
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: aMxd2vIiDwboVNxSo/VpDGtv6rivzpWrrX7xbjcWk4o=
Subject key identifier: DF:5A:95:99:3B:81:8C:7B:83:B5:16:22:DB:A1:E0:99:AB:56:F4:D6
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 0316
Signing time: Fri 17 Apr 2026 01:05:40 +0000
Manifest this update: Fri 17 Apr 2026 01:05:40 +0000
Manifest next update: Fri 24 Apr 2026 01:05:40 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: WmAvlxH/V70u8MD1prudWE02Tw1GXgi5nVhJ0Zb+dg0=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 9Ep6t3AG8CiRPlIf3Yv4Y03998NV9+HGAvq1KC0HiaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: Apr 17 01:05:40 2026 GMT
Not After : Apr 24 01:05:40 2026 GMT
Subject: CN=69e18764-baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:72:f8:4a:28:4a:c1:e7:83:5b:fa:0d:f9:
1e:68:a1:77:a7:c1:66:22:8f:44:81:53:8b:f1:2d:
86:72:64:17:18:85:7e:c1:20:4e:28:22:17:74:d9:
ac:ea:98:bb:ec:10:ae:2d:b8:cb:3a:52:0a:89:16:
6b:22:6c:bc:88:a3:74:25:2c:f8:c5:39:fc:fe:61:
63:bf:0a:43:8f:f1:8a:6a:73:10:c1:fb:9f:ea:e8:
18:8d:90:e1:6f:62:85:ab:de:7c:c0:1b:91:bb:b7:
40:43:2f:39:ef:1e:85:dc:e3:bf:8d:fd:88:7d:96:
31:9f:7d:8a:fa:48:c3:80:75:6e:1b:e1:ed:93:45:
e7:6b:21:26:93:9e:ec:c3:e2:29:da:76:27:5e:6b:
93:e7:ef:05:cf:1c:c5:bc:8f:92:1d:ef:ce:43:0f:
55:52:cd:2a:d6:be:4c:4c:51:4f:2c:1a:04:01:9a:
26:4e:1a:54:81:06:20:b1:60:fc:96:15:ae:54:74:
72:22:d5:62:e1:a1:74:da:48:c5:58:94:ce:80:db:
58:bd:c2:82:1b:b3:11:dd:04:74:4d:d2:1e:33:f9:
90:bf:b3:85:f2:59:ee:46:19:70:63:ff:4f:52:53:
63:f1:8d:97:77:bb:29:c7:cb:a4:22:6e:84:29:50:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:95:99:3B:81:8C:7B:83:B5:16:22:DB:A1:E0:99:AB:56:F4:D6
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:c6:94:ac:28:26:05:08:b4:20:f3:d6:3d:33:93:42:04:
a5:2b:3e:d1:60:17:33:a3:52:00:88:25:39:4f:8e:09:a0:59:
82:34:37:32:34:1c:0c:fc:78:24:f3:c4:35:06:5f:0e:3b:0c:
b0:81:30:0a:a4:cb:27:84:02:1f:1c:08:07:a8:cd:cd:32:fc:
1b:94:8c:ac:0f:4b:dc:0f:86:cb:af:81:76:df:64:b9:30:de:
02:70:a0:7a:c6:00:8c:ba:c3:53:d5:09:aa:dd:cc:ef:ee:50:
84:2b:4e:8e:00:cd:ae:7d:f2:90:a0:6a:6f:ab:1b:57:56:bc:
6e:48:b9:f4:e6:c1:f0:27:ad:2f:c6:47:d0:51:73:00:65:e5:
d6:2f:37:73:45:22:cf:c2:4d:b9:f5:55:37:a5:8c:69:64:7a:
98:1b:c8:78:21:bb:62:7e:86:c7:8a:2e:2a:bc:ac:11:4e:e8:
e7:e0:0f:8c:7d:99:a2:be:72:cd:eb:b8:3e:d5:42:57:af:06:
76:e1:39:63:b5:1e:07:96:58:62:c9:cb:2a:b0:d6:ba:97:96:
c9:62:11:c5:8d:88:40:35:78:21:d3:71:d6:f1:b3:bd:27:c3:
62:14:0d:31:6c:90:42:9e:fb:7a:cc:16:27:44:e1:c1:c3:e3:
72:cc:5c:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4
MTlENUVGMjMwHhcNMjYwNDE3MDEwNTQwWhcNMjYwNDI0MDEwNTQwWjAYMRYwFAYD
VQQDEw02OWUxODc2NC1iYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqoJy+EooSsHng1v6DfkeaKF3p8FmIo9EgVOL8S2GcmQXGIV+wSBOKCIXdNms
6pi77BCuLbjLOlIKiRZrImy8iKN0JSz4xTn8/mFjvwpDj/GKanMQwfuf6ugYjZDh
b2KFq958wBuRu7dAQy857x6F3OO/jf2IfZYxn32K+kjDgHVuG+Htk0XnayEmk57s
w+Ip2nYnXmuT5+8FzxzFvI+SHe/OQw9VUs0q1r5MTFFPLBoEAZomThpUgQYgsWD8
lhWuVHRyItVi4aF02kjFWJTOgNtYvcKCG7MR3QR0TdIeM/mQv7OF8lnuRhlwY/9P
UlNj8Y2Xd7spx8ukIm6EKVAGvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9alZk7
gYx7g7UWItuh4JmrVvTWMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy
RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h
ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACizGlKwoJgUItCDz1j0zk0IEpSs+0WAXM6NSAIglOU+OCaBZgjQ3MjQcDPx4
JPPENQZfDjsMsIEwCqTLJ4QCHxwIB6jNzTL8G5SMrA9L3A+Gy6+Bdt9kuTDeAnCg
esYAjLrDU9UJqt3M7+5QhCtOjgDNrn3ykKBqb6sbV1a8bki59ObB8CetL8ZH0FFz
AGXl1i83c0Uiz8JNufVVN6WMaWR6mBvIeCG7Yn6Gx4ouKrysEU7o5+APjH2Zor5y
zeu4PtVCV68GduE5Y7UeB5ZYYsnLKrDWupeWyWIRxY2IQDV4IdNx1vGzvSfDYhQN
MWyQQp77eswWJ0ThwcPjcsxcFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:35 2026 by rpki-client