
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: hxtCwVY3uD+G96+tKjxXe8tp+AgyLD3EXuvEYOLXNls=
Subject key identifier: EE:2A:E6:0C:30:42:A0:FB:CB:0D:0D:30:D6:6B:0D:13:6C:8F:11:4E
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 016F
Signing time: Wed 29 Jul 2026 06:11:59 +0000
Manifest this update: Wed 29 Jul 2026 06:11:58 +0000
Manifest next update: Wed 05 Aug 2026 06:11:58 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: Hlt3O17N4D5Q8goq+KGpwgmWN/z+WLmFIL92JyTOeC4=)
2: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
3: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: Jul 29 06:11:58 2026 GMT
Not After : Aug 5 06:11:58 2026 GMT
Subject: CN=6a6999af-b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:3c:cc:75:41:74:a8:16:6e:f8:f3:cf:ac:
c5:26:b5:71:16:31:91:b7:03:4c:76:ab:d5:bb:32:
7b:c7:68:21:29:54:61:c7:af:6b:25:1c:c4:e6:78:
1e:61:5e:38:2e:65:9c:cb:cd:48:34:b9:97:48:66:
a4:79:22:a3:02:70:77:19:f4:6e:fe:8d:44:4b:5e:
75:d3:b7:3a:d6:2b:c6:08:b6:b3:a7:90:bd:25:eb:
6e:c2:ba:fd:fe:ad:7d:5a:a6:23:ab:54:26:16:68:
f8:c9:17:2f:61:c7:87:7a:ba:0d:e3:7f:ba:6f:b5:
67:55:0c:78:33:28:91:17:51:fb:49:0f:ef:6b:c4:
9d:0f:b8:29:55:d2:81:fd:a9:fe:7a:8e:25:f6:b5:
77:cc:96:32:71:ae:2a:c3:f3:f3:7b:19:53:8d:8f:
eb:a2:d3:57:ec:76:54:ee:db:e8:c4:92:48:8f:be:
58:27:7f:b9:36:32:9e:50:26:f5:81:1d:af:6d:f0:
2e:0d:6d:c0:95:35:3c:50:ad:2d:1d:17:47:7b:e3:
2b:36:e8:36:ca:e4:eb:06:3e:24:9e:ad:8f:81:e3:
18:9e:5b:f9:55:1b:07:60:13:40:72:0f:a2:6b:1f:
f1:67:dc:f8:d6:c0:29:c3:f6:9c:3e:cb:c1:e3:9d:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2A:E6:0C:30:42:A0:FB:CB:0D:0D:30:D6:6B:0D:13:6C:8F:11:4E
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:1f:25:52:70:93:f7:d2:88:02:1a:09:95:a7:1b:fa:31:2b:
d3:cc:1a:c8:2d:f1:e8:63:89:ee:fb:3d:d6:1c:89:26:6d:95:
e0:ee:aa:e3:88:4c:eb:89:ce:00:d4:97:b0:bb:62:a0:d8:ef:
6d:eb:62:6a:d6:62:e4:5d:16:3b:c0:5c:96:3d:fb:f1:b9:dd:
f5:29:ef:55:9b:cf:fb:e5:0a:dc:4c:7b:83:94:d1:b0:1c:8f:
12:f6:51:d0:21:a4:6a:ac:a9:d0:d2:51:d7:d5:51:a6:81:fa:
42:17:39:2c:11:63:5b:d4:28:76:46:fa:89:64:a2:5d:6e:14:
32:2e:aa:91:a7:1e:1d:8e:17:78:4d:66:57:1a:02:7b:a2:67:
cf:1f:af:05:7d:27:f7:96:a5:00:e6:08:c9:65:b6:38:61:23:
16:ca:db:17:e6:ff:bb:3f:d5:35:1a:8e:fb:c3:8b:69:b5:bb:
63:8e:e6:03:4c:84:5e:7d:f8:85:3a:56:40:fc:78:ae:9d:98:
06:80:4c:18:c0:30:df:d4:18:fa:03:d2:1e:94:2a:05:a4:df:
68:17:e6:91:c3:27:65:76:20:92:4b:7c:be:97:1a:a6:0c:87:
93:29:07:4e:85:6a:0e:1f:1e:61:7b:b1:0f:31:61:72:70:5f:
db:a0:90:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5
NDI5NTY0QzAwHhcNMjYwNzI5MDYxMTU4WhcNMjYwODA1MDYxMTU4WjAYMRYwFAYD
VQQDEw02YTY5OTlhZi1iNjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjs8zHVBdKgWbvjzz6zFJrVxFjGRtwNMdqvVuzJ7x2ghKVRhx69rJRzE5nge
YV44LmWcy81INLmXSGakeSKjAnB3GfRu/o1ES15107c61ivGCLazp5C9Jetuwrr9
/q19WqYjq1QmFmj4yRcvYceHeroN43+6b7VnVQx4MyiRF1H7SQ/va8SdD7gpVdKB
/an+eo4l9rV3zJYyca4qw/PzexlTjY/rotNX7HZU7tvoxJJIj75YJ3+5NjKeUCb1
gR2vbfAuDW3AlTU8UK0tHRdHe+MrNug2yuTrBj4knq2PgeMYnlv5VRsHYBNAcg+i
ax/xZ9z41sApw/acPsvB450qqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4q5gww
QqD7yw0NMNZrDRNsjxFOMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB
NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK
cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJh8lUnCT99KIAhoJlacb+jEr08wayC3x6GOJ7vs91hyJJm2V4O6q44hM64nO
ANSXsLtioNjvbetiatZi5F0WO8Bclj378bnd9SnvVZvP++UK3Ex7g5TRsByPEvZR
0CGkaqyp0NJR19VRpoH6Qhc5LBFjW9Qodkb6iWSiXW4UMi6qkaceHY4XeE1mVxoC
e6Jnzx+vBX0n95alAOYIyWW2OGEjFsrbF+b/uz/VNRqO+8OLabW7Y47mA0yEXn34
hTpWQPx4rp2YBoBMGMAw39QY+gPSHpQqBaTfaBfmkcMnZXYgkkt8vpcapgyHkykH
ToVqDh8eYXuxDzFhcnBf26CQJw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:45 2026 by rpki-client