
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json)
Hash identifier: dQedF3WbFTquUrKYhxeGWyfq/ZgzIdrQzHfZY2CQryE=
Subject key identifier: 94:0C:04:89:FA:1F:9F:5F:83:3D:A7:BC:7D:B4:61:CB:50:18:47:45
Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2
Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
Manifest number: 04F1
Signing time: Mon 02 Mar 2026 01:58:54 +0000
Manifest this update: Mon 02 Mar 2026 01:58:53 +0000
Manifest next update: Mon 09 Mar 2026 01:58:53 +0000
Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: 6EGKYVd+ABvBsLVCTIlu/VdJzNbolKVo3YgHe5wybUQ=)
2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: 5lCINEHjd8+xd6sXkjO7AtEmTBRBsLAVi/p3J3/fp6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl
rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
Validity
Not Before: Mar 2 01:58:53 2026 GMT
Not After : Mar 9 01:58:53 2026 GMT
Subject: CN=69a4eede-983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:35:2e:0d:3a:55:9e:7d:00:09:a8:0c:41:
dc:d0:3e:87:9f:b4:36:fc:98:2e:e8:66:96:50:85:
59:35:26:32:6d:37:a5:70:13:f1:58:24:44:46:b6:
ce:47:a8:bc:69:f7:4b:f6:6e:a0:ee:6d:f2:9e:1d:
d7:8e:1d:83:9d:35:76:fc:75:3d:0c:a1:eb:af:ca:
b5:e8:16:1b:e1:91:a7:9d:ac:fe:54:23:fb:c7:f3:
5e:47:99:6f:7a:72:c9:1d:52:cd:35:1d:29:8a:7b:
24:60:d8:3d:08:53:7d:f1:86:8e:50:6f:7a:45:52:
fc:35:8b:d7:19:71:cd:10:36:b1:55:df:69:b6:93:
e3:01:71:a9:14:a3:2e:12:cd:da:31:58:e2:49:a1:
5e:a5:78:e8:5c:e0:b2:80:4b:13:44:c0:91:d2:46:
83:73:a0:39:70:60:5d:a3:c7:d3:bf:89:b0:b8:5a:
51:06:03:aa:90:2b:71:d9:15:04:e3:0a:2b:1b:f7:
57:19:05:8e:61:98:2e:fd:5a:dc:e6:46:b0:90:82:
83:09:2a:b3:3e:d6:0e:7d:81:3b:8a:b7:97:a9:16:
8b:96:60:a7:d5:8e:9a:6b:95:9f:f4:03:6c:c0:16:
c2:70:b6:2d:58:81:f4:0c:74:b9:88:c8:42:26:fb:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:04:89:FA:1F:9F:5F:83:3D:A7:BC:7D:B4:61:CB:50:18:47:45
X509v3 Authority Key Identifier:
keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a3:97:58:ac:6a:29:b6:28:55:88:ed:1b:cf:b4:4f:e9:53:
45:c1:e5:23:c6:f8:bd:32:70:de:1b:18:dc:f0:59:1b:f1:a2:
84:41:c9:7f:f1:a8:ec:a3:5b:2e:9c:a2:fb:58:39:d3:aa:e4:
b1:dc:33:a9:07:f4:8e:52:e0:60:9e:cd:3b:12:ba:0c:25:cf:
cf:91:81:7e:79:0f:fb:02:f6:a2:99:12:fb:d7:f3:b7:46:7a:
c6:f0:0c:28:2f:89:93:c5:df:7c:68:80:2c:3c:0b:43:44:cc:
56:14:76:19:9a:76:c5:ca:44:bf:1d:1a:ae:44:dc:85:d2:4f:
d0:19:22:6a:47:ba:cf:38:76:7a:1c:87:83:d0:47:cb:24:0e:
a5:f2:aa:d6:6c:ea:1b:a8:c1:42:0a:2c:74:f3:d1:61:b2:a4:
7c:26:80:93:13:fd:9c:48:16:22:1f:f5:a7:34:4c:10:ca:ab:
07:b4:32:65:96:e6:0c:26:66:20:77:6f:93:52:13:2d:8b:1a:
59:33:ef:d3:bb:0d:90:9f:67:03:7c:4b:2a:4f:57:9c:fa:d2:
a8:31:c9:89:a0:dc:c4:63:af:90:5f:82:31:05:ad:52:da:7b:
4b:7e:39:68:c9:53:28:c5:af:4f:2e:c6:c2:14:ab:7a:04:22:
cd:5d:09:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB
MzYwQUQ1RTIwHhcNMjYwMzAyMDE1ODUzWhcNMjYwMzA5MDE1ODUzWjAYMRYwFAYD
VQQDEw02OWE0ZWVkZS05ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbU1Lg06VZ59AAmoDEHc0D6Hn7Q2/Jgu6GaWUIVZNSYybTelcBPxWCRERrbO
R6i8afdL9m6g7m3ynh3Xjh2DnTV2/HU9DKHrr8q16BYb4ZGnnaz+VCP7x/NeR5lv
enLJHVLNNR0pinskYNg9CFN98YaOUG96RVL8NYvXGXHNEDaxVd9ptpPjAXGpFKMu
Es3aMVjiSaFepXjoXOCygEsTRMCR0kaDc6A5cGBdo8fTv4mwuFpRBgOqkCtx2RUE
4worG/dXGQWOYZgu/Vrc5kawkIKDCSqzPtYOfYE7ireXqRaLlmCn1Y6aa5Wf9ANs
wBbCcLYtWIH0DHS5iMhCJvtAMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQMBIn6
H59fgz2nvH20YctQGEdFMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF
OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM
OHdEVHV5LXB6TktqWUsxZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnKOXWKxqKbYoVYjtG8+0T+lTRcHlI8b4vTJw3hsY3PBZG/GihEHJf/Go7KNb
Lpyi+1g506rksdwzqQf0jlLgYJ7NOxK6DCXPz5GBfnkP+wL2opkS+9fzt0Z6xvAM
KC+Jk8XffGiALDwLQ0TMVhR2GZp2xcpEvx0arkTchdJP0Bkiake6zzh2ehyHg9BH
yyQOpfKq1mzqG6jBQgosdPPRYbKkfCaAkxP9nEgWIh/1pzRMEMqrB7QyZZbmDCZm
IHdvk1ITLYsaWTPv07sNkJ9nA3xLKk9XnPrSqDHJiaDcxGOvkF+CMQWtUtp7S345
aMlTKMWvTy7GwhSregQizV0JSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:49 2026 by rpki-client