
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier: qrHLBanVI0pPstQ2e+mOXplb0vLz2U9fe90uaoK9Co0=
Subject key identifier: B0:C8:94:30:9E:5C:94:D7:66:05:7D:C9:33:7B:77:2A:FB:DF:F3:E3
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number: 0198
Signing time: Sun 01 Mar 2026 05:11:54 +0000
Manifest this update: Sun 01 Mar 2026 05:11:54 +0000
Manifest next update: Sun 08 Mar 2026 05:11:54 +0000
Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: c4KMBWiE6evggWacg6ZSd2jGtnxRmSdyVRU/iF9uKF8=)
2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Validity
Not Before: Mar 1 05:11:54 2026 GMT
Not After : Mar 8 05:11:54 2026 GMT
Subject: CN=69a3ca9a-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:8f:bb:d2:1c:49:f9:57:fa:58:dc:e4:4a:
c7:9d:d5:a0:00:05:40:66:08:10:5b:73:a3:b4:24:
7b:57:cb:1c:92:dd:f9:ec:00:56:df:3d:55:d8:b5:
7e:18:93:9f:5f:fb:af:68:3a:5a:49:f7:92:c9:34:
eb:01:8a:db:08:4c:b1:e1:5f:53:1e:44:27:ac:6a:
8f:42:30:aa:cc:b2:42:5a:cd:1d:67:b8:27:4b:c5:
23:06:e3:6d:15:bd:c2:3c:e7:f4:09:4d:9e:94:76:
d7:10:3c:07:35:82:5e:10:a2:f8:42:ba:df:bb:30:
fd:f3:46:99:3f:0e:ae:9c:28:36:78:3f:32:e2:b8:
1d:39:3f:92:d9:98:a6:4f:1b:da:8b:f8:c0:85:99:
ea:05:cf:f7:f5:58:99:41:b9:cf:4b:54:b1:3c:97:
9e:3e:fa:40:b4:df:5d:83:a0:43:5d:36:b2:ae:60:
d2:ff:a9:bf:79:ba:81:84:a0:b7:79:fb:b2:73:ef:
de:62:04:ef:4b:a8:95:2f:a0:3d:d8:8e:81:16:4a:
7e:56:ce:73:03:da:52:a4:23:26:48:95:06:29:fb:
44:33:f2:79:81:86:19:fc:cd:58:d4:95:a5:75:27:
0b:c0:0a:25:ca:48:25:88:99:bd:43:28:96:96:ac:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:94:30:9E:5C:94:D7:66:05:7D:C9:33:7B:77:2A:FB:DF:F3:E3
X509v3 Authority Key Identifier:
keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:74:b2:c2:3e:a8:b7:6b:b2:00:78:54:e6:83:4d:ff:f0:
b0:b7:82:37:ec:4c:71:1d:3a:23:6f:56:82:09:aa:55:31:2e:
cb:80:ae:35:dd:3e:a8:6c:5c:f4:6d:89:cd:6c:81:4d:61:c3:
5d:5d:7f:62:89:47:85:48:5b:1f:d8:a3:f5:e7:8f:81:70:15:
f3:81:49:46:09:7b:82:bb:4e:38:97:85:e7:83:2e:df:35:4b:
1d:8d:aa:e9:e3:a0:7c:bc:1b:fd:1e:78:f8:dd:bc:17:2d:e1:
64:04:8f:2d:30:4c:fc:d7:3a:0e:82:93:69:9b:76:4c:db:9a:
1d:96:ff:c9:3c:09:cb:6d:8c:9e:ab:5b:cd:0e:df:2a:ac:2c:
0f:f7:60:b6:ec:6a:47:84:de:b9:d2:5b:6d:9d:30:69:c3:5f:
da:86:2e:8b:d4:4c:85:22:37:37:b9:65:09:8c:c7:61:ab:30:
63:4c:74:d1:0f:97:eb:2d:63:55:9d:bb:46:46:9f:6a:25:27:
0b:11:7b:44:3c:93:d5:18:0c:1a:9e:23:97:f2:9f:c6:46:5b:
c5:2d:77:1b:6b:86:30:d9:a8:e9:99:71:16:5d:1e:a6:e4:53:
68:8b:e6:97:c7:94:b8:b6:4b:96:aa:2f:7e:92:0f:1f:be:07:
52:48:d0:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0
NzQ3ODZEQTAwHhcNMjYwMzAxMDUxMTU0WhcNMjYwMzA4MDUxMTU0WjAYMRYwFAYD
VQQDDA02OWEzY2E5YS0xMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKGPu9IcSflX+ljc5ErHndWgAAVAZggQW3OjtCR7V8sckt357ABW3z1V2LV+
GJOfX/uvaDpaSfeSyTTrAYrbCEyx4V9THkQnrGqPQjCqzLJCWs0dZ7gnS8UjBuNt
Fb3CPOf0CU2elHbXEDwHNYJeEKL4QrrfuzD980aZPw6unCg2eD8y4rgdOT+S2Zim
Txvai/jAhZnqBc/39ViZQbnPS1SxPJeePvpAtN9dg6BDXTayrmDS/6m/ebqBhKC3
efuyc+/eYgTvS6iVL6A92I6BFkp+Vs5zA9pSpCMmSJUGKftEM/J5gYYZ/M1Y1JWl
dScLwAolykgliJm9QyiWlqwJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDIlDCe
XJTXZgV9yTN7dyr73/PjMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC
OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB
VDJROWdyOVJITjFIUjRiYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACJN0ssI+qLdrsgB4VOaDTf/wsLeCN+xMcR06I29WggmqVTEuy4CuNd0+qGxc
9G2JzWyBTWHDXV1/YolHhUhbH9ij9eePgXAV84FJRgl7grtOOJeF54Mu3zVLHY2q
6eOgfLwb/R54+N28Fy3hZASPLTBM/Nc6DoKTaZt2TNuaHZb/yTwJy22MnqtbzQ7f
KqwsD/dgtuxqR4TeudJbbZ0wacNf2oYui9RMhSI3N7llCYzHYaswY0x00Q+X6y1j
VZ27RkafaiUnCxF7RDyT1RgMGp4jl/KfxkZbxS13G2uGMNmo6ZlxFl0epuRTaIvm
l8eUuLZLlqovfpIPH74HUkjQiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:16 2026 by rpki-client