
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier: AarCXX0Go22dnANBPJ08k5YMDpJcztZM5zTlj9ySf2g=
Subject key identifier: BE:3B:46:59:C9:50:2B:06:1E:71:75:90:F1:73:89:59:B9:6D:1D:A2
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number: 01F8
Signing time: Fri 17 Apr 2026 02:56:05 +0000
Manifest this update: Fri 17 Apr 2026 02:56:04 +0000
Manifest next update: Fri 24 Apr 2026 02:56:04 +0000
Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 4GxtM2qLhEKEqZM+6gkwmdooda/EGtJ8kv/zfqayYvk=)
2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: +d//0YGkCcKL1FsuPM9/LDwxfVKY4NL0IuPYs6NjtuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Validity
Not Before: Apr 17 02:56:04 2026 GMT
Not After : Apr 24 02:56:04 2026 GMT
Subject: CN=69e1a144-60af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:f9:40:3b:f6:c9:e4:57:55:ec:89:d2:43:
24:17:d0:77:bf:d5:e2:9e:3a:6a:44:66:f1:41:76:
b7:a4:50:9c:85:8f:55:14:c1:78:53:16:02:a2:8f:
11:18:f2:94:66:8b:3a:96:7d:70:a3:81:ba:01:ff:
ce:9c:e0:f8:ec:7e:f6:65:c2:62:1b:9a:9f:e3:d5:
2a:28:3a:94:04:e6:dd:a8:03:fb:cb:30:5e:11:22:
25:95:e6:79:a9:c8:f4:6e:69:f2:18:96:da:ac:3a:
92:cb:c9:3e:2e:69:c7:68:aa:2b:a4:9f:41:a4:b7:
6f:34:5c:7a:1d:0c:c9:3f:8f:3c:f2:19:ee:64:fd:
ed:5c:ee:62:fa:11:ba:a3:3d:33:06:8e:97:ef:7a:
2e:8e:ef:c9:91:e5:27:84:a7:3f:6a:59:d4:2b:1d:
4a:f9:e3:e3:7e:57:bc:ad:42:c1:0c:49:d8:ec:a9:
47:2d:e5:ef:1f:45:47:bd:0b:0e:c4:e2:28:a9:be:
9d:9d:d1:72:11:3f:01:00:36:b0:92:f3:f8:16:f7:
aa:ce:6b:78:ba:ea:2d:53:1f:2b:90:ff:4c:06:d2:
0a:75:0b:0d:88:85:ba:23:e2:12:32:67:67:f1:5f:
1f:a4:09:c0:1d:21:5b:77:32:f2:ef:b3:4f:7d:61:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:46:59:C9:50:2B:06:1E:71:75:90:F1:73:89:59:B9:6D:1D:A2
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b1:17:3d:cc:2a:45:5a:7a:51:f9:e6:02:50:ed:67:d8:e3:
82:9d:39:78:20:ea:5e:79:25:8b:b2:f0:a3:6c:1d:eb:cb:05:
e9:76:74:e3:75:a7:5c:05:3f:57:2e:b6:b1:e7:ac:70:f8:e9:
02:d2:1f:69:7d:40:96:dd:bb:b2:8e:66:a6:3b:43:40:84:ee:
db:1b:51:7d:c4:6a:c9:66:d7:3f:d7:6e:db:f6:5f:d3:4f:80:
26:ec:5b:0c:03:b0:f2:6f:ab:a8:ce:6d:f8:84:d3:40:0f:fc:
f3:8b:74:d1:42:20:da:19:eb:7c:74:8e:b3:2b:e2:e9:52:89:
22:bc:f4:60:c7:2d:28:bf:80:48:6b:b8:90:d9:cb:8d:3e:32:
5d:ec:1b:fb:71:b5:f1:82:75:d3:30:80:23:67:71:31:1b:49:
92:b4:32:44:6a:88:39:3e:0f:b0:4c:e8:36:4d:36:b0:82:39:
fc:57:62:89:fc:b0:bd:89:5c:85:1b:58:92:15:8b:60:64:8b:
3f:17:9a:80:94:2d:16:9d:82:e5:61:c6:41:04:d7:87:17:27:
74:82:86:da:a1:b7:4b:3f:64:c8:90:14:e3:b3:c2:32:4d:92:
f6:ee:08:ac:99:ba:36:60:13:61:50:00:49:f3:a5:f4:a4:11:
03:af:6c:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF
MzA0N0U1MDcwHhcNMjYwNDE3MDI1NjA0WhcNMjYwNDI0MDI1NjA0WjAYMRYwFAYD
VQQDEw02OWUxYTE0NC02MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWb5QDv2yeRXVeyJ0kMkF9B3v9XinjpqRGbxQXa3pFCchY9VFMF4UxYCoo8R
GPKUZos6ln1wo4G6Af/OnOD47H72ZcJiG5qf49UqKDqUBObdqAP7yzBeESIlleZ5
qcj0bmnyGJbarDqSy8k+LmnHaKorpJ9BpLdvNFx6HQzJP4888hnuZP3tXO5i+hG6
oz0zBo6X73ouju/JkeUnhKc/alnUKx1K+ePjfle8rULBDEnY7KlHLeXvH0VHvQsO
xOIoqb6dndFyET8BADawkvP4Fveqzmt4uuotUx8rkP9MBtIKdQsNiIW6I+ISMmdn
8V8fpAnAHSFbdzLy77NPfWHzQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL47RlnJ
UCsGHnF1kPFziVm5bR2iMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3
RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x
cmpxeXdNS3YzUVRqQkg1UWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtLEXPcwqRVp6UfnmAlDtZ9jjgp05eCDqXnkli7Lwo2wd68sF6XZ043WnXAU/
Vy62seescPjpAtIfaX1Alt27so5mpjtDQITu2xtRfcRqyWbXP9du2/Zf00+AJuxb
DAOw8m+rqM5t+ITTQA/884t00UIg2hnrfHSOsyvi6VKJIrz0YMctKL+ASGu4kNnL
jT4yXewb+3G18YJ10zCAI2dxMRtJkrQyRGqIOT4PsEzoNk02sII5/FdiifywvYlc
hRtYkhWLYGSLPxeagJQtFp2C5WHGQQTXhxcndIKG2qG3Sz9kyJAU47PCMk2S9u4I
rJm6NmATYVAASfOl9KQRA69sRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:58 2026 by rpki-client