
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
File: dqogyiSmwuMoh20ATRMU4Rem59A.mft (raw, json)
Hash identifier: lNXR7y7CvefFx32u3YXD9Aw0cl6aBaGQ+0+yuErmM+o=
Subject key identifier: BF:C9:8B:3B:0D:6C:F4:A3:AD:DE:38:7A:18:5B:00:07:85:BA:0E:FC
Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
Manifest number: 0203
Signing time: Mon 02 Mar 2026 00:08:16 +0000
Manifest this update: Mon 02 Mar 2026 00:08:15 +0000
Manifest next update: Mon 09 Mar 2026 00:08:15 +0000
Files and hashes: 1: dqogyiSmwuMoh20ATRMU4Rem59A.crl (hash: Cnz8Z4LXBU/vq6gX1+WG1WA61eA30QGMh/IHlFjO8Eo=)
2: 7083BABC100311EE8B670F78C4F9AE02.roa (hash: +VhyB55Zh0hjkfPYwsoyjhbgme4zH5U8N6Q80trrH1M=)
3: CD576B72764E11F0AF2A2483C4F9AE02.roa (hash: xp8oBqPPhbFDyjOMgOyATx6A8Y037/rNGSRstUNJnqg=)
4: 8C8CCAC624B311EFB8698E5CC4F9AE02.roa (hash: 6Sof1TpdhjYTWEB7u11HcEXoDRL/wu1TLVx+9c5pgCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1022, serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Validity
Not Before: Mar 2 00:08:15 2026 GMT
Not After : Mar 9 00:08:15 2026 GMT
Subject: CN=69a4d4f0-4253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:0d:03:92:05:ce:cf:a5:8f:04:b6:6b:a4:
e0:a2:db:5d:81:e5:dd:18:0e:5a:2c:9e:67:82:8f:
1a:12:a0:1c:27:3a:df:26:e2:92:5c:87:ce:8d:83:
52:e0:c9:9b:5c:27:08:b5:36:ff:00:9c:db:da:6f:
58:12:25:d1:ac:a8:00:54:f2:99:95:99:6c:21:73:
82:c1:58:05:f6:53:85:c1:5c:6f:9c:98:30:de:93:
cc:a4:24:4a:b1:f4:6e:bd:1d:b6:8f:e4:3a:2f:c8:
ee:76:5c:87:c4:ba:ff:74:bc:e6:ec:80:b6:4a:f0:
0b:f4:69:34:38:23:29:56:78:c3:c0:70:82:4a:2f:
34:f6:db:f0:fa:a6:20:13:9f:4c:c0:ac:0f:32:d3:
5a:ce:c3:a3:d4:5b:14:9a:00:98:6e:50:c8:d5:f0:
e2:2b:8b:e7:39:5f:a9:b1:de:29:cc:0b:86:b0:c4:
c8:b5:2e:d2:a3:14:79:76:b5:e7:65:32:e5:22:15:
7f:d7:67:14:37:3d:86:ec:23:c0:f3:e4:ab:1e:e0:
0e:3c:af:e5:93:9a:8f:41:84:e8:74:7a:09:6d:7f:
33:cb:41:4c:d5:d6:a7:9f:f1:b6:c9:9a:82:2b:6d:
57:83:8a:44:8d:01:19:99:e3:ad:7d:f6:ec:12:b1:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:8B:3B:0D:6C:F4:A3:AD:DE:38:7A:18:5B:00:07:85:BA:0E:FC
X509v3 Authority Key Identifier:
keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:51:72:f1:ec:a4:ab:5f:45:fb:28:5c:6f:8f:37:59:f5:
59:c8:44:c6:38:9a:89:52:69:e6:0a:44:01:09:6e:31:9b:0b:
