
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: ysLv5HacZtIXD9RiImXrdBcGW5KjLCYiODkiD9vbHVg=
Subject key identifier: AE:F4:A2:B0:AD:E3:92:AC:50:82:CF:0E:6C:27:D7:2B:3D:3E:90:31
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 0803
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 07E2
Signing time: Sat 28 Feb 2026 21:39:26 +0000
Manifest this update: Sat 28 Feb 2026 21:39:26 +0000
Manifest next update: Sat 07 Mar 2026 21:39:26 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: sUWlz/5zmDGx43EJbARvLbhxVxG7/thbE9bgoCtGrIk=)
2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=)
3: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=)
4: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=)
5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=)
6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Feb 28 21:39:26 2026 GMT
Not After : Mar 7 21:39:26 2026 GMT
Subject: CN=69a3608e-1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:0e:d2:56:29:59:66:6b:b8:a7:9d:38:0b:
0b:9d:41:2f:9a:01:f0:10:2a:44:7a:65:3f:15:30:
64:dd:99:50:15:00:b5:72:67:3f:38:42:3b:6a:8d:
9b:d4:b1:90:51:92:ef:87:f6:3e:52:2d:22:0a:65:
d2:e8:96:d4:98:93:cf:7f:9c:b8:54:23:31:88:48:
89:d5:e2:4b:92:ac:3c:e5:4e:91:09:d1:0f:0d:46:
11:c5:8c:e3:37:81:a1:db:45:e4:64:e5:6b:32:03:
90:a9:a4:d5:a7:47:ff:e5:4f:3b:31:7d:76:bf:a9:
1b:2c:1b:b1:11:31:0f:00:12:88:92:40:bf:62:aa:
6c:0c:48:24:fa:d4:f4:6b:bc:be:21:c5:d5:cb:19:
fb:2d:4e:ca:5c:0d:60:07:7e:29:16:0e:a0:b6:fd:
e9:32:d2:5d:f3:00:54:c7:87:59:a8:b8:57:c4:a4:
25:92:be:29:a3:97:74:99:b9:f1:21:46:4a:05:14:
7c:57:1f:f0:14:4b:86:80:21:ac:3f:90:12:db:09:
ea:f9:ad:c6:f0:ea:8d:14:65:77:f4:6a:4f:c9:32:
93:60:45:74:5d:f5:1f:60:23:87:e7:2a:1b:ce:2d:
d4:0b:15:51:03:f0:61:0c:d6:91:3b:31:60:a6:06:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:A2:B0:AD:E3:92:AC:50:82:CF:0E:6C:27:D7:2B:3D:3E:90:31
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c5:73:b9:6c:fb:c2:fc:ed:2d:52:cb:08:00:2e:55:0c:58:
f8:32:6e:2e:61:a1:b7:ef:44:ad:54:7c:cc:cd:79:ce:0f:ef:
da:92:40:bd:bf:6d:81:c0:cf:8f:b3:92:46:06:79:bf:a4:4c:
64:ed:c5:fb:03:b2:80:82:01:e3:f7:46:a1:b2:3b:44:e0:99:
8c:2a:ad:35:67:fb:d9:43:d3:17:4f:82:f3:ef:93:63:e5:84:
1d:cd:cc:12:64:e9:a7:ff:9e:9f:ca:3c:70:d0:23:be:61:e0:
26:27:47:f9:84:3e:e0:85:ab:6e:93:ea:77:b3:98:e3:f4:77:
61:2e:7d:c2:95:db:3a:e8:af:53:a0:ea:33:76:d8:df:fd:66:
8d:5f:cb:eb:eb:1c:43:34:bd:86:26:7b:6c:d9:61:84:dd:68:
21:af:1c:6c:c4:b3:ca:e1:19:02:05:f2:b6:97:99:af:c3:ad:
46:26:38:53:91:9a:38:71:ee:26:ba:f0:6e:49:f4:f5:90:ad:
0b:34:11:35:4d:93:38:e2:d8:14:32:57:95:ab:9f:62:55:cb:
33:1c:80:b0:a5:53:2b:1c:1f:fb:ac:c5:dc:3e:df:af:19:dd:
9c:6e:b8:6e:0f:52:30:a2:9d:89:a5:c2:2d:67:e0:b5:06:7f:
a4:5e:51:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYwMjI4MjEzOTI2WhcNMjYwMzA3MjEzOTI2WjAYMRYwFAYD
VQQDDA02OWEzNjA4ZS0xNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr1MO0lYpWWZruKedOAsLnUEvmgHwECpEemU/FTBk3ZlQFQC1cmc/OEI7ao2b
1LGQUZLvh/Y+Ui0iCmXS6JbUmJPPf5y4VCMxiEiJ1eJLkqw85U6RCdEPDUYRxYzj
N4Gh20XkZOVrMgOQqaTVp0f/5U87MX12v6kbLBuxETEPABKIkkC/YqpsDEgk+tT0
a7y+IcXVyxn7LU7KXA1gB34pFg6gtv3pMtJd8wBUx4dZqLhXxKQlkr4po5d0mbnx
IUZKBRR8Vx/wFEuGgCGsP5AS2wnq+a3G8OqNFGV39GpPyTKTYEV0XfUfYCOH5yob
zi3UCxVRA/BhDNaROzFgpgY3uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK70orCt
45KsUILPDmwn1ys9PpAxMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz
bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFcVzuWz7wvztLVLLCAAuVQxY+DJuLmGht+9ErVR8zM15zg/v2pJAvb9tgcDP
j7OSRgZ5v6RMZO3F+wOygIIB4/dGobI7ROCZjCqtNWf72UPTF0+C8++TY+WEHc3M
EmTpp/+en8o8cNAjvmHgJidH+YQ+4IWrbpPqd7OY4/R3YS59wpXbOuivU6DqM3bY
3/1mjV/L6+scQzS9hiZ7bNlhhN1oIa8cbMSzyuEZAgXytpeZr8OtRiY4U5GaOHHu
Jrrwbkn09ZCtCzQRNU2TOOLYFDJXlaufYlXLMxyAsKVTKxwf+6zF3D7frxndnG64
bg9SMKKdiaXCLWfgtQZ/pF5RiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:29 2026 by rpki-client