
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier: 4esiN0zu0pyU23kvFqfWGJuaTrCsDuZh3upK/0cD7JI=
Subject key identifier: EF:6F:F5:53:77:3F:3C:82:40:9E:F4:8B:37:86:91:4A:27:4F:E0:90
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number: 0695
Signing time: Sat 28 Feb 2026 22:58:23 +0000
Manifest this update: Sat 28 Feb 2026 22:58:23 +0000
Manifest next update: Sat 07 Mar 2026 22:58:23 +0000
Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: 2uzdg3ZsWtEPe6prjlXEuFwDjqlEbPxtg6jJr93+Mj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Feb 28 22:58:23 2026 GMT
Not After : Mar 7 22:58:23 2026 GMT
Subject: CN=69a3730f-0540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:f9:ff:93:ed:b8:9f:40:91:29:1d:ce:b8:
7e:79:6d:54:fc:26:8c:52:5e:00:11:3a:42:32:bd:
b5:a3:69:a8:bd:2d:93:21:fe:0d:b5:52:46:31:fb:
07:d8:b0:17:1a:07:9e:a1:5e:34:75:a5:76:4c:bf:
3a:11:16:1f:b1:60:44:e6:6e:e9:2c:1a:b7:3d:40:
48:d2:0e:ed:4e:cf:7f:21:82:69:c5:f9:3e:26:2b:
58:d3:22:b2:b8:20:1a:cc:7e:91:c3:ec:69:e5:0b:
9a:80:d1:9c:57:c3:10:36:90:4b:48:36:7c:9a:03:
cd:1f:88:32:5d:92:ee:21:67:74:e8:5c:fe:73:75:
3a:fb:c6:99:60:a2:50:bb:1b:1b:df:23:f6:ba:a9:
d6:58:8c:65:ad:f3:b0:3c:d9:90:57:9b:3f:e0:e8:
02:1b:c9:cf:59:99:a6:d9:85:82:7c:65:31:48:cf:
ce:d7:56:a3:8d:60:17:4f:f9:f6:e2:ad:56:e3:88:
78:e1:c7:93:3d:87:2d:f2:46:1a:c6:ee:c6:c2:d1:
29:d9:a0:98:23:b5:4a:00:3d:e6:20:7b:bd:2f:25:
d3:12:4f:4c:d3:50:f2:6a:1f:22:17:58:4e:f2:f1:
9c:9d:bf:dd:9d:1d:fe:ac:5f:39:98:bd:7f:73:db:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6F:F5:53:77:3F:3C:82:40:9E:F4:8B:37:86:91:4A:27:4F:E0:90
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:67:fc:80:cc:88:74:41:a0:11:b6:da:35:39:42:a0:cd:e9:
51:d9:15:50:41:2c:34:05:1d:31:75:d7:bf:ce:a0:18:f8:74:
3d:0a:90:f9:ca:e4:a5:f2:82:ec:ec:13:a7:c4:b6:04:f4:8c:
ef:9f:b1:f9:01:b1:11:38:b6:b9:97:68:82:30:83:dd:c8:5a:
49:6d:4a:00:8b:c5:7b:ff:43:68:ea:3e:24:e3:c4:82:80:07:
a4:0b:a8:fa:e0:05:fc:25:6e:1b:04:73:46:d7:f0:b0:d4:b3:
f9:58:c5:9c:ba:db:66:06:66:b9:f5:b2:b2:56:6e:39:e2:6a:
12:99:10:f4:5f:bc:d2:29:c2:fe:09:62:36:db:c0:e9:fb:19:
27:6a:18:16:a2:07:7d:cf:fd:a2:33:18:71:02:6e:33:25:98:
67:6c:90:dd:54:a8:32:2a:fa:08:f8:21:71:cb:48:b0:01:c1:
e0:0e:18:30:ad:92:60:bc:17:54:31:ca:f6:dc:63:45:82:5f:
a0:49:fe:13:a6:91:42:f7:95:f0:d8:1a:5e:ac:20:7e:22:97:
cf:46:08:cf:1d:3d:e9:f6:5a:38:1e:82:c7:9b:33:d8:88:a8:
c5:01:ab:10:e0:14:a8:88:85:ad:38:d4:8f:91:cb:16:7e:46:
03:2d:e0:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC
MUQ1ODgzNjkwHhcNMjYwMjI4MjI1ODIzWhcNMjYwMzA3MjI1ODIzWjAYMRYwFAYD
VQQDEw02OWEzNzMwZi0wNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmyL5/5PtuJ9AkSkdzrh+eW1U/CaMUl4AETpCMr21o2movS2TIf4NtVJGMfsH
2LAXGgeeoV40daV2TL86ERYfsWBE5m7pLBq3PUBI0g7tTs9/IYJpxfk+JitY0yKy
uCAazH6Rw+xp5QuagNGcV8MQNpBLSDZ8mgPNH4gyXZLuIWd06Fz+c3U6+8aZYKJQ
uxsb3yP2uqnWWIxlrfOwPNmQV5s/4OgCG8nPWZmm2YWCfGUxSM/O11ajjWAXT/n2
4q1W44h44ceTPYct8kYaxu7GwtEp2aCYI7VKAD3mIHu9LyXTEk9M01Dyah8iF1hO
8vGcnb/dnR3+rF85mL1/c9uxVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9v9VN3
PzyCQJ70izeGkUonT+CQMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2
MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O
OGJBQXBEMGZpUy14MVlnMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALGf8gMyIdEGgEbbaNTlCoM3pUdkVUEEsNAUdMXXXv86gGPh0PQqQ+crkpfKC
7OwTp8S2BPSM75+x+QGxETi2uZdogjCD3chaSW1KAIvFe/9DaOo+JOPEgoAHpAuo
+uAF/CVuGwRzRtfwsNSz+VjFnLrbZgZmufWyslZuOeJqEpkQ9F+80inC/gliNtvA
6fsZJ2oYFqIHfc/9ojMYcQJuMyWYZ2yQ3VSoMir6CPghcctIsAHB4A4YMK2SYLwX
VDHK9txjRYJfoEn+E6aRQveV8NgaXqwgfiKXz0YIzx096fZaOB6Cx5sz2IioxQGr
EOAUqIiFrTjUj5HLFn5GAy3gsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:52 2026 by rpki-client