
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File: DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier: js7vCU3Ld19fkCVjKbTTh0u43HlJ52tGaomiVDhoWa4=
Subject key identifier: 42:7F:9B:01:88:DE:7F:40:E5:18:C4:20:EF:EB:B8:25:E7:E5:3A:93
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number: DD
Signing time: Mon 02 Mar 2026 14:47:59 +0000
Manifest this update: Mon 02 Mar 2026 14:47:59 +0000
Manifest next update: Mon 09 Mar 2026 14:47:59 +0000
Files and hashes: 1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: ns2g2Cs108w/2+ltl9D7V5InRvhgGZEhP1Sp4PX+InE=)
2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Validity
Not Before: Mar 2 14:47:59 2026 GMT
Not After : Mar 9 14:47:59 2026 GMT
Subject: CN=69a5a31f-d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:cc:03:1a:b7:ab:ec:b5:8d:10:c3:3f:f8:
84:a2:3a:d6:31:85:e7:3b:ca:98:e9:00:f1:0e:5a:
5f:51:2c:82:69:84:80:f6:c4:6e:ae:7f:6d:c2:88:
48:8e:d1:c1:7d:7c:eb:64:2a:99:81:85:4c:7d:a5:
98:56:dd:c8:51:4f:74:0b:7e:7c:92:3c:6f:ae:68:
aa:c8:32:ad:8d:f0:3c:eb:2f:f7:c8:e6:1b:80:5f:
98:8e:cc:ef:e5:33:57:a3:cb:2a:d5:3b:66:ed:ca:
fb:3d:14:af:c4:23:65:4e:c1:33:61:1d:71:cd:f2:
9f:b4:1a:51:53:00:3f:39:e9:5c:87:73:b9:9b:82:
d1:81:20:9d:30:fc:31:b5:d4:f4:86:d9:dc:71:3c:
76:dc:02:fa:06:3d:93:35:65:1a:81:b3:5d:c2:4b:
b5:db:5b:41:7f:f2:88:39:a8:50:3c:b6:b8:36:d5:
2a:3f:ee:dc:15:98:4d:00:f2:85:b4:10:df:02:5d:
55:cf:7b:03:e3:60:e3:ec:73:63:bf:71:30:a5:b7:
22:b7:b4:4e:59:19:d1:58:bf:c8:45:6b:25:c7:2c:
be:a4:d6:6a:fc:4a:9f:19:ea:d4:90:78:4a:2a:e6:
41:6e:9f:84:ee:ba:62:10:8c:68:bc:6d:7c:33:ab:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:9B:01:88:DE:7F:40:E5:18:C4:20:EF:EB:B8:25:E7:E5:3A:93
X509v3 Authority Key Identifier:
keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8a:a1:a9:ab:18:b2:ee:11:c2:42:88:a1:9c:13:64:2e:d5:
ec:e0:21:2e:24:88:a0:99:93:7f:12:88:62:8a:92:0b:26:47:
ae:9f:99:33:8b:18:96:d0:3b:51:c3:2d:79:9a:bc:35:27:cc:
b1:f9:1d:de:53:c3:52:9d:d9:4c:28:36:e9:bf:34:a6:82:fb:
97:c5:eb:20:03:9d:3d:ac:a1:5a:f3:bd:44:5d:b0:4e:4f:85:
3d:0e:f0:90:26:7c:b9:13:4b:92:f4:be:63:fb:b2:25:09:16:
91:38:df:df:80:ab:69:2e:8b:7a:8e:fb:72:c7:73:07:1a:81:
46:5d:ed:3a:c7:0a:4b:dd:f4:0c:ba:3d:17:b9:f3:40:c4:e2:
0e:86:69:59:5e:03:61:aa:4b:78:09:ef:90:99:eb:f9:3a:c3:
6b:8c:bd:61:64:39:cc:13:e7:ed:1b:24:6c:2c:ef:a1:5a:8e:
46:00:87:81:27:48:cc:98:20:66:96:64:9e:27:48:0d:9f:84:
51:c4:d0:4e:2e:f9:81:51:11:7f:17:e4:75:b8:1e:5b:75:53:
d5:ef:3c:e4:d6:d8:f8:27:20:a3:81:67:36:de:c0:d5:fe:4d:
6b:e2:8f:69:96:63:3d:b5:57:24:3a:df:97:1c:b9:e2:e6:75:
9b:a9:e8:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk2NzIxMTAvBgNVBAUTKDBDNjk3MENBQjlERjhFOUJEMTBFMUMzRTkxODkxQTA5
QTdFODhDMjAwHhcNMjYwMzAyMTQ0NzU5WhcNMjYwMzA5MTQ0NzU5WjAYMRYwFAYD
VQQDEw02OWE1YTMxZi1kMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4G3MAxq3q+y1jRDDP/iEojrWMYXnO8qY6QDxDlpfUSyCaYSA9sRurn9twohI
jtHBfXzrZCqZgYVMfaWYVt3IUU90C358kjxvrmiqyDKtjfA86y/3yOYbgF+Yjszv
5TNXo8sq1Ttm7cr7PRSvxCNlTsEzYR1xzfKftBpRUwA/Oelch3O5m4LRgSCdMPwx
tdT0htnccTx23AL6Bj2TNWUagbNdwku121tBf/KIOahQPLa4NtUqP+7cFZhNAPKF
tBDfAl1Vz3sD42Dj7HNjv3Ewpbcit7ROWRnRWL/IRWslxyy+pNZq/EqfGerUkHhK
KuZBbp+E7rpiEIxovG18M6tg2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ/mwGI
3n9A5RjEIO/ruCXn5TqTMB8GA1UdIwQYMBaAFAxpcMq5346b0Q4cPpGJGgmn6Iwg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi84OEFEQ0E5OENC
RUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpwdlJEaHcta1lrYUNhZm9q
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTY3Mi84OEFEQ0E5OENCRUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpw
dlJEaHcta1lrYUNhZm9qQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXIqhqasYsu4RwkKIoZwTZC7V7OAhLiSIoJmTfxKIYoqSCyZHrp+ZM4sYltA7
UcMteZq8NSfMsfkd3lPDUp3ZTCg26b80poL7l8XrIAOdPayhWvO9RF2wTk+FPQ7w
kCZ8uRNLkvS+Y/uyJQkWkTjf34CraS6Leo77csdzBxqBRl3tOscKS930DLo9F7nz
QMTiDoZpWV4DYapLeAnvkJnr+TrDa4y9YWQ5zBPn7RskbCzvoVqORgCHgSdIzJgg
ZpZknidIDZ+EUcTQTi75gVERfxfkdbgeW3VT1e885NbY+Ccgo4FnNt7A1f5Na+KP
aZZjPbVXJDrflxy54uZ1m6no8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:49 2026 by rpki-client