71:38:f0:17:c8:e4:2e:a9:43:b2:8d:80:95:3c:f5:04:98:35:
00:7d:55:f0:50:de:f3:cf:bd:59:10:74:84:e1:45:42:32:39:
5b:a8:ce:56:f8:eb:68:fb:88:ce:a3:93:0c:61:11:15:51:f8:
dd:ac:67:9a:ad:5a:28:e5:1c:6b:91:9f:ad:9e:ff:21:d4:b0:
d7:09:99:25:ba:34:2a:58:40:46:af:48:45:81:e8:31:21:1e:
cc:4d:18:30:90:d2:b8:d5:29:55:82:4c:33:76:6c:66:68:ab:
27:de:11:ce:6f:0d:e1:c2:d9:c2:35:25:2d:f0:39:b0:98:e3:
e1:f1:66:c2:3b:71:af:cb:61:06:4d:f2:5b:35:12:72:2e:e9:
b4:ef:d8:ef:60:6f:0f:16:e6:fa:6e:c9:f4:6c:17:49:0d:d5:
2e:d8:1e:fc:b3:66:98:d9:09:c6:b2:a9:49:dc:46:94:36:84:
1c:45:3e:12:4a:c7:25:f3:4e:57:72:10:53:9a:60:88:b8:49:
d2:1d:89:04:79:1a:4c:56:cb:32:f3:fc:aa:9d:dc:6c:38:91:
ff:26:23:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEwMjIxMTAvBgNVBAUTKDc2QUEyMENBMjRBNkMyRTMyODg3NkQwMDREMTMxNEUx
MTdBNkU3RDAwHhcNMjYwMzAyMDAwODE1WhcNMjYwMzA5MDAwODE1WjAYMRYwFAYD
VQQDEw02OWE0ZDRmMC00MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArq8NA5IFzs+ljwS2a6TgottdgeXdGA5aLJ5ngo8aEqAcJzrfJuKSXIfOjYNS
4MmbXCcItTb/AJzb2m9YEiXRrKgAVPKZlZlsIXOCwVgF9lOFwVxvnJgw3pPMpCRK
sfRuvR22j+Q6L8judlyHxLr/dLzm7IC2SvAL9Gk0OCMpVnjDwHCCSi809tvw+qYg
E59MwKwPMtNazsOj1FsUmgCYblDI1fDiK4vnOV+psd4pzAuGsMTItS7SoxR5drXn
ZTLlIhV/12cUNz2G7CPA8+SrHuAOPK/lk5qPQYTodHoJbX8zy0FM1dann/G2yZqC
K21Xg4pEjQEZmeOtffbsErGDAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/JizsN
bPSjrd44ehhbAAeFug78MB8GA1UdIwQYMBaAFHaqIMokpsLjKIdtAE0TFOEXpufQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTAyMi85Q0MwMEE0QTBG
RkUxMUVFQjYxOTJCNzZDNEY5QUUwMi9kcW9neWlTbXd1TW9oMjBBVFJNVTRSZW01
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Rxb2d5aVNtd3VNb2gyMEFUUk1VNFJlbTU5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTAyMi85Q0MwMEE0QTBGRkUxMUVFQjYxOTJCNzZDNEY5QUUwMi9kcW9neWlTbXd1
TW9oMjBBVFJNVTRSZW01OUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR7ZRcvHspKtfRfsoXG+PN1n1WchExjiaiVJp5gpEAQluMZsLcTjwF8jkLqlD
so2AlTz1BJg1AH1V8FDe88+9WRB0hOFFQjI5W6jOVvjraPuIzqOTDGERFVH43axn
mq1aKOUca5GfrZ7/IdSw1wmZJbo0KlhARq9IRYHoMSEezE0YMJDSuNUpVYJMM3Zs
ZmirJ94Rzm8N4cLZwjUlLfA5sJjj4fFmwjtxr8thBk3yWzUSci7ptO/Y72BvDxbm
+m7J9GwXSQ3VLtge/LNmmNkJxrKpSdxGlDaEHEU+EkrHJfNOV3IQU5pgiLhJ0h2J
BHkaTFbLMvP8qp3cbDiR/yYjyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:09 2026 by rpki-client