
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: jQdbwOKQPf6k6GxSxE/jkKGTL1QmLwmRAbkrWcFQizI=
Subject key identifier: 78:9D:EC:26:BE:76:F8:76:86:18:76:1D:84:C8:4A:4A:CC:97:F3:FD
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 07B4
Signing time: Mon 02 Mar 2026 00:14:57 +0000
Manifest this update: Mon 02 Mar 2026 00:14:55 +0000
Manifest next update: Mon 09 Mar 2026 00:14:55 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: IpOTtwLBmBy4unTc9+8+oddPSL/aNj7bd9rRtl98Rak=)
2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Mar 2 00:14:55 2026 GMT
Not After : Mar 9 00:14:55 2026 GMT
Subject: CN=69a4d680-1932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:4c:b4:51:1b:23:89:0e:7a:d5:1c:33:2f:
0c:02:b0:ba:9a:44:b7:89:98:d5:f7:c9:81:bd:0a:
c9:b6:f1:4b:bb:2f:c0:75:45:95:35:11:c3:0e:df:
66:f3:3b:17:78:0e:26:0f:20:29:e4:cb:2e:83:72:
ec:7d:33:6f:b8:3f:d3:77:9a:d5:3d:d7:c3:2d:4e:
92:55:fa:9c:3d:d2:ea:bd:95:57:c0:6b:71:62:14:
43:cc:08:ea:1e:af:fe:3e:00:20:bc:49:6e:7c:15:
e8:43:1e:04:c1:15:73:fc:1a:9c:9c:35:16:88:27:
a2:c6:e5:75:50:83:1d:25:04:ef:12:02:1d:96:c6:
a5:f7:0f:ff:93:13:fd:f3:48:01:c3:d3:76:ff:c9:
07:01:25:b7:c5:93:f0:44:19:78:a6:20:79:15:05:
86:73:89:fb:6b:54:da:75:52:21:9d:5c:38:2c:00:
cb:a3:a9:1c:ba:f7:56:ed:e9:48:6d:69:3d:98:e3:
14:9e:e2:8c:e0:9a:01:86:ab:6f:12:b4:6e:11:b3:
96:41:59:35:cf:3a:b5:a1:95:e3:99:25:05:3e:09:
cd:fd:db:8b:5d:21:4e:8d:00:bf:e6:7b:b6:62:cd:
c6:0d:6e:f5:9e:2f:19:d9:57:14:e7:13:94:64:0c:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:EC:26:BE:76:F8:76:86:18:76:1D:84:C8:4A:4A:CC:97:F3:FD
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:18:12:8f:81:a7:56:0f:61:41:78:23:45:d2:0a:93:c5:c6:
c5:54:28:a1:21:c6:ed:d5:8e:4a:c7:9f:39:5c:d6:b4:c6:e7:
9e:3d:36:d1:53:07:7f:5a:c2:ec:49:5a:be:d5:93:2e:f5:1a:
c1:3e:2e:ea:62:be:55:6b:4f:fc:16:0b:61:9a:04:2c:8c:78:
73:ba:db:32:88:0c:0d:9c:c8:0a:45:99:60:74:c1:0a:f2:41:
d0:b6:d0:05:d3:8a:88:ce:21:31:7a:9d:67:0a:9c:3a:3b:c2:
b7:a7:82:46:0e:95:db:75:27:8b:30:f4:50:9e:a2:4c:f0:ba:
d5:de:ee:d3:2e:2d:df:c6:c6:47:34:71:95:42:a1:fa:55:46:
d6:cd:a2:82:d1:01:6b:b7:37:34:e3:ff:35:a8:22:78:1e:c9:
e4:02:56:f6:19:57:0c:99:44:89:c4:8f:1a:9e:af:b5:e0:5e:
c9:21:2e:6d:a3:f8:b0:dc:3d:36:6e:67:9e:84:ce:64:62:6b:
71:ee:f4:94:a3:11:a6:dd:84:44:96:d5:1b:45:32:57:f7:f7:
58:a5:d4:f2:3d:60:a3:e5:87:1e:5a:9e:6f:e2:2c:9a:27:0d:
73:5a:0e:ba:13:10:ad:54:71:5b:90:50:7e:7c:0a:e6:9f:1a:
02:a4:9f:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3
M0Q1QUFGM0UwHhcNMjYwMzAyMDAxNDU1WhcNMjYwMzA5MDAxNDU1WjAYMRYwFAYD
VQQDEw02OWE0ZDY4MC0xOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfRMtFEbI4kOetUcMy8MArC6mkS3iZjV98mBvQrJtvFLuy/AdUWVNRHDDt9m
8zsXeA4mDyAp5Msug3LsfTNvuD/Td5rVPdfDLU6SVfqcPdLqvZVXwGtxYhRDzAjq
Hq/+PgAgvElufBXoQx4EwRVz/BqcnDUWiCeixuV1UIMdJQTvEgIdlsal9w//kxP9
80gBw9N2/8kHASW3xZPwRBl4piB5FQWGc4n7a1TadVIhnVw4LADLo6kcuvdW7elI
bWk9mOMUnuKM4JoBhqtvErRuEbOWQVk1zzq1oZXjmSUFPgnN/duLXSFOjQC/5nu2
Ys3GDW71ni8Z2VcU5xOUZAzZeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHid7Ca+
dvh2hhh2HYTISkrMl/P9MB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB
M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzIzQy8wOTA3NDRDMjNBM0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVp
NDZ5aGgwWTlxWjV6MWFyejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvRgSj4GnVg9hQXgjRdIKk8XGxVQooSHG7dWOSsefOVzWtMbnnj020VMHf1rC
7ElavtWTLvUawT4u6mK+VWtP/BYLYZoELIx4c7rbMogMDZzICkWZYHTBCvJB0LbQ
BdOKiM4hMXqdZwqcOjvCt6eCRg6V23UnizD0UJ6iTPC61d7u0y4t38bGRzRxlUKh
+lVG1s2igtEBa7c3NOP/NagieB7J5AJW9hlXDJlEicSPGp6vteBeySEubaP4sNw9
Nm5nnoTOZGJrce70lKMRpt2ERJbVG0UyV/f3WKXU8j1go+WHHlqeb+IsmicNc1oO
uhMQrVRxW5BQfnwK5p8aAqSfTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:03 2026 by rpki-client