
$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier: q+ai/07ApYJB+oE9gNcdKx9nb79IX/dudLvnszmF5LE=
Subject key identifier: 5F:21:F0:22:CA:9E:B7:5F:61:62:A3:C0:26:47:65:1C:A7:A5:B9:5A
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number: 8A
Signing time: Sun 01 Mar 2026 08:55:09 +0000
Manifest this update: Sun 01 Mar 2026 08:55:09 +0000
Manifest next update: Sun 08 Mar 2026 08:55:09 +0000
Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: urCH5ViR/wDV89rS7Akqmq++fyhVfvKYyekqGVwd5oE=)
2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Validity
Not Before: Mar 1 08:55:09 2026 GMT
Not After : Mar 8 08:55:09 2026 GMT
Subject: CN=69a3feed-fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:1a:78:30:73:93:9f:bc:52:30:ee:b3:cc:
fb:d5:59:29:52:d5:90:dd:6e:e0:f3:a4:75:be:df:
fc:73:6f:d4:50:33:23:3b:55:5a:16:e1:b2:82:c4:
98:d6:c7:eb:d0:47:a9:5b:89:fe:67:e2:e6:1d:60:
cc:27:53:fb:6f:43:47:18:83:d4:32:eb:8e:7a:7e:
ce:69:d7:ff:43:a1:60:f2:dc:95:f2:db:aa:c5:e9:
5f:ee:5d:8d:8a:9d:1a:c7:7a:1c:c5:15:a1:76:c0:
cf:5b:b9:7e:2e:30:05:d9:1c:6e:8f:9a:08:73:a8:
0c:bb:29:57:18:6c:d0:77:be:c0:b8:d1:43:47:2f:
47:da:f9:1f:e7:9f:55:bb:24:fe:27:be:11:dc:6c:
bf:58:6e:23:8a:c4:23:27:a9:15:ac:31:ac:f5:0e:
7f:03:14:0d:24:ec:15:7a:ae:ae:b9:9e:cc:25:86:
1c:3f:f9:ae:d4:70:0c:78:03:32:6e:0c:f8:b3:6b:
e1:92:50:db:30:ee:75:fd:e4:bd:6b:74:b1:5a:ab:
c6:c7:02:57:34:1a:fa:dc:55:7e:68:49:8d:6a:b4:
e6:30:5d:e6:9b:2e:d7:41:8e:5a:43:0a:69:9d:50:
17:3f:d0:2b:db:d3:de:72:d9:6e:d9:da:43:4f:7b:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:F0:22:CA:9E:B7:5F:61:62:A3:C0:26:47:65:1C:A7:A5:B9:5A
X509v3 Authority Key Identifier:
keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:67:00:e8:f3:dd:20:6e:89:45:fb:90:a2:ce:07:27:2f:0e:
c1:d4:23:5f:70:ef:5f:a6:a4:ef:c8:db:e5:24:03:f4:c2:59:
d4:0d:b7:99:41:a1:db:95:32:b1:ee:fe:84:73:72:17:10:7c:
1a:62:c5:2f:1f:13:5e:14:d3:aa:2b:59:a9:83:3b:c0:ca:7b:
9f:6d:d2:29:7a:6a:49:cc:f2:ba:1e:04:64:f6:71:d5:11:83:
f1:e8:42:cd:c8:3f:8f:89:e3:7f:9f:ea:04:dd:fa:9b:d1:6c:
9b:9f:d8:83:b2:64:41:22:12:35:ef:77:77:1a:9d:e8:dc:f4:
49:68:21:9b:29:97:73:13:3d:7f:42:1d:02:9e:19:ed:1a:3c:
a8:d1:91:57:74:31:82:1f:0e:19:d8:e9:d3:bf:4c:8f:ad:25:
1b:ff:2a:bd:89:6e:37:b9:f0:75:74:13:7f:76:4f:c5:87:59:
cd:8b:89:25:89:7c:c3:c8:a0:01:07:96:bc:1c:73:47:5d:01:
0a:0a:e1:6e:9c:3b:20:ce:78:c3:73:e3:80:6e:0f:4f:6f:a5:
ce:c0:5e:c1:03:36:e8:eb:15:90:7c:75:e7:b7:78:5b:7f:a3:
8d:83:a5:51:fc:65:b2:19:61:ce:ca:ae:82:62:44:5d:a5:57:
f7:13:d9:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ5QzIxMTAvBgNVBAUTKDc0RENFQUE4NTA2QTJCMzI3Rjg3QTQyRDA3NDFBQzM2
RUVERUVCNDkwHhcNMjYwMzAxMDg1NTA5WhcNMjYwMzA4MDg1NTA5WjAYMRYwFAYD
VQQDEw02OWEzZmVlZC1mYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6YaeDBzk5+8UjDus8z71VkpUtWQ3W7g86R1vt/8c2/UUDMjO1VaFuGygsSY
1sfr0EepW4n+Z+LmHWDMJ1P7b0NHGIPUMuuOen7Oadf/Q6Fg8tyV8tuqxelf7l2N
ip0ax3ocxRWhdsDPW7l+LjAF2Rxuj5oIc6gMuylXGGzQd77AuNFDRy9H2vkf559V
uyT+J74R3Gy/WG4jisQjJ6kVrDGs9Q5/AxQNJOwVeq6uuZ7MJYYcP/mu1HAMeAMy
bgz4s2vhklDbMO51/eS9a3SxWqvGxwJXNBr63FV+aEmNarTmMF3mmy7XQY5aQwpp
nVAXP9Ar29Pectlu2dpDT3v78wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8h8CLK
nrdfYWKjwCZHZRynpblaMB8GA1UdIwQYMBaAFHTc6qhQaisyf4ekLQdBrDbu3utJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDlDMi9FM0EzREVFNjQ4
QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6Sl9oNlF0QjBHc051N2U2
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6
Sl9oNlF0QjBHc051N2U2MGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq2cA6PPdIG6JRfuQos4HJy8OwdQjX3DvX6ak78jb5SQD9MJZ1A23mUGh25Uy
se7+hHNyFxB8GmLFLx8TXhTTqitZqYM7wMp7n23SKXpqSczyuh4EZPZx1RGD8ehC
zcg/j4njf5/qBN36m9Fsm5/Yg7JkQSISNe93dxqd6Nz0SWghmymXcxM9f0IdAp4Z
7Ro8qNGRV3Qxgh8OGdjp079Mj60lG/8qvYluN7nwdXQTf3ZPxYdZzYuJJYl8w8ig
AQeWvBxzR10BCgrhbpw7IM54w3PjgG4PT2+lzsBewQM26OsVkHx157d4W3+jjYOl
UfxlshlhzsqugmJEXaVX9xPZHw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:16 2026 by rpki-client