
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json)
Hash identifier: yiGLl/5XVYyhzxuGud4RB+y9bBRLHK0b9N9e17uKbpQ=
Subject key identifier: 29:4D:33:DB:5C:C1:27:64:5F:AB:2F:FB:A9:85:08:15:21:30:87:29
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial: 0697
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
Manifest number: 0685
Signing time: Sat 28 Feb 2026 23:04:06 +0000
Manifest this update: Sat 28 Feb 2026 23:04:06 +0000
Manifest next update: Sat 07 Mar 2026 23:04:06 +0000
Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: JoLaq8xnvU2p9CBR7GrUEHPH5TzV6OVkd19VZQVO9Ws=)
2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: 6WTlAebSNT3dRwlxKbzoaSgBI3lIZqiUGPWCDMJw06Q=)
3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 79HGgLT4UvpWXoWIU4dQI1xmx9s6FLe8XfJ4mBLvcew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Validity
Not Before: Feb 28 23:04:06 2026 GMT
Not After : Mar 7 23:04:06 2026 GMT
Subject: CN=69a37466-1449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:f7:a4:56:f5:6e:b7:59:de:3b:b4:f9:9f:
f6:16:f1:4e:22:af:09:c3:39:8b:25:22:a6:ce:f6:
1d:60:37:03:c5:31:4c:31:ed:dd:5e:06:a9:27:fc:
62:1d:6e:14:4a:cd:03:d9:04:8b:b2:e2:52:cd:6e:
95:f8:27:c1:7d:92:64:8d:6f:c0:79:99:71:86:98:
30:5d:90:ed:52:d5:df:ed:af:fb:1e:ef:6c:4b:43:
c2:04:1f:2e:74:df:56:ae:8b:78:1c:a4:e6:f2:55:
8d:78:20:a0:14:9a:23:7b:41:58:84:a7:26:54:cb:
e8:ff:34:96:47:d2:19:6a:64:9a:70:f4:de:c5:3b:
d7:1e:b3:a6:5d:b1:b2:30:f4:5e:16:77:0e:70:43:
df:50:61:f9:9a:ae:88:82:49:27:0b:8d:47:08:93:
7e:a5:68:56:d7:65:dd:46:51:a0:2a:5c:a8:65:8e:
f5:32:8d:96:6b:c1:46:34:63:ae:a3:ac:df:62:19:
57:fc:37:3b:d9:80:8b:81:58:ad:86:8c:50:30:fe:
3b:7d:73:43:d6:e3:36:28:0f:86:0d:19:a2:a4:c4:
9e:9b:95:e0:8a:77:03:b4:d9:17:b0:28:de:09:c2:
a0:a8:2a:a3:7f:68:4f:54:1d:78:c7:f2:a4:e6:e2:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:33:DB:5C:C1:27:64:5F:AB:2F:FB:A9:85:08:15:21:30:87:29
X509v3 Authority Key Identifier:
keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:a8:91:a5:f2:94:97:51:fd:4a:56:b6:35:7f:cf:2f:d5:
5e:57:d8:30:d5:c4:be:a2:49:64:25:f3:e7:c0:41:ab:03:b6:
f7:94:3d:05:b7:c7:7c:c0:7e:c1:12:a6:68:52:ae:20:6b:d7:
62:0b:15:1a:8b:39:f4:8e:3e:ca:4f:e7:fe:48:63:2c:a5:90:
f0:21:46:4f:0d:91:f7:e0:f2:8c:31:73:79:3d:e3:15:38:dd:
4a:0b:3b:4a:b1:e0:8e:70:2f:01:f0:d5:9c:17:f8:fd:9f:52:
16:93:1c:50:17:e6:3b:fc:b3:d9:4f:fd:2f:af:96:eb:47:23:
5d:e3:20:c2:9b:eb:25:e2:92:53:95:7c:50:da:a2:93:20:fb:
13:be:ef:8b:7a:45:8c:11:33:d4:8c:ed:d7:c2:c6:42:04:6e:
78:c9:43:09:4f:7f:d0:9f:aa:88:6e:1c:9f:60:24:2b:93:73:
93:cc:40:07:cc:93:4d:b1:b4:c1:b3:5b:a9:6b:7f:44:5e:33:
3e:78:21:64:31:bd:d3:fa:5b:44:09:e8:5f:0a:9c:ed:7a:95:
cf:c9:de:af:d7:e1:c9:e1:67:69:e3:01:83:d6:2b:3d:fe:29:
69:0b:48:71:f5:52:02:1b:ce:10:8e:08:b1:6b:c3:81:ec:c7:
14:9a:20:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3
RjAzOTA5NzEwHhcNMjYwMjI4MjMwNDA2WhcNMjYwMzA3MjMwNDA2WjAYMRYwFAYD
VQQDDA02OWEzNzQ2Ni0xNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZ33pFb1brdZ3ju0+Z/2FvFOIq8JwzmLJSKmzvYdYDcDxTFMMe3dXgapJ/xi
HW4USs0D2QSLsuJSzW6V+CfBfZJkjW/AeZlxhpgwXZDtUtXf7a/7Hu9sS0PCBB8u
dN9Wrot4HKTm8lWNeCCgFJoje0FYhKcmVMvo/zSWR9IZamSacPTexTvXHrOmXbGy
MPReFncOcEPfUGH5mq6IgkknC41HCJN+pWhW12XdRlGgKlyoZY71Mo2Wa8FGNGOu
o6zfYhlX/Dc72YCLgVithoxQMP47fXND1uM2KA+GDRmipMSem5XgincDtNkXsCje
CcKgqCqjf2hPVB14x/Kk5uJosQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClNM9tc
wSdkX6sv+6mFCBUhMIcpMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy
OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf
VEpLWE5qbTdaMTFfQTVDWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIL+okaXylJdR/UpWtjV/zy/VXlfYMNXEvqJJZCXz58BBqwO295Q9BbfHfMB+
wRKmaFKuIGvXYgsVGos59I4+yk/n/khjLKWQ8CFGTw2R9+DyjDFzeT3jFTjdSgs7
SrHgjnAvAfDVnBf4/Z9SFpMcUBfmO/yz2U/9L6+W60cjXeMgwpvrJeKSU5V8UNqi
kyD7E77vi3pFjBEz1Izt18LGQgRueMlDCU9/0J+qiG4cn2AkK5Nzk8xAB8yTTbG0
wbNbqWt/RF4zPnghZDG90/pbRAnoXwqc7XqVz8ner9fhyeFnaeMBg9YrPf4paQtI
cfVSAhvOEI4IsWvDgezHFJogoA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:04 2026 by rpki-client