
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: 8hVSzcrf8c4ncBxOOcH8HECvyUDsJJOKz5s8vDTOKbo=
Subject key identifier: A6:AE:60:99:C0:43:F6:BF:78:41:7C:5C:34:FD:14:C8:BB:45:2C:98
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: 7F
Signing time: Fri 17 Apr 2026 07:23:32 +0000
Manifest this update: Fri 17 Apr 2026 07:23:31 +0000
Manifest next update: Fri 24 Apr 2026 07:23:31 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: RKekSwT8dH4TI2Mdxd64vErwZqpcWaCtrCFzmk2Etvc=)
2: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
3: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: Apr 17 07:23:31 2026 GMT
Not After : Apr 24 07:23:31 2026 GMT
Subject: CN=69e1dff4-20fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:48:5f:e3:53:3e:03:37:d0:cb:1e:e2:2f:
75:50:c3:16:31:cf:f5:40:57:5b:7d:90:b4:0f:6c:
83:60:b7:c3:a5:b9:f3:87:52:23:0f:37:42:8b:f5:
d6:30:78:0a:4b:d1:92:6a:b8:45:94:1e:11:8f:e7:
95:82:51:e7:4d:10:58:d3:5d:70:0c:0b:9b:04:0f:
89:e4:53:88:fa:bf:1a:3d:f8:55:20:4e:db:71:e0:
e9:8f:f7:6c:43:ff:b8:4f:a2:3f:02:4e:d5:87:16:
30:5a:7d:5e:9d:fa:89:5d:c1:88:a0:97:5b:14:06:
94:f6:3a:e2:77:ab:29:81:e1:08:79:ab:4d:ab:ee:
03:01:3f:de:a7:a7:2f:19:04:d9:e5:33:6b:77:7a:
7e:2c:3a:73:93:19:5a:c6:23:2d:ef:07:50:02:ca:
4e:5e:1a:d6:4e:46:c9:9d:ad:38:8b:6f:75:2d:64:
5c:e8:ac:a5:82:ba:a2:e3:26:f6:2d:d2:23:88:53:
a1:44:d1:f9:24:fc:8e:0e:40:4a:dd:82:75:20:11:
b0:5a:79:56:fb:18:0c:c7:52:6b:a1:b1:7e:9c:06:
96:83:cc:4d:7d:50:7a:c8:19:b1:76:ad:66:67:d6:
36:51:45:a1:42:39:e2:30:79:1d:3c:38:4a:26:48:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:60:99:C0:43:F6:BF:78:41:7C:5C:34:FD:14:C8:BB:45:2C:98
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:1a:87:b6:89:45:a8:be:90:25:1a:bd:65:ee:5f:b4:ff:4f:
b6:a0:61:fd:eb:5a:a9:48:ae:24:25:98:db:03:2f:22:98:4f:
65:dc:a6:79:a3:ef:33:ad:5d:4d:98:73:60:ed:66:9d:39:63:
39:da:c6:7c:c1:29:1e:61:19:d4:b3:a4:8c:e0:78:38:aa:ec:
f2:7f:c4:a3:d7:42:a3:72:f7:22:58:e9:4f:e8:29:9a:93:5c:
cc:24:52:dd:9f:40:34:9a:8a:7a:ea:e3:81:30:c2:53:22:d8:
c5:0c:bc:f4:e8:ca:fb:43:15:2c:d4:f5:9b:f4:e4:e5:10:5c:
77:5a:bf:1a:9c:5e:20:4b:16:c7:a1:21:3d:e6:11:dc:a1:25:
a5:90:c0:d3:5b:ed:c8:c9:f7:ba:c8:15:81:11:79:27:21:68:
07:4f:62:3c:fe:60:88:02:aa:36:4d:ee:3e:92:a2:a8:69:e8:
53:b1:62:b4:23:59:25:e5:15:04:70:9d:58:03:95:18:1e:a1:
b8:d9:df:9f:77:e8:ca:d9:19:72:fb:17:a1:df:4c:6a:ba:b0:
5c:a7:0e:ff:23:b6:40:00:ba:d5:5f:6f:09:45:04:09:7b:8a:
da:5f:6a:e6:fe:84:3d:8c:09:1e:27:a7:cc:ec:d9:6c:f6:ff:
e9:2a:8f:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD
NzdDNERCMzcwHhcNMjYwNDE3MDcyMzMxWhcNMjYwNDI0MDcyMzMxWjAYMRYwFAYD
VQQDEw02OWUxZGZmNC0yMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy89IX+NTPgM30Mse4i91UMMWMc/1QFdbfZC0D2yDYLfDpbnzh1IjDzdCi/XW
MHgKS9GSarhFlB4Rj+eVglHnTRBY011wDAubBA+J5FOI+r8aPfhVIE7bceDpj/ds
Q/+4T6I/Ak7VhxYwWn1enfqJXcGIoJdbFAaU9jrid6spgeEIeatNq+4DAT/ep6cv
GQTZ5TNrd3p+LDpzkxlaxiMt7wdQAspOXhrWTkbJna04i291LWRc6Kylgrqi4yb2
LdIjiFOhRNH5JPyODkBK3YJ1IBGwWnlW+xgMx1JrobF+nAaWg8xNfVB6yBmxdq1m
Z9Y2UUWhQjniMHkdPDhKJkjS3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKauYJnA
Q/a/eEF8XDT9FMi7RSyYMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5
OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz
S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVRqHtolFqL6QJRq9Ze5ftP9PtqBh/etaqUiuJCWY2wMvIphPZdymeaPvM61d
TZhzYO1mnTljOdrGfMEpHmEZ1LOkjOB4OKrs8n/Eo9dCo3L3IljpT+gpmpNczCRS
3Z9ANJqKeurjgTDCUyLYxQy89OjK+0MVLNT1m/Tk5RBcd1q/GpxeIEsWx6EhPeYR
3KElpZDA01vtyMn3usgVgRF5JyFoB09iPP5giAKqNk3uPpKiqGnoU7FitCNZJeUV
BHCdWAOVGB6huNnfn3foytkZcvsXod9MarqwXKcO/yO2QAC61V9vCUUECXuK2l9q
5v6EPYwJHienzOzZbPb/6SqPPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:47 2026 by rpki-client