
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
File: dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json)
Hash identifier: 3d7RjhV7IvH8Z+vA0Z5B4KC+JTtmTBJG7ljE4TFjAJ0=
Subject key identifier: 6A:67:81:C3:28:03:D3:DE:9E:7D:30:23:FE:98:68:71:4D:62:91:8B
Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
Certificate issuer: /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
Manifest number: 5C
Signing time: Sun 01 Mar 2026 09:28:03 +0000
Manifest this update: Sun 01 Mar 2026 09:28:03 +0000
Manifest next update: Sun 08 Mar 2026 09:28:03 +0000
Files and hashes: 1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: f4lOayov8xjx/lFTqOlxNup+1XT4Fv4QgtKSXrA2i0A=)
2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: Axxx6+J8twN5fIfKmfOOFMg3aNjqRhz53eFIdguiEt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Validity
Not Before: Mar 1 09:28:03 2026 GMT
Not After : Mar 8 09:28:03 2026 GMT
Subject: CN=69a406a3-3f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:16:c5:67:4d:56:dc:1b:a3:ab:b9:d2:2f:
d4:68:ff:72:1e:ba:d7:1a:1b:b0:1d:df:6e:20:c8:
0f:96:e7:89:13:2c:64:fb:d7:65:4d:df:e5:ff:ba:
46:bd:97:a8:72:eb:9b:94:d3:a7:a6:69:01:d7:d6:
e7:cd:4a:df:86:03:ec:2a:44:5a:0b:77:49:56:b4:
fe:e5:fc:72:56:89:be:f9:7c:13:b2:2d:4b:17:fb:
b4:d9:f7:53:a5:e7:81:2c:f6:90:9b:7d:1e:07:8a:
8f:28:95:ad:6a:75:13:0b:4c:a9:d5:e4:e9:75:5d:
c7:bf:a6:18:59:79:fc:8c:ec:0e:19:13:94:d2:f8:
0f:0c:8e:d2:a1:d8:9d:e6:1e:be:8a:e8:a9:6e:1a:
a6:97:be:c5:1c:ea:87:6e:3c:45:d3:ae:ed:6f:3e:
21:11:f0:cc:ef:5d:5a:59:d9:c7:ff:f8:92:e1:10:
e3:8f:e9:b3:09:d1:67:45:c2:20:14:d4:a4:4c:81:
22:4b:ee:e6:97:93:c3:13:56:d0:c9:29:4f:38:63:
c8:21:1a:1e:1d:87:1b:6e:9c:1a:65:a3:5b:b8:cb:
d6:a1:50:33:83:6f:d2:67:b9:00:2e:0b:5e:88:8c:
30:48:4c:eb:14:65:ee:9a:a5:de:2a:e4:7b:22:41:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:81:C3:28:03:D3:DE:9E:7D:30:23:FE:98:68:71:4D:62:91:8B
X509v3 Authority Key Identifier:
keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:2b:05:5e:6f:f3:15:c7:ac:aa:58:fa:ea:03:15:97:f5:
56:66:08:5a:fe:eb:1e:68:78:13:01:49:fb:86:32:80:35:aa:
7e:ed:d6:43:a8:e3:1c:02:58:66:e9:13:6d:5e:4b:d4:13:71:
dd:b6:b6:07:4c:13:f4:54:9c:02:09:41:46:ae:04:a6:9f:41:
47:58:61:d5:b7:12:55:fa:52:75:2d:c8:bf:9c:6d:74:ad:8f:
49:89:9f:ee:41:a0:54:cb:c5:7d:42:9b:e6:05:e7:d8:5e:3e:
a3:b0:ef:99:e0:a3:a0:11:d9:53:7f:2c:d6:1c:33:b9:39:50:
5c:5c:5d:c3:9e:62:11:35:01:c9:6b:93:17:11:d9:1c:1e:e4:
a4:03:57:4f:c2:ca:10:09:1d:2a:f0:09:d1:c6:18:30:13:01:
c3:5c:c8:0c:76:6c:db:1c:c9:0a:46:7f:4e:85:f7:d0:2e:7e:
a9:b9:ce:85:13:d0:c4:a2:b2:bf:fc:8b:06:ff:54:49:ef:c8:
3c:be:4f:fd:a4:9e:2d:6f:e0:1d:36:83:d0:ac:53:c8:9a:07:
31:2d:c8:6b:ab:f5:53:fc:4f:0b:fb:32:2c:ad:fc:63:25:63:
02:2a:ed:f1:2d:aa:26:96:fc:67:03:e7:ea:9a:9e:33:68:b7:
9d:51:8f:5e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NUUxQzExMC8GA1UEBRMoNzYwNzhEMzYxOUI3QzJBRkJEREEzM0FCNTM2M0VFNUZF
RDdBODYwRDAeFw0yNjAzMDEwOTI4MDNaFw0yNjAzMDgwOTI4MDNaMBgxFjAUBgNV
BAMTDTY5YTQwNmEzLTNmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoKhbFZ01W3Bujq7nSL9Ro/3IeutcaG7Ad324gyA+W54kTLGT712VN3+X/uka9
l6hy65uU06emaQHX1ufNSt+GA+wqRFoLd0lWtP7l/HJWib75fBOyLUsX+7TZ91Ol
54Es9pCbfR4Hio8ola1qdRMLTKnV5Ol1Xce/phhZefyM7A4ZE5TS+A8MjtKh2J3m
Hr6K6KluGqaXvsUc6oduPEXTru1vPiER8MzvXVpZ2cf/+JLhEOOP6bMJ0WdFwiAU
1KRMgSJL7uaXk8MTVtDJKU84Y8ghGh4dhxtunBplo1u4y9ahUDODb9JnuQAuC16I
jDBITOsUZe6apd4q5HsiQdIbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUameBwygD
096efTAj/phocU1ikYswHwYDVR0jBBgwFoAUdgeNNhm3wq+92jOrU2PuX+16hg0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RTFDLzY0NzU4OTNBODc5
MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhn
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZGdlTk5obTN3cS05MmpPclUyUHVYLTE2aGcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1
RTFDLzY0NzU4OTNBODc5MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3Et
OTJqT3JVMlB1WC0xNmhnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVoysFXm/zFcesqlj66gMVl/VWZgha/useaHgTAUn7hjKANap+7dZDqOMcAlhm
6RNtXkvUE3HdtrYHTBP0VJwCCUFGrgSmn0FHWGHVtxJV+lJ1Lci/nG10rY9JiZ/u
QaBUy8V9QpvmBefYXj6jsO+Z4KOgEdlTfyzWHDO5OVBcXF3DnmIRNQHJa5MXEdkc
HuSkA1dPwsoQCR0q8AnRxhgwEwHDXMgMdmzbHMkKRn9OhffQLn6puc6FE9DEorK/
/IsG/1RJ78g8vk/9pJ4tb+AdNoPQrFPImgcxLchrq/VT/E8L+zIsrfxjJWMCKu3x
LaomlvxnA+fqmp4zaLedUY9e
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:28 2026 by rpki-client