
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier: wbwzc2cLZo2yNw52Ok5q6qahq0oW6MIT2Kim21Fx47c=
Subject key identifier: 1A:16:FA:8B:5C:27:9B:8D:E1:18:B7:D7:84:64:E0:25:FE:E5:40:75
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number: 62
Signing time: Sun 01 Mar 2026 09:22:40 +0000
Manifest this update: Sun 01 Mar 2026 09:22:39 +0000
Manifest next update: Sun 08 Mar 2026 09:22:39 +0000
Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: HjwWQFPsvWtUO3/ApZXQHc7RC6BJvTnjyMd8jJtTul0=)
2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: PWO0PtHR3i2A8c+n/GQz3pRYsga4DLIC1zV8n2NEh6k=)
3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: ziNsK/2lsfw71zRd+87XntBZSh13O3gDsDFh0uTxIOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: Mar 1 09:22:39 2026 GMT
Not After : Mar 8 09:22:39 2026 GMT
Subject: CN=69a4055f-2ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:a7:df:a1:79:80:f4:08:81:c6:09:a9:cd:
2c:0c:b8:ef:82:1e:3f:98:0d:7a:6c:72:6a:69:68:
42:c7:5f:6b:a5:c2:68:7d:46:44:ef:e4:19:9d:67:
ea:9c:34:b2:04:8a:d8:6a:d3:26:5a:6f:7d:d1:21:
9b:7e:4a:a0:6f:6c:1b:c6:a5:5a:2d:79:b1:19:38:
95:ba:2b:5a:2e:13:de:a1:a7:e6:af:4f:c4:66:84:
7a:31:8a:dc:ff:3e:27:fe:56:29:e4:97:88:ae:23:
7e:c0:a0:08:74:0f:f1:24:c4:c0:66:15:c6:15:dd:
f6:3a:26:cc:e1:28:72:6c:f3:d9:e4:97:90:af:dd:
65:6c:ed:9b:5e:39:d4:00:8d:8c:71:08:0b:90:fc:
96:fb:79:26:b6:f3:0d:c1:33:a7:16:47:6f:15:80:
70:93:2e:7c:bc:b4:72:38:44:9c:36:43:6a:fe:c3:
97:40:38:ac:83:fe:4b:12:2e:7d:98:37:c5:fa:34:
83:6b:88:80:20:fa:ed:74:97:e7:a2:77:d1:45:41:
15:e9:8e:a3:57:a0:43:29:cc:ff:20:a7:66:8b:e2:
af:85:28:4f:9a:6a:7c:a8:65:30:bd:c1:8c:d7:aa:
ba:52:07:c5:51:3e:83:67:62:2d:fa:14:9c:0d:d9:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:FA:8B:5C:27:9B:8D:E1:18:B7:D7:84:64:E0:25:FE:E5:40:75
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:3b:fe:7d:1c:d3:9a:aa:e2:32:24:84:96:94:ce:1f:ad:
08:f5:30:33:0b:51:f6:57:fa:13:fc:89:40:1a:1a:aa:b6:d4:
42:bd:78:ba:16:03:1e:48:a5:bf:2f:ca:b9:a8:76:bc:cb:2a:
b5:01:7a:15:20:02:c9:c4:11:ca:86:d3:a4:18:11:0f:b5:7b:
b4:af:f5:e9:c7:96:f6:7a:11:54:67:fe:c1:72:c6:91:e9:12:
36:2b:1a:e0:ef:f1:b1:bc:c2:81:cc:38:c9:85:6d:9a:09:bb:
0e:10:ba:6d:99:35:d0:75:b5:d5:e2:ed:ce:ed:d4:1a:c3:d8:
84:aa:12:d3:ef:0c:a9:95:0d:30:e4:d3:36:31:eb:e3:f8:70:
18:c8:97:cf:31:38:37:d7:21:7c:65:01:d9:44:eb:8c:4a:75:
96:ab:0a:99:61:c5:39:b5:fd:1d:86:d9:9b:d4:6c:82:06:12:
2f:d5:c1:01:bf:66:32:8e:78:57:db:a7:9e:ea:08:63:ab:44:
6c:77:51:2b:69:9f:61:20:cb:e8:ac:59:ea:99:2d:5a:ce:61:
76:0c:46:4d:c6:d6:df:43:95:ff:a9:54:34:8c:65:32:97:97:
4a:ba:a1:0b:4f:57:f7:0b:9f:9e:33:7a:98:21:da:df:5c:78:
2d:2b:af:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzNCNjExMC8GA1UEBRMoNzUxMUNCMzEzRUI4M0YxQzM5MDJBQTYzQzQzQjdBMDM2
QUNDNjMxNzAeFw0yNjAzMDEwOTIyMzlaFw0yNjAzMDgwOTIyMzlaMBgxFjAUBgNV
BAMTDTY5YTQwNTVmLTJhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfPaffoXmA9AiBxgmpzSwMuO+CHj+YDXpscmppaELHX2ulwmh9RkTv5BmdZ+qc
NLIEithq0yZab33RIZt+SqBvbBvGpVotebEZOJW6K1ouE96hp+avT8RmhHoxitz/
Pif+Vinkl4iuI37AoAh0D/EkxMBmFcYV3fY6JszhKHJs89nkl5Cv3WVs7ZteOdQA
jYxxCAuQ/Jb7eSa28w3BM6cWR28VgHCTLny8tHI4RJw2Q2r+w5dAOKyD/ksSLn2Y
N8X6NINriIAg+u10l+eid9FFQRXpjqNXoEMpzP8gp2aL4q+FKE+aanyoZTC9wYzX
qrpSB8VRPoNnYi36FJwN2V5ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGhb6i1wn
m43hGLfXhGTgJf7lQHUwHwYDVR0jBBgwFoAUdRHLMT64Pxw5AqpjxDt6A2rMYxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3M0I2LzU0ODFBRkMwODFB
QTExRjBCNENEQUQxQ0M0RjlBRTAyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZFJITE1UNjRQeHc1QXFwanhEdDZBMnJNWXhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
M0I2LzU0ODFBRkMwODFBQTExRjBCNENEQUQxQ0M0RjlBRTAyL2RSSExNVDY0UHh3
NUFxcGp4RHQ2QTJyTVl4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAHXDv+fRzTmqriMiSElpTOH60I9TAzC1H2V/oT/IlAGhqqttRCvXi6FgMeSKW/
L8q5qHa8yyq1AXoVIALJxBHKhtOkGBEPtXu0r/Xpx5b2ehFUZ/7BcsaR6RI2Kxrg
7/GxvMKBzDjJhW2aCbsOELptmTXQdbXV4u3O7dQaw9iEqhLT7wyplQ0w5NM2Mevj
+HAYyJfPMTg31yF8ZQHZROuMSnWWqwqZYcU5tf0dhtmb1GyCBhIv1cEBv2YyjnhX
26ee6ghjq0Rsd1EraZ9hIMvorFnqmS1azmF2DEZNxtbfQ5X/qVQ0jGUyl5dKuqEL
T1f3C5+eM3qYIdrfXHgtK6/X
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:33 2026 by rpki-client