
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File: kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier: NJVvSvoM0LikBgltmcyNv/r40QGCFn7bvs7Q6Wtx8LM=
Subject key identifier: 83:56:C9:B6:2D:0A:51:C5:DC:38:9E:90:7A:96:87:C7:65:CD:34:A9
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number: 01A6
Signing time: Mon 02 Mar 2026 01:29:42 +0000
Manifest this update: Mon 02 Mar 2026 01:29:40 +0000
Manifest next update: Mon 09 Mar 2026 01:29:40 +0000
Files and hashes: 1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: hdDC6UT8ZpbAU5Q/I5CjorUcfjX+IfTXk5OPSmDtuqA=)
2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: Y7CBsuQt9HIpYcN19tybRAYJs+zswt16vqxj5J0HE2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Mar 2 01:29:40 2026 GMT
Not After : Mar 9 01:29:40 2026 GMT
Subject: CN=69a4e806-1368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:9e:0d:d6:31:0d:3d:bb:eb:cf:8c:3a:7b:
c6:d2:72:e5:e1:8c:76:d5:db:5e:6e:2c:94:fb:07:
e1:89:76:df:60:a0:ef:b4:2d:32:43:08:cb:1b:ad:
35:20:84:1e:0b:53:cb:57:56:77:0b:6c:da:23:21:
af:9b:16:c9:76:56:d8:9f:cb:26:ac:cf:ef:a5:14:
26:b1:70:3e:ba:7f:e7:66:12:e9:0d:e0:77:a0:fa:
26:8c:49:b0:b7:73:e0:28:3e:fd:ad:8c:a6:ae:a7:
f5:df:7b:52:a2:23:63:68:89:67:f8:c5:5f:dd:af:
dd:e3:e2:4e:d9:49:b6:a0:ae:1a:9b:de:74:29:4e:
15:a5:32:60:93:ff:3f:0d:aa:6e:94:9a:00:d7:1a:
77:03:18:90:87:6d:2d:2f:bd:16:32:8b:1b:69:c0:
bc:c2:ed:1b:ac:85:7f:51:fc:aa:84:e4:ab:68:8f:
1a:2b:1c:15:4a:11:32:63:a7:c8:7b:7a:39:fb:5f:
1b:33:43:21:04:d8:c3:ff:f5:32:88:8f:26:f0:c6:
da:8e:4a:7e:ac:87:32:89:6b:e5:6c:e0:92:d4:09:
45:24:02:ae:59:13:33:6c:26:cf:4b:63:77:3f:7b:
db:4b:1e:45:f0:f1:31:23:21:c9:7f:e0:a0:b0:76:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:56:C9:B6:2D:0A:51:C5:DC:38:9E:90:7A:96:87:C7:65:CD:34:A9
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c4:9a:29:b6:53:92:c8:20:16:b5:c7:ff:87:87:05:33:db:
4b:3f:8f:18:7c:34:43:25:0d:e9:8d:d6:ef:39:38:24:27:97:
21:93:3d:14:27:57:62:07:41:1d:87:6a:8f:2f:77:c0:b2:77:
e9:36:20:91:8e:f4:7a:7f:9c:76:2e:bd:9f:3d:a1:2e:ae:b8:
10:36:8c:1f:44:be:16:7d:e7:f5:92:49:bf:30:47:c4:51:c5:
c8:b3:53:41:74:22:43:b5:5c:2e:6d:13:d6:bc:92:ab:15:de:
25:c9:78:55:0a:4a:96:79:21:db:8e:60:a3:b1:5f:b2:9d:02:
26:3c:9d:34:b0:f7:1c:14:3a:ec:d0:96:8c:bf:eb:09:a1:f1:
fd:a1:82:fa:cc:f2:0e:66:98:c6:75:89:bc:7a:9f:0f:aa:2e:
36:bb:24:c8:97:13:d2:c8:f1:6d:32:cc:4e:8f:cf:0e:85:4d:
41:29:b4:4c:82:82:2c:07:db:d1:ae:57:05:2c:ce:cf:c4:f2:
9a:a5:b0:5d:b7:bd:36:46:cf:5b:3b:ef:a6:69:d2:b1:6d:79:
a1:01:53:eb:2f:0f:fb:9d:fa:fa:fd:f6:2d:21:05:8d:53:82:
2f:b1:d3:57:bb:5f:d5:15:80:e4:b5:40:91:9a:3e:c0:01:ed:
87:78:02:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU3RDExMTAvBgNVBAUTKDkwMzdDMEIyOUUzNzA5MkE4Mzg1MkNFNEI4ODVCNzc2
QTdDMUUzQjYwHhcNMjYwMzAyMDEyOTQwWhcNMjYwMzA5MDEyOTQwWjAYMRYwFAYD
VQQDEw02OWE0ZTgwNi0xMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAOeDdYxDT2768+MOnvG0nLl4Yx21dtebiyU+wfhiXbfYKDvtC0yQwjLG601
IIQeC1PLV1Z3C2zaIyGvmxbJdlbYn8smrM/vpRQmsXA+un/nZhLpDeB3oPomjEmw
t3PgKD79rYymrqf133tSoiNjaIln+MVf3a/d4+JO2Um2oK4am950KU4VpTJgk/8/
DapulJoA1xp3AxiQh20tL70WMosbacC8wu0brIV/UfyqhOSraI8aKxwVShEyY6fI
e3o5+18bM0MhBNjD//UyiI8m8Mbajkp+rIcyiWvlbOCS1AlFJAKuWRMzbCbPS2N3
P3vbSx5F8PExIyHJf+CgsHZAmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINWybYt
ClHF3DiekHqWh8dlzTSpMB8GA1UdIwQYMBaAFJA3wLKeNwkqg4Us5LiFt3anweO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdEMS9GMDUzNzc5NDkz
QkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NTcURoU3prdUlXM2RxZkI0
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tEZkFzcDQzQ1NxRGhTemt1SVczZHFmQjQ3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTdEMS9GMDUzNzc5NDkzQkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NT
cURoU3prdUlXM2RxZkI0N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHMSaKbZTksggFrXH/4eHBTPbSz+PGHw0QyUN6Y3W7zk4JCeXIZM9FCdXYgdB
HYdqjy93wLJ36TYgkY70en+cdi69nz2hLq64EDaMH0S+Fn3n9ZJJvzBHxFHFyLNT
QXQiQ7VcLm0T1rySqxXeJcl4VQpKlnkh245go7Ffsp0CJjydNLD3HBQ67NCWjL/r
CaHx/aGC+szyDmaYxnWJvHqfD6ouNrskyJcT0sjxbTLMTo/PDoVNQSm0TIKCLAfb
0a5XBSzOz8TymqWwXbe9NkbPWzvvpmnSsW15oQFT6y8P+536+v32LSEFjVOCL7HT
V7tf1RWA5LVAkZo+wAHth3gCfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:04 2026 by rpki-client