
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier: 2LWzjWEj3gkqWdOOMLYqA6WdM+kqbkfndsHk0ANfivQ=
Subject key identifier: 79:ED:21:BE:62:BE:4F:B0:53:90:BD:E3:A2:ED:A5:A1:BC:2C:D3:45
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0CA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number: 0C94
Signing time: Sat 28 Feb 2026 18:43:41 +0000
Manifest this update: Sat 28 Feb 2026 18:43:40 +0000
Manifest next update: Sat 07 Mar 2026 18:43:40 +0000
Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: Nyqns7M6XAC2zMFUy4agXFzgVvAIGHWrYZ/DA3Kj6V8=)
2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: lqjv5J8rcO5p6CiwoABVWW5eKfnhDo2jeB2rhQw761A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Feb 28 18:43:40 2026 GMT
Not After : Mar 7 18:43:40 2026 GMT
Subject: CN=69a3375d-4702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:98:0b:a9:d5:6c:17:8b:7c:41:f6:1d:aa:
08:7b:43:d0:f1:1c:b2:66:59:d2:14:bb:ff:1f:f1:
a7:a8:d1:11:ea:32:9c:e1:f6:35:2f:f7:88:3f:30:
a1:42:7f:9e:be:61:b0:2d:e6:77:6f:6e:35:ff:e8:
62:1d:58:00:cb:bc:da:ea:90:c0:2a:a0:8f:c1:77:
3d:11:f8:38:a0:43:c9:e6:f5:e0:47:56:7b:3f:c9:
e3:e6:7b:3b:36:f7:02:ac:f2:80:b1:d5:43:2f:d4:
b8:5f:ba:09:b1:ca:d9:3b:5b:41:8d:a7:40:7a:06:
59:af:3a:f2:b3:4a:3b:da:60:8d:fb:a8:d1:06:e7:
29:ea:a9:4f:93:e8:c0:a7:5d:c0:ea:32:30:70:c3:
1e:6f:e5:c1:9f:e6:6e:fb:c3:ce:ab:15:93:cf:c5:
ab:4c:41:df:f0:35:a0:25:98:00:2e:37:7c:9e:72:
99:d3:78:46:bc:d4:07:c1:6e:5e:a5:f0:5e:fd:7d:
df:2d:93:6e:9d:ef:d2:d8:fc:d2:dc:16:be:d7:09:
a6:79:6a:63:a1:a1:90:cd:2e:db:e2:15:d2:28:df:
a7:dc:82:48:a1:a5:5e:14:38:f4:a6:b1:d4:a6:1c:
44:03:ad:5d:f7:a3:d5:05:be:a0:bd:b1:b1:e2:af:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:21:BE:62:BE:4F:B0:53:90:BD:E3:A2:ED:A5:A1:BC:2C:D3:45
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:79:8d:7c:35:6e:0b:69:2b:a0:f8:69:8d:df:5f:20:29:3b:
22:a9:b1:37:e7:a6:7f:6a:f2:d6:59:92:42:07:b0:13:fc:1f:
55:b9:a7:ef:aa:95:b8:7d:c4:8e:64:2d:3a:1f:17:de:ac:71:
da:92:56:77:96:3e:8e:b2:4a:ce:06:98:fb:96:4b:5e:5b:be:
b0:b4:8c:98:db:a1:e8:d9:8f:72:4b:29:35:45:98:4f:95:64:
4c:27:18:00:c4:01:e3:99:00:76:3e:95:76:3e:7c:e3:29:a5:
d6:08:e9:fe:42:fb:e0:40:d7:82:20:4c:63:3b:93:5c:73:77:
49:04:0f:4b:3e:c8:ac:51:f5:64:cc:00:d7:12:a7:e0:e8:93:
11:98:a9:a3:a1:fa:a6:23:d4:70:18:82:61:b2:ec:bc:5b:d3:
0b:a4:1b:18:88:d8:59:2d:82:ae:77:f9:d7:48:a8:3d:f7:cc:
97:d0:b7:c4:44:9d:b0:24:9f:27:9b:bb:81:fc:d4:18:df:e5:
8a:fa:94:d5:48:87:5a:fa:85:ee:95:e8:29:e6:a1:31:57:5a:
c2:1d:b1:d5:ce:1b:6b:ec:6b:41:96:f8:22:89:6c:c6:f5:f8:
f3:85:36:18:3a:6b:11:ef:af:b8:59:2b:4f:8d:8e:7b:c0:44:
44:44:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:50 2026 by rpki-client