
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: cdpa/bZTi2spQNQ4uNm+p2ydKcvCXmAR62RIxFJiayg=
Subject key identifier: C4:55:39:10:AD:26:D6:B9:95:7E:0C:9C:CA:17:7C:FA:E9:57:F1:67
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 015C
Signing time: Sun 01 Mar 2026 06:06:40 +0000
Manifest this update: Sun 01 Mar 2026 06:06:39 +0000
Manifest next update: Sun 08 Mar 2026 06:06:39 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: DTMW8FT18f4Fpm6Q53YhBULnbTbIgnLmYGm3W3INths=)
2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=)
3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Mar 1 06:06:39 2026 GMT
Not After : Mar 8 06:06:39 2026 GMT
Subject: CN=69a3d770-41d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:55:7a:79:db:92:7c:00:cd:13:36:38:ff:
26:05:bf:93:8a:ff:de:38:41:e4:7c:07:1f:14:8a:
2d:05:a1:4b:b8:18:45:a9:9a:ac:fd:20:f8:1e:09:
f9:8c:a8:c6:ec:9f:b4:87:1f:d4:62:8c:c1:40:20:
70:ae:a7:1b:7c:95:fc:77:f0:63:cc:56:e0:ab:c9:
df:3c:d0:86:aa:39:8d:61:64:1f:0d:1a:94:f5:94:
f3:a5:22:d0:66:0d:89:c1:3e:12:12:2e:4e:a9:23:
98:69:5d:b2:a2:f6:4a:cd:b6:e2:d0:7d:07:08:cb:
ee:d6:6b:8c:6b:93:e4:c7:2f:db:69:0b:81:49:b7:
a5:ce:74:d5:83:03:a7:0c:4a:bb:08:f5:8a:a5:00:
43:4e:de:34:cb:04:0b:4d:9e:7a:67:a9:c7:db:8e:
1f:ca:f7:8d:11:82:74:15:ea:dc:88:f7:04:56:55:
78:1b:f1:06:35:03:b0:8d:bd:32:d6:3d:f3:85:44:
b6:13:24:84:11:72:36:ee:04:2d:6a:c5:45:77:4c:
1a:5e:9c:79:c8:44:c1:f2:3f:26:93:6b:cf:99:32:
8f:83:e7:65:36:0f:a3:08:24:a9:df:83:87:7c:ad:
66:2a:d5:e8:12:ca:ef:6c:b9:2e:f3:70:68:b5:0c:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:39:10:AD:26:D6:B9:95:7E:0C:9C:CA:17:7C:FA:E9:57:F1:67
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:53:c8:3a:fa:da:7c:36:f1:33:7f:0c:a0:f2:39:67:e4:
71:78:d0:93:39:d9:08:99:44:c3:e3:00:7e:83:3f:61:bf:52:
1f:45:7f:bd:fe:6a:39:d0:91:c4:c0:55:38:3f:ec:4a:0f:b7:
d1:98:bf:26:5a:49:3a:b8:f6:0d:55:fd:6b:82:1d:bb:3c:b3:
38:66:4b:4d:de:23:b3:23:ee:ea:b0:40:d3:c7:55:6c:eb:21:
2c:dd:05:50:01:3f:3b:c9:22:7e:dc:31:a9:8a:6f:0b:00:a3:
35:3d:8a:19:a7:72:8c:d2:d8:f4:1e:28:53:2a:7b:ac:9f:38:
2b:0e:7e:dc:d0:0b:ab:57:d2:e1:3f:0f:68:c0:d2:2a:72:7b:
4b:65:c4:04:20:b6:3b:a1:fe:db:c7:1e:ce:8f:c3:df:c2:0d:
8c:40:31:d6:b3:79:e7:8d:ed:ae:a8:2f:b0:97:4e:1f:53:28:
1f:be:b7:cd:39:3a:1f:73:02:d1:1d:69:49:1d:30:f3:cb:cc:
7c:f6:50:6a:fc:0e:08:21:b1:59:d2:b4:2e:21:17:e4:13:10:
88:2f:f0:bb:8a:b8:2a:cb:29:3c:76:18:69:1b:e9:65:38:da:
17:bd:2f:d1:cd:07:a5:74:b4:fe:9e:b9:c2:a6:3f:f0:87:3b:
8a:40:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:57 2026 by rpki-client