
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: L870dtnY9UP4mceOFO5zgRPSXXg91VR4zk7Oq01Y/A8=
Subject key identifier: 76:51:EF:DE:03:71:55:57:1A:60:91:B4:41:A6:5F:E4:FC:B3:9F:E7
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 13DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 13C3
Signing time: Tue 24 Mar 2026 16:51:45 +0000
Manifest this update: Tue 24 Mar 2026 16:51:45 +0000
Manifest next update: Tue 31 Mar 2026 16:51:45 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: XAHd9S+kap0GUiWcVnVp+eV8PxGz3NEOLwfM8/REukc=)
2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5086 (0x13de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Mar 24 16:51:45 2026 GMT
Not After : Mar 31 16:51:45 2026 GMT
Subject: CN=69c2c121-77d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:ac:12:42:f2:a7:ad:f8:c9:cf:f5:e4:8d:
ec:03:77:6b:24:ea:b9:e3:ac:b9:a6:0a:7d:a6:ef:
d2:57:90:d0:d7:fb:97:59:3f:65:53:f6:d1:26:18:
0b:4b:2e:18:9d:f2:c0:b4:16:3b:58:7f:fa:e0:9a:
0c:17:1d:97:e0:f6:35:7d:52:e1:34:51:55:fb:b1:
88:1d:d3:62:e3:2d:c3:73:72:fa:4a:50:a2:92:3e:
b3:1e:9d:c3:20:bd:9c:5c:52:20:c0:10:49:22:df:
68:a1:17:4d:3c:de:79:7c:41:78:25:7f:4f:61:74:
38:15:57:8d:35:2f:d4:e9:ae:5b:34:da:8e:73:d7:
bc:67:39:e1:72:49:e8:4f:e7:1c:a1:ac:f3:f1:e8:
e3:90:15:5d:ec:f9:90:60:f0:10:72:b9:0c:eb:60:
fb:68:9d:c1:d5:20:38:82:85:6f:3d:bc:76:f9:e8:
7d:d9:c7:73:21:2c:01:0c:26:c0:53:39:98:c3:4c:
5a:25:0e:f1:e3:37:f1:d8:3a:b1:f5:b2:45:c3:3e:
d8:36:80:56:bf:ea:24:b7:16:aa:8e:61:5a:28:03:
76:87:24:d3:bf:07:00:59:6c:00:23:18:92:38:a7:
30:da:c0:3e:28:f2:1f:17:ac:28:19:e7:1d:63:80:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:EF:DE:03:71:55:57:1A:60:91:B4:41:A6:5F:E4:FC:B3:9F:E7
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:da:80:9d:22:24:ae:c3:75:38:18:82:ec:f2:ba:e4:6f:e8:
a0:41:28:a9:5a:68:d2:bb:88:a7:93:b8:2b:87:d7:ff:4d:a3:
00:e2:5a:f0:38:7a:ee:b9:81:a7:34:d0:78:bb:72:a1:65:bf:
9d:6d:ed:7c:28:dd:c2:08:24:96:7c:b4:76:ef:ec:95:65:db:
54:75:7d:4c:e4:f1:ef:8e:59:77:0a:32:39:47:26:5a:cc:04:
8d:c5:00:ac:ad:0f:ba:2d:80:6e:0a:9f:9c:ce:8a:3e:5d:34:
4f:16:f8:f9:b7:d6:c7:f9:ca:5b:3a:fe:3b:6c:bb:e7:be:85:
cb:cf:e7:e9:39:d5:7f:d7:30:54:f6:b6:f4:68:6d:f4:84:04:
42:76:1a:28:33:f3:ca:2d:d0:86:25:6f:e3:a8:38:7b:64:55:
