
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json)
Hash identifier: iJ5w0VPodH268v53IBmMactIcgcM+5O1QyYcvRfKvG8=
Subject key identifier: 63:A8:90:D6:F9:EF:D4:A3:26:13:55:73:9E:D0:3E:57:3F:7A:F3:98
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial: 03DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
Manifest number: 03D4
Signing time: Fri 17 Apr 2026 00:29:29 +0000
Manifest this update: Fri 17 Apr 2026 00:29:28 +0000
Manifest next update: Fri 24 Apr 2026 00:29:28 +0000
Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: S7737Guz7wpt68n1iM4zJsxazCqAkr9dFf0x897D+H0=)
2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: KQpsXyMxcmg1AgaWZZ/7NN+OSEaGodCj8mQ0uDG/BGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B
Validity
Not Before: Apr 17 00:29:28 2026 GMT
Not After : Apr 24 00:29:28 2026 GMT
Subject: CN=69e17ee9-3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:70:62:38:be:2d:5d:4c:67:66:c5:03:b1:
54:87:07:66:dd:d3:91:c6:1a:15:a6:1c:2d:7b:01:
57:03:20:a6:79:22:9c:9c:7e:2b:54:c0:e5:96:93:
4f:c2:72:42:67:d2:f5:dc:9a:43:41:d0:aa:3a:06:
92:19:d6:92:d5:d6:ea:57:f9:61:b3:8a:88:f5:21:
6b:65:26:dc:16:c2:22:f0:04:b6:a9:bd:87:11:2c:
48:40:87:65:e5:26:b3:64:d1:aa:1e:70:69:f0:14:
f9:89:e1:ce:86:f1:9b:d5:04:c7:a7:72:99:ac:d0:
8d:42:d2:8e:e5:df:06:38:8c:20:96:60:70:b3:60:
ca:81:3d:96:da:bc:98:e8:b3:4a:09:54:91:e9:2a:
d5:0d:c1:1f:eb:00:99:8d:2b:43:67:fc:18:e1:02:
c8:b9:72:20:92:fb:72:ec:43:ac:13:da:0d:1d:e8:
0f:5a:98:d1:46:14:48:d7:40:9c:ef:72:33:60:b7:
39:98:3d:14:3c:30:42:01:74:42:52:2c:82:97:41:
35:92:da:71:18:21:4a:ac:97:6a:6e:a2:69:4f:4e:
73:75:98:a6:1a:d7:d1:bc:28:1a:b9:d0:e5:fb:92:
de:6f:06:95:11:05:51:22:c8:cc:8b:7f:54:64:00:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:90:D6:F9:EF:D4:A3:26:13:55:73:9E:D0:3E:57:3F:7A:F3:98
X509v3 Authority Key Identifier:
keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:eb:78:e1:a4:17:16:0a:9f:8e:01:d7:61:c4:ba:13:e4:
47:eb:75:32:00:fd:c4:99:6e:69:5a:ff:97:bd:6e:2b:97:74:
6e:c1:ef:d0:5b:b9:7a:f4:45:59:08:26:52:a3:b9:09:a9:11:
83:c3:ad:9d:94:2d:34:64:f1:65:a1:ce:13:1b:35:45:47:35:
53:93:05:88:a0:4d:a2:bb:45:21:3e:e4:d1:4d:fe:3f:94:93:
73:14:73:c1:b6:46:a7:83:a1:80:da:3f:85:52:ba:12:3b:ca:
28:97:2f:96:e6:21:07:f9:e5:19:5b:94:94:4e:fd:dc:ca:66:
52:13:e7:08:c7:da:ee:69:a9:4b:cd:3f:ad:9c:a1:75:84:10:
d9:2c:eb:3b:4d:f1:a8:47:72:96:54:87:98:0c:8e:9c:43:49:
f9:11:64:d9:f4:03:e4:4d:64:40:37:be:63:b1:5c:38:0f:9e:
c9:3a:81:93:90:d6:0f:ab:02:e3:76:5d:8a:3e:0e:e8:4a:09:
f1:c8:c6:b0:70:4d:10:43:86:19:77:6c:cc:9c:12:09:e6:28:
98:31:77:11:9e:1f:de:5b:c6:ae:b0:b8:35:71:8b:2d:33:8a:
14:f9:f9:c4:7c:8a:5c:0a:eb:b6:e7:3b:06:56:1a:ac:c6:a3:
6a:1e:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:33 2026 by rpki-client