
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: 4ZgaEjZXJVnt+WRUHfDGInViT5AEBniujq3jTsxaPp8=
Subject key identifier: 09:E2:DE:A9:27:DA:B9:EE:67:8C:90:0E:AF:FC:4E:53:BD:07:0E:34
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 0555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 0547
Signing time: Tue 24 Mar 2026 23:08:50 +0000
Manifest this update: Tue 24 Mar 2026 23:08:49 +0000
Manifest next update: Tue 31 Mar 2026 23:08:49 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: YwMlOGL8AbpBWpHGpsBUM7WVdcxcv4Y5RN4GcHO6Iew=)
2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: 75CbdDwNCWQEjQ03UFogZFfSqok6CR6FUiRcyE5DSoo=)
3: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: tLjCQlI7Nt4pCiyekgwVx4n0ETrIFxx2K/3Ou8miGZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: Mar 24 23:08:49 2026 GMT
Not After : Mar 31 23:08:49 2026 GMT
Subject: CN=69c31982-cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:0e:6e:ff:20:e0:49:54:f7:78:66:98:2f:
2d:d7:c3:ae:fc:82:69:31:7f:f6:ba:9b:78:9b:e1:
ee:0c:6f:60:61:65:87:6e:d8:38:1d:99:e5:1b:58:
d6:0c:29:fd:c8:ff:ba:96:33:ae:aa:c1:04:04:74:
86:cf:50:28:17:e5:08:09:dc:6b:d0:fc:61:2e:97:
3f:8c:83:71:45:a0:3f:c4:e6:7a:14:d7:dd:5d:07:
d9:77:84:78:fe:57:ed:ea:9d:79:98:81:51:27:31:
ef:b8:77:e4:11:3c:32:d2:d5:ad:1e:a8:70:ce:51:
9a:65:27:ac:9f:b8:a9:40:7d:1f:6b:bb:49:b5:0a:
44:b1:fd:63:02:6f:55:54:ac:81:d3:dd:a0:19:93:
1d:b6:cc:99:29:45:5a:92:1c:7f:47:04:0c:57:16:
31:25:1d:aa:a8:d8:f8:54:b6:ab:96:cd:bf:a9:e6:
a6:f0:20:57:e1:92:aa:a0:ee:79:aa:c7:1a:1a:a0:
c6:6c:ef:ad:f9:dc:10:b8:63:95:f8:30:9d:cd:31:
d5:51:cd:b0:fa:8a:ce:43:e0:c4:5d:19:6a:09:1f:
c1:67:1b:3a:3b:70:84:f6:29:c4:fb:79:58:92:25:
99:ce:9d:29:55:d9:d2:3c:e3:84:a6:18:dc:a9:d3:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:DE:A9:27:DA:B9:EE:67:8C:90:0E:AF:FC:4E:53:BD:07:0E:34
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6b:e8:39:cd:94:48:7f:02:44:e1:8e:3a:93:f2:36:5f:cb:
d5:11:5b:8b:07:e0:89:b9:3b:9b:ad:1f:55:3d:33:fe:68:93:
07:93:fe:99:50:66:bf:20:ed:89:be:4f:e4:58:d8:66:09:c8:
3c:f1:fc:4d:73:d0:02:66:78:2e:9d:6a:83:e8:e2:95:49:81:
dd:3f:77:ed:4a:1e:ef:cf:35:76:72:7c:c4:ab:7a:64:65:24:
cb:ea:2d:7b:22:ba:42:d2:7a:55:35:06:6a:e9:89:d4:29:3d:
6f:19:1d:f4:8d:e8:7c:34:08:af:d7:33:fa:e3:81:cc:78:78:
f8:cc:6c:cc:7b:5e:25:40:1c:b0:dc:15:43:b1:d6:a4:ae:f1:
49:7d:84:5a:b6:f9:29:b2:4e:6f:28:a8:8e:44:ed:bf:c3:1c:
f0:d7:2d:25:b2:43:3f:97:1c:81:10:18:9e:58:64:66:45:a4:
1d:76:c3:06:a6:4a:35:c6:14:74:ec:52:4b:09:d3:a4:1b:fd:
50:d0:74:d8:8f:b7:95:65:ea:f4:a6:3d:17:06:ea:7f:8b:bd:
bd:18:a4:3c:94:b8:43:e2:db:6e:44:f8:33:4c:6c:07:ab:64:
a6:9b:b5:f7:e2:17:db:26:c6:91:aa:9c:21:a4:d9:8b:f7:97:
ba:11:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:54 2026 by rpki-client