
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json)
Hash identifier: ULTIQIE+uBqi+jYY0abicjSYcHUEeQKBTxnor/e6F9g=
Subject key identifier: C4:A2:DA:38:EA:04:B2:5F:84:07:68:F0:39:F1:C4:AA:C0:2E:91:00
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
Manifest number: 01A3
Signing time: Mon 02 Mar 2026 02:02:59 +0000
Manifest this update: Mon 02 Mar 2026 02:02:58 +0000
Manifest next update: Mon 09 Mar 2026 02:02:58 +0000
Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: ru6mbevH8DQguA1t8w9WtoY2VgBSiJDG+llDqjIS0Sg=)
2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: rxO58g4ckfnjnAl8Td7NyVk2cfGa6poPhda8R1ciKog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Validity
Not Before: Mar 2 02:02:58 2026 GMT
Not After : Mar 9 02:02:58 2026 GMT
Subject: CN=69a4efd3-edb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:ae:b5:dd:65:bf:9b:28:51:e4:b1:7d:12:
20:3c:1f:59:11:45:2c:a9:6e:30:b2:67:a3:9a:7d:
87:53:4f:7b:8d:3c:03:a8:01:72:d2:04:4a:67:fa:
b2:f9:d9:d6:d0:1c:c3:07:85:0e:ea:a0:43:a3:a2:
8f:f1:f4:9d:8c:0c:77:ad:30:50:04:8a:ab:29:d1:
b6:be:d5:f7:ae:0a:cd:af:70:53:6d:b7:de:12:97:
6d:bd:59:59:44:ab:7d:20:a2:a5:cf:81:2e:a4:a9:
80:e0:ce:fc:0c:db:63:e8:67:c9:ed:3b:7e:a3:b3:
ce:a9:a6:9c:d9:52:18:ac:f0:b0:ce:d5:03:a8:05:
aa:d5:c2:ad:42:4e:51:6c:73:ac:8c:c0:c0:b0:0f:
8f:c5:10:67:d1:74:57:1c:22:77:29:33:ff:9b:1f:
93:e0:68:69:ee:b7:ca:8a:89:e7:9f:82:c7:46:74:
70:08:27:be:c5:98:8a:9d:f8:77:67:f2:36:84:e0:
eb:94:16:a3:a4:77:2e:e4:2b:b4:22:65:69:3f:16:
12:bf:14:b8:be:51:78:09:d2:00:e8:8e:21:ae:cb:
e8:2f:ba:e5:1c:cb:a3:14:24:ff:25:a3:58:b1:db:
48:4c:00:a4:41:37:4f:c0:46:e5:26:c4:9f:ed:49:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:DA:38:EA:04:B2:5F:84:07:68:F0:39:F1:C4:AA:C0:2E:91:00
X509v3 Authority Key Identifier:
keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:61:3d:9c:c8:9a:91:08:a3:8e:44:7a:7f:40:2a:1b:46:
cd:70:86:b8:77:3b:d9:f5:02:e9:57:5b:27:d5:b8:39:41:16:
61:14:85:df:c4:97:57:8e:65:c1:ac:9a:ba:0f:ad:a3:80:ff:
04:97:0e:96:0d:e6:9a:df:c0:91:2c:cd:b5:64:e9:9e:ef:e8:
0e:e8:ab:ad:8d:0f:61:11:b3:63:7e:41:66:4c:a0:b8:44:1e:
52:bb:9b:0e:5b:83:20:4b:1f:5a:ef:23:c7:0f:2b:cd:df:f4:
cd:09:00:02:49:e2:80:5b:0c:42:36:49:c8:81:a0:4a:96:4d:
74:f6:5d:9a:41:3e:fb:8d:63:c4:d7:27:84:ab:41:22:4e:3a:
49:88:99:a0:37:b6:29:b7:b6:1d:da:05:17:7a:d9:3a:f7:f5:
d4:87:26:9d:02:da:d2:fd:27:c1:9a:8c:e9:97:06:96:b4:7c:
d7:c9:34:a5:e8:14:57:06:ae:86:35:f4:42:24:f3:34:87:6f:
82:c8:6d:ca:67:40:1e:b1:1a:b4:0d:a7:88:95:1a:f0:6b:d5:
2a:76:9a:f2:38:54:9f:6b:c6:f9:5c:d0:5e:2f:15:da:90:14:
49:4b:aa:88:63:da:9b:87:83:f0:c3:fd:c8:bc:e5:5c:3d:52:
ca:67:66:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1
MjgzMzEyRkMwHhcNMjYwMzAyMDIwMjU4WhcNMjYwMzA5MDIwMjU4WjAYMRYwFAYD
VQQDEw02OWE0ZWZkMy1lZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA18yutd1lv5soUeSxfRIgPB9ZEUUsqW4wsmejmn2HU097jTwDqAFy0gRKZ/qy
+dnW0BzDB4UO6qBDo6KP8fSdjAx3rTBQBIqrKdG2vtX3rgrNr3BTbbfeEpdtvVlZ
RKt9IKKlz4EupKmA4M78DNtj6GfJ7Tt+o7POqaac2VIYrPCwztUDqAWq1cKtQk5R
bHOsjMDAsA+PxRBn0XRXHCJ3KTP/mx+T4Ghp7rfKionnn4LHRnRwCCe+xZiKnfh3
Z/I2hODrlBajpHcu5Cu0ImVpPxYSvxS4vlF4CdIA6I4hrsvoL7rlHMujFCT/JaNY
sdtITACkQTdPwEblJsSf7UlWYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSi2jjq
BLJfhAdo8DnxxKrALpEAMB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3
MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp
VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJF1hPZzImpEIo45Een9AKhtGzXCGuHc72fUC6VdbJ9W4OUEWYRSF38SXV45l
wayaug+to4D/BJcOlg3mmt/AkSzNtWTpnu/oDuirrY0PYRGzY35BZkyguEQeUrub
DluDIEsfWu8jxw8rzd/0zQkAAknigFsMQjZJyIGgSpZNdPZdmkE++41jxNcnhKtB
Ik46SYiZoDe2Kbe2HdoFF3rZOvf11IcmnQLa0v0nwZqM6ZcGlrR818k0pegUVwau
hjX0QiTzNIdvgshtymdAHrEatA2niJUa8GvVKnaa8jhUn2vG+VzQXi8V2pAUSUuq
iGPam4eD8MP9yLzlXD1SymdmoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client