZMW6GH599AlOjoPZ9WsCnHAgpB69XAX1LVIcW7Vk8yTSJKxeePpH5R
d17mrdABNgm3eQcqmF6L35Dzp374VZebZJU7Jm63wuQEkYz699i/GIhb8wpGb4my
A51iNEiCE9mnL0+Binafm++0kUsdTel0C9WWLhdYoTN+LHy64cS6nnt9YV812YYo
lNcwGsj6aTGVabT7qSjjkO/RRt4h2oyEYV6x15wlQNj0l93zDi28+jf63VhbjgGT
JrMuE4KN6t/xqFO64jLmiJ4HMo7rJvigKyWIuGG+xqbCSBZXjCdCwS/IejMr4A6a
mbc32KVCh2zFmGiRKm+yqVtf0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFspNMTW
I2sABNph2ItRw4/IbpOEMB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB
MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkNEQS8yQzdFNzJCODVBMTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJu
ZmhpYlViNG00bHlSVTR4VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP5CJH6nW5HEFYiEoMfScBOCChJ2fFwwbn5aQZWH0QK1XOAtCF7sp0wfoUL0E
nCYpKv6VSHVuGCipAiDEsbhyP87OrGNXLT8ombM2YsFS4fH5dGquOXd6MxTgqMsA
2z6BPDFYz4602djO+gq5OBfe7Nuia1lm5vC1PUmEMF7FyvYVesdGyiv7jUzZ551N
Oen0SrTYlnSYIZx6UTq6aIUohAo3cUO/ftzPaBZErVsvMSVNf6dFK9uwd45xAeGh
eF8U3ZAEOd4jPcmCDehgCY2FCINexSmGidqAkqqZVLngxkSc9oEBxtxyTKu3gF3L
1KSEFS/EEKDJoA8Hgrg6zWHwsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:58 2026 by rpki-client