
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier: nVFtRSiF+YAMhRQMiiWNQARyfRJQGh+BoqIR+iM1vOs=
Subject key identifier: F6:29:4E:D0:A6:E6:FF:FF:43:40:89:D8:09:D6:AE:98:C9:A4:B9:1B
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number: 01C0
Signing time: Wed 25 Mar 2026 03:12:45 +0000
Manifest this update: Wed 25 Mar 2026 03:12:45 +0000
Manifest next update: Wed 01 Apr 2026 03:12:45 +0000
Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: Mo0SFqL3nWSV6OJ9j0UZh7TM+AvzNCYs1X30yGXEzUs=)
2: AA02862E890C11EE87862551C4F9AE02.roa (hash: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Validity
Not Before: Mar 25 03:12:45 2026 GMT
Not After : Apr 1 03:12:45 2026 GMT
Subject: CN=69c352ad-2a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:d6:75:10:f1:6a:ca:09:b4:94:17:aa:9f:
fc:37:ed:99:29:f5:f6:bc:b3:a6:14:31:b1:74:d6:
23:e4:da:ef:d2:e1:25:fe:d3:c9:74:bb:46:e2:12:
57:13:bf:3b:84:0d:45:d5:f0:74:0c:63:fe:be:1f:
5a:16:f1:d0:ec:93:89:f4:01:0b:0d:22:35:f8:56:
5a:14:f3:d5:2f:8f:50:e2:37:a1:25:d3:9d:d1:32:
d1:92:55:b0:37:66:4b:ff:f7:ab:b1:9d:bb:58:e8:
52:ad:47:e5:60:f2:bc:b6:2b:cc:6b:f4:ee:bf:ad:
e2:15:fc:9f:fa:ba:c6:eb:4d:aa:b0:62:9d:77:bb:
8e:37:61:76:f3:36:d5:3f:75:b6:e8:1b:51:51:72:
94:fd:77:53:fc:76:65:38:41:b5:85:15:42:70:64:
c2:f5:d9:21:e6:3e:b4:93:68:92:76:bf:52:e6:51:
4e:f4:ed:72:72:e7:50:47:80:58:9c:60:e5:b9:8b:
72:f0:9e:ff:ae:40:0d:26:47:f0:12:0e:7e:76:c1:
f2:99:0e:d1:c5:cf:a5:61:ad:2d:8e:77:32:ef:b0:
4a:05:a0:88:0c:44:b8:5d:d3:18:11:f6:ab:33:26:
90:58:38:ee:f7:19:ca:80:82:c5:b1:a2:3b:bc:5f:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:4E:D0:A6:E6:FF:FF:43:40:89:D8:09:D6:AE:98:C9:A4:B9:1B
X509v3 Authority Key Identifier:
keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d0:34:93:c5:85:42:e1:d5:23:af:ed:07:f0:50:92:84:21:
75:04:08:57:98:a6:47:f6:5b:e6:b1:9a:28:40:dd:ca:6e:d1:
e0:99:8d:60:a2:9c:94:cc:10:20:eb:fa:5f:08:81:6e:b6:50:
37:86:2b:fb:e2:9c:ec:27:4f:74:87:d0:82:b3:0c:b8:90:e0:
b5:21:e7:f3:26:bf:e0:60:46:f8:92:86:d6:9c:73:d5:50:41:
6d:cc:db:62:7f:17:30:73:ef:db:78:4a:5c:fa:78:d3:c1:4f:
a4:92:e9:18:0c:44:81:f0:01:6f:15:d0:5c:a3:c9:5e:33:21:
74:b4:5c:20:0b:25:9d:41:a9:70:43:2e:05:02:06:21:29:fe:
c5:1f:0e:5c:55:6f:59:0d:c3:1f:74:18:fe:e6:03:28:b5:52:
8e:4a:5f:a1:61:2c:16:dc:5e:0a:80:10:39:b1:e9:36:4d:b1:
88:28:99:ae:6e:d1:4f:9b:f2:ce:d6:b5:7a:d7:47:8f:7c:2f:
d6:94:ae:c8:c0:0b:73:5f:1f:81:49:dd:bb:a1:1e:a1:91:27:
f6:13:d9:58:6f:1d:1e:9e:70:de:4c:8a:06:4a:1b:2c:03:13:
96:a4:96:64:03:bd:19:58:40:f5:e7:58:91:7c:46:58:a9:14:
ae:66:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:05 2026 by rpki-client