
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier: MWeTo8KUCkGmrmivlDjtgshtrp7N5DpB9tSCMPrUK7A=
Subject key identifier: 5C:31:C0:9F:01:C4:AE:B8:25:C8:A0:F5:E6:B7:EC:E0:1A:9C:0C:A3
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number: 0854
Signing time: Tue 28 Jul 2026 23:43:50 +0000
Manifest this update: Tue 28 Jul 2026 23:43:49 +0000
Manifest next update: Tue 04 Aug 2026 23:43:49 +0000
Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: sAgT16LviLeEDQuB4Lwn6/Cfcubi71G5cfTUXoxsE0M=)
2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Jul 28 23:43:49 2026 GMT
Not After : Aug 4 23:43:49 2026 GMT
Subject: CN=6a693eb6-f08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:4f:fb:fd:c1:85:70:9b:d0:e6:4b:79:46:
45:00:39:ef:4d:8a:9c:12:8a:de:57:d2:ed:ad:11:
a2:e1:06:85:4a:6a:ec:4b:ea:76:46:68:10:7c:f2:
55:68:d5:71:a7:8f:fa:23:0e:11:f5:9a:9a:a1:95:
57:a6:d6:d3:ae:61:d5:6b:6a:a6:e4:5e:5f:2d:b9:
94:33:b7:c2:ba:7a:04:4f:32:a9:92:2f:69:7b:c9:
e1:fc:69:09:24:c6:43:68:3b:ae:e2:75:a8:8c:57:
87:77:ca:d2:14:09:63:2d:cf:17:3c:8f:d2:1a:7a:
e2:c9:27:b9:cc:7a:d3:eb:17:3d:8f:6b:0d:67:4d:
b6:4e:d5:df:3b:39:f5:2c:02:6a:4c:92:27:a1:22:
da:43:15:59:b5:f9:9c:05:ff:da:c9:34:f2:8e:fe:
dc:ba:2b:62:55:9e:ab:6c:9e:fc:cb:f0:bd:e2:3c:
c7:34:09:b3:38:28:df:a8:f6:75:f6:68:45:e1:3a:
14:29:4c:2d:cc:8b:06:91:53:2d:01:aa:df:7f:88:
53:2d:1c:47:a5:94:7e:3a:2f:dc:ed:c7:50:ce:8d:
1d:28:75:24:9c:70:a2:05:96:ea:a2:ad:84:64:af:
20:5f:9a:cd:f8:cf:a8:c8:0a:a4:93:02:27:71:9a:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:C0:9F:01:C4:AE:B8:25:C8:A0:F5:E6:B7:EC:E0:1A:9C:0C:A3
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:ac:29:8a:7b:6a:26:9f:bf:8b:bc:70:6a:35:04:49:ae:
2a:9c:30:65:d8:1c:49:1e:97:3c:e0:34:fd:c5:a5:6d:d2:b2:
62:4e:4f:48:20:de:d2:f5:59:e2:ce:9c:d2:6f:1d:07:b1:ce:
a1:3e:34:1b:b9:58:32:a3:3f:27:0f:19:40:9e:ae:2e:93:67:
f1:00:fd:29:64:ce:6f:eb:8a:8f:af:82:f3:d3:41:cf:59:71:
51:88:a8:ed:45:4d:10:1c:b2:54:e0:27:4f:e0:5e:fb:7d:cd:
81:5d:65:10:b3:19:14:59:25:09:d5:00:98:44:0a:07:7f:57:
9d:f8:2c:2c:39:90:b2:54:ce:7c:cf:fe:87:df:59:51:e0:fe:
be:69:22:b4:8d:65:e9:bc:ae:84:2e:95:5d:31:4e:9a:5a:3e:
f1:af:b9:7d:b8:4f:9e:a6:16:cc:40:40:e7:aa:ab:af:ee:b7:
92:e2:82:f2:89:31:74:f3:cc:5e:da:5b:1b:d0:99:d6:7d:38:
04:4f:f9:63:5b:23:c4:2c:38:be:75:1b:d9:c6:5e:ab:6c:7e:
95:7f:c5:58:85:ec:ef:80:d1:ee:73:e6:57:f9:98:9b:04:8a:
2f:60:26:4f:c3:f1:84:48:9b:05:12:a5:e4:a3:19:a2:f1:c0:
00:2f:4d:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz
NDI0MTY3NTkwHhcNMjYwNzI4MjM0MzQ5WhcNMjYwODA0MjM0MzQ5WjAYMRYwFAYD
VQQDEw02YTY5M2ViNi1mMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6KNP+/3BhXCb0OZLeUZFADnvTYqcEoreV9LtrRGi4QaFSmrsS+p2RmgQfPJV
aNVxp4/6Iw4R9ZqaoZVXptbTrmHVa2qm5F5fLbmUM7fCunoETzKpki9pe8nh/GkJ
JMZDaDuu4nWojFeHd8rSFAljLc8XPI/SGnriySe5zHrT6xc9j2sNZ022TtXfOzn1
LAJqTJInoSLaQxVZtfmcBf/ayTTyjv7cuitiVZ6rbJ78y/C94jzHNAmzOCjfqPZ1
9mhF4ToUKUwtzIsGkVMtAarff4hTLRxHpZR+Oi/c7cdQzo0dKHUknHCiBZbqoq2E
ZK8gX5rN+M+oyAqkkwIncZpf/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwxwJ8B
xK64Jcig9ea37OAanAyjMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC
QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ
N3FwQTM1WU5wUE0wSkJaMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF8msKYp7aiafv4u8cGo1BEmuKpwwZdgcSR6XPOA0/cWlbdKyYk5PSCDe0vVZ
4s6c0m8dB7HOoT40G7lYMqM/Jw8ZQJ6uLpNn8QD9KWTOb+uKj6+C89NBz1lxUYio
7UVNEByyVOAnT+Be+33NgV1lELMZFFklCdUAmEQKB39XnfgsLDmQslTOfM/+h99Z
UeD+vmkitI1l6byuhC6VXTFOmlo+8a+5fbhPnqYWzEBA56qrr+63kuKC8okxdPPM
XtpbG9CZ1n04BE/5Y1sjxCw4vnUb2cZeq2x+lX/FWIXs74DR7nPmV/mYmwSKL2Am
T8PxhEibBRKl5KMZovHAAC9NVw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:24 2026 by rpki-client