
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
File: D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json)
Hash identifier: fp0tYPKd78+oHRn/Gs3z+LtpBqspAjqJbb41+GEaB+c=
Subject key identifier: F7:96:2E:D4:36:4D:4F:3C:4E:22:F8:C4:50:C9:D2:0F:27:A2:AD:59
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Certificate issuer: /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
Manifest number: 026C
Signing time: Fri 17 Apr 2026 01:56:45 +0000
Manifest this update: Fri 17 Apr 2026 01:56:45 +0000
Manifest next update: Fri 24 Apr 2026 01:56:45 +0000
Files and hashes: 1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: jY69rJcxnOmc4WyUM7aEjAmUO/liq8ApPOwF+rjkVY0=)
2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: oqs2HbQnUMYYMDR47oCqmjCl1ra9AMLnfmPG6sV1Oco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Validity
Not Before: Apr 17 01:56:45 2026 GMT
Not After : Apr 24 01:56:45 2026 GMT
Subject: CN=69e1935d-b50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:b9:1b:13:1d:74:c4:0a:fd:03:02:cb:6d:
ba:96:de:a9:69:d3:6a:b6:71:78:b5:80:da:4b:17:
89:c9:ae:8e:9c:b9:c1:ea:c0:18:bf:ca:dd:05:d2:
9f:c5:8a:d3:8d:c9:73:c2:55:6b:ae:46:2a:d0:75:
71:7c:72:87:0e:bf:f3:92:dc:c6:97:3f:46:65:12:
14:fd:2a:fa:24:1f:e5:00:03:73:18:09:98:e1:0e:
19:22:e6:0a:0e:dd:ca:cc:88:44:1a:44:13:ea:8f:
0a:0d:19:12:fe:51:83:82:75:7f:80:f4:f5:31:c7:
ec:19:b8:fa:7e:90:d0:42:ce:c5:64:54:92:07:87:
db:50:af:62:48:61:8b:50:2b:dd:c9:cb:de:68:86:
00:0f:bc:4b:12:9a:f8:80:78:96:94:8c:74:72:05:
b2:c1:9f:ae:bb:a5:c9:96:ca:d2:6d:bd:00:1d:ad:
5a:91:c2:79:76:4e:fb:49:0d:22:e7:3f:1f:40:9e:
b3:19:28:ba:4a:f0:67:be:88:8c:b6:21:b3:ee:19:
93:1d:0b:80:c8:8d:b2:7a:85:03:12:9a:ea:7a:70:
0a:db:f6:5f:c2:20:56:45:a1:11:8c:c8:fb:0a:92:
33:63:14:9b:5c:fa:25:eb:ed:9b:c2:c3:cc:1d:65:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:2E:D4:36:4D:4F:3C:4E:22:F8:C4:50:C9:D2:0F:27:A2:AD:59
X509v3 Authority Key Identifier:
keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:e6:88:68:b0:4e:9a:ec:64:e4:a1:d4:94:79:bd:27:50:
da:fd:85:98:a8:78:89:42:77:46:a4:84:a5:bd:55:0c:48:45:
09:1d:a6:f8:9f:5d:93:e8:49:95:1f:ab:27:a9:47:27:96:3d:
64:65:e9:8a:2b:7e:9b:13:fd:ca:0c:4f:8d:05:a5:6d:5b:03:
e9:d4:3f:7c:56:01:a0:27:dd:ae:0d:c1:21:48:2a:d5:3e:eb:
01:ed:86:62:58:ba:4c:10:d8:6d:5c:de:a5:ee:1d:55:f0:2d:
9f:1b:25:b8:df:5c:98:dc:38:5b:41:d8:f2:23:bf:be:03:79:
04:d0:d6:95:a6:c9:3f:f9:89:b1:0e:4a:e7:c5:fd:cf:a7:88:
2a:f4:1d:e7:16:1b:25:9c:7e:e0:8a:46:96:b7:2b:9b:79:c1:
4b:94:0f:97:6b:ec:07:b3:cc:9f:92:f1:68:6b:30:52:89:48:
81:e3:f8:1f:55:3c:fa:df:96:75:2c:72:9e:43:6d:4e:e2:d6:
e9:11:0a:6a:b0:1f:6c:ba:f3:21:0a:e7:4a:0e:1f:0e:2f:96:
09:4c:70:a6:4e:0c:95:46:74:11:e7:eb:ba:07:05:69:6c:b9:
b0:bd:e5:d1:28:6d:16:dd:72:d2:67:69:60:30:24:ff:33:c8:
25:ea:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:21 2026 by rpki-client