
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: tKOMMyDPDJMij75FDFtr/cg2evD4Apw7h76e/bTu+XA=
Subject key identifier: 1A:9E:ED:E4:66:2E:CD:35:12:00:A0:70:AC:29:11:0D:ED:3A:D8:24
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: 54
Signing time: Wed 25 Mar 2026 07:27:36 +0000
Manifest this update: Wed 25 Mar 2026 07:27:35 +0000
Manifest next update: Wed 01 Apr 2026 07:27:35 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: qfHY47tiq1hRCCxrsgDiM/GNeRFpvWR09ydNXvEpMac=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: JWmiyvy9oS6y9QyM29YOPVbScDfNGAYVqVIW4JCvojQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Mar 25 07:27:35 2026 GMT
Not After : Apr 1 07:27:35 2026 GMT
Subject: CN=69c38e68-1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:0b:8d:d2:36:30:1b:70:ee:3f:38:81:1d:
d7:c7:47:b4:5f:b5:3d:7b:20:5a:5c:11:39:b2:6b:
aa:d3:fb:f5:12:53:14:07:10:55:57:f1:f0:5b:be:
77:c1:e1:f2:bb:c4:6e:49:be:30:ed:bd:3a:9e:bc:
9b:16:13:dd:26:97:24:c6:e0:1e:b0:6f:65:84:1e:
2b:bc:cd:1c:d6:1b:61:28:f8:07:1a:0c:b8:4c:ba:
1f:67:a7:6e:a8:ce:4b:82:eb:c8:f4:71:be:29:71:
d8:90:2a:d8:f4:65:dc:51:1a:5e:f9:f8:d0:91:70:
ef:3e:5f:15:2a:ba:f0:b1:a2:ea:15:56:29:2d:fd:
7a:99:9a:0b:a0:66:9b:72:b7:b9:aa:de:94:93:35:
cb:e4:92:92:fd:f9:46:50:80:fa:38:e8:ec:30:d4:
32:4f:85:e1:69:44:0d:5b:ff:63:c1:93:7d:76:49:
0e:94:85:cd:a2:a9:a1:9f:d0:0a:a0:d7:1b:a7:44:
6b:62:cb:df:43:cd:37:5f:c9:6f:7a:4f:37:a1:b0:
d4:de:73:9d:81:8f:ec:16:3a:52:68:ca:48:69:92:
91:26:4d:83:70:81:c4:35:cc:af:73:6a:07:6d:a7:
bd:eb:f4:5a:ea:7f:8e:2e:ce:ca:67:33:92:f6:7f:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:ED:E4:66:2E:CD:35:12:00:A0:70:AC:29:11:0D:ED:3A:D8:24
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:e9:90:ee:98:b5:25:fb:1e:47:42:72:b5:18:87:5c:1a:
9a:2a:92:10:6d:45:1f:62:c0:f6:2d:df:ec:4e:49:6b:41:4d:
6b:e9:2c:4e:69:77:85:80:37:e9:d5:62:56:60:a3:dc:db:c7:
ba:17:39:22:78:f4:23:c6:0f:f4:f5:18:85:d7:0e:83:61:4c:
7b:3d:29:78:be:c4:13:a4:aa:10:7f:cd:f2:13:99:83:b1:61:
75:1d:7b:74:93:7b:d5:e9:25:00:10:2e:df:e1:6e:35:d0:2a:
13:19:2d:de:b6:f8:9a:94:8c:56:ee:de:82:1f:8b:bb:f3:aa:
98:51:a4:69:c5:83:a2:8f:b4:3e:0b:23:4c:98:2f:17:dd:77:
3c:12:70:af:fd:10:af:94:af:f9:65:9d:51:74:27:a9:b9:41:
0d:79:91:cc:ce:5d:26:f8:d2:67:e3:82:0a:e9:a2:77:d5:51:
89:03:b7:7f:c7:6d:45:f7:e2:36:07:6c:60:0e:5c:ef:bd:39:
f7:fd:c7:bf:b5:24:79:3c:28:79:20:9c:55:d5:6e:00:dc:16:
c9:b3:23:b8:60:9e:a4:a7:ee:69:a0:17:e0:b4:7c:9f:5a:11:
d2:82:16:69:b4:f4:38:af:b2:c1:bf:ff:af:24:7b:3a:25:04:
d2:fd:7f:13
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD
MjVBQTIzMzAeFw0yNjAzMjUwNzI3MzVaFw0yNjA0MDEwNzI3MzVaMBgxFjAUBgNV
BAMTDTY5YzM4ZTY4LTE4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGWguN0jYwG3DuPziBHdfHR7RftT17IFpcETmya6rT+/USUxQHEFVX8fBbvnfB
4fK7xG5JvjDtvTqevJsWE90mlyTG4B6wb2WEHiu8zRzWG2Eo+AcaDLhMuh9np26o
zkuC68j0cb4pcdiQKtj0ZdxRGl75+NCRcO8+XxUquvCxouoVVikt/XqZmgugZpty
t7mq3pSTNcvkkpL9+UZQgPo46Oww1DJPheFpRA1b/2PBk312SQ6Uhc2iqaGf0Aqg
1xunRGtiy99DzTdfyW96TzehsNTec52Bj+wWOlJoykhpkpEmTYNwgcQ1zK9zagdt
p73r9Frqf44uzspnM5L2f4lzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGp7t5GYu
zTUSAKBwrCkRDe062CQwHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3
RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
RUMyL0I4MkE5QTFDQjg3RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUt
TnRKcU51YXl4UDhKYW9qTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAM8emQ7pi1JfseR0JytRiHXBqaKpIQbUUfYsD2Ld/sTklrQU1r6SxOaXeFgDfp
1WJWYKPc28e6FzkiePQjxg/09RiF1w6DYUx7PSl4vsQTpKoQf83yE5mDsWF1HXt0
k3vV6SUAEC7f4W410CoTGS3etvialIxW7t6CH4u786qYUaRpxYOij7Q+CyNMmC8X
3Xc8EnCv/RCvlK/5ZZ1RdCepuUENeZHMzl0m+NJn44IK6aJ31VGJA7d/x21F9+I2
B2xgDlzvvTn3/ce/tSR5PCh5IJxV1W4A3BbJsyO4YJ6kp+5poBfgtHyfWhHSghZp
tPQ4r7LBv/+vJHs6JQTS/X8T
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:37 2026 by rpki-client