
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: ojFriZuIu/k4C+5+jJqTws08oSOU6sV2jU89M6FKclo=
Subject key identifier: 1F:F9:B3:B9:9D:F4:51:81:7B:70:E0:A1:8D:3E:9C:1C:F7:03:2C:93
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0EA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0E99
Signing time: Tue 24 Mar 2026 17:35:28 +0000
Manifest this update: Tue 24 Mar 2026 17:35:28 +0000
Manifest next update: Tue 31 Mar 2026 17:35:28 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: GjeUoZSvEj/YBCpWSt2Yy6pbWsqFnB5ChY2gnQT+dnc=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751 (0xea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Mar 24 17:35:28 2026 GMT
Not After : Mar 31 17:35:28 2026 GMT
Subject: CN=69c2cb60-bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:83:94:31:ab:40:c3:f6:d8:de:3e:89:4b:
3f:79:33:02:dc:77:e0:b3:f5:8d:54:8e:07:a0:01:
06:de:28:81:1c:d1:f5:83:fd:c8:2d:f0:82:f2:c2:
f7:79:a2:91:de:45:f0:c8:15:d3:07:dd:43:f9:9c:
ec:6c:b8:02:c3:9a:be:cf:2b:43:01:dc:15:a2:7c:
17:90:17:34:3a:11:52:e9:c9:58:a9:b7:41:cd:40:
38:47:3d:74:6d:4e:a0:cd:22:eb:b0:c6:b8:f6:7e:
60:80:5a:27:06:91:fa:42:6b:5c:df:fe:ee:9e:6d:
dc:c5:df:99:a4:5a:97:3a:7d:a7:c9:43:e2:da:d7:
1e:51:e7:55:f8:43:05:aa:28:79:fd:13:7e:1c:64:
10:ed:25:e9:ad:93:c8:42:4f:a7:77:1a:9e:0e:5b:
1f:86:04:7e:d2:fd:20:4f:bc:d8:3b:49:7d:ec:f8:
b1:f4:e0:2f:3f:80:5f:11:fa:dd:5c:d7:45:62:bd:
5b:68:46:5b:6f:03:cf:a7:4e:e2:ea:e4:ca:d6:01:
b8:44:a0:93:01:96:55:c3:33:3c:d7:2d:7d:13:bd:
15:e9:13:fb:2e:25:1b:aa:a0:df:e1:8b:75:e0:1d:
fb:4f:eb:c1:1d:60:e6:28:ac:9e:f8:25:cf:09:4c:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:B3:B9:9D:F4:51:81:7B:70:E0:A1:8D:3E:9C:1C:F7:03:2C:93
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7d:cf:dd:e0:66:d2:17:14:dc:47:b8:ec:0b:10:61:32:78:
41:82:09:d6:c4:ea:5c:de:74:df:e2:3a:48:c4:76:99:3a:53:
36:94:7f:ba:5c:31:34:53:38:22:6a:d4:65:67:47:ba:e1:8c:
15:b9:6d:17:12:7a:27:bf:52:ae:59:ce:0f:14:5c:e9:ab:f2:
2c:a4:f4:72:91:ba:31:22:6a:5c:61:79:aa:07:38:15:11:6c:
54:f4:86:3e:5b:f8:77:a4:25:66:d3:b6:22:bc:f7:62:85:a2:
db:44:84:b9:82:8f:ce:4e:4a:cf:4b:74:d0:fa:fb:b7:e3:c9:
93:bd:67:2d:fa:d3:2c:5b:e4:b7:b1:17:e6:47:3e:84:c0:c8:
42:27:e2:b1:82:5b:a6:5c:22:2c:4f:7a:31:04:d6:83:c8:e0:
a2:14:79:41:7c:2f:2a:1b:28:a9:4c:9b:fd:11:b8:e6:c9:2e:
08:3e:31:e2:eb:a5:f9:d4:a8:9b:3a:07:e0:bb:fb:8a:8b:15:
5e:36:32:14:b4:af:ae:9b:7a:da:fa:33:53:60:4c:ed:79:8a:
1d:01:fe:d5:96:a9:10:93:26:6a:e6:7d:f5:fc:4a:9f:a3:08:
87:91:31:29:59:f1:aa:08:c8:f5:6b:12:23:b2:3f:2d:33:d3:
95:62:50:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw
M0I3MkUyMzYwHhcNMjYwMzI0MTczNTI4WhcNMjYwMzMxMTczNTI4WjAYMRYwFAYD
VQQDEw02OWMyY2I2MC1iZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqL+DlDGrQMP22N4+iUs/eTMC3Hfgs/WNVI4HoAEG3iiBHNH1g/3ILfCC8sL3
eaKR3kXwyBXTB91D+ZzsbLgCw5q+zytDAdwVonwXkBc0OhFS6clYqbdBzUA4Rz10
bU6gzSLrsMa49n5ggFonBpH6Qmtc3/7unm3cxd+ZpFqXOn2nyUPi2tceUedV+EMF
qih5/RN+HGQQ7SXprZPIQk+ndxqeDlsfhgR+0v0gT7zYO0l97Pix9OAvP4BfEfrd
XNdFYr1baEZbbwPPp07i6uTK1gG4RKCTAZZVwzM81y19E70V6RP7LiUbqqDf4Yt1
4B37T+vBHWDmKKye+CXPCUzXcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/5s7md
9FGBe3DgoY0+nBz3AyyTMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF
QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD
RjBvcTBaU0J5VmNEdHk0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2H3P3eBm0hcU3Ee47AsQYTJ4QYIJ1sTqXN503+I6SMR2mTpTNpR/ulwxNFM4
ImrUZWdHuuGMFbltFxJ6J79SrlnODxRc6avyLKT0cpG6MSJqXGF5qgc4FRFsVPSG
Plv4d6QlZtO2Irz3YoWi20SEuYKPzk5Kz0t00Pr7t+PJk71nLfrTLFvkt7EX5kc+
hMDIQifisYJbplwiLE96MQTWg8jgohR5QXwvKhsoqUyb/RG45skuCD4x4uul+dSo
mzoH4Lv7iosVXjYyFLSvrpt62vozU2BM7XmKHQH+1ZapEJMmauZ99fxKn6MIh5Ex
KVnxqgjI9WsSI7I/LTPTlWJQGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:31 2026 by rpki-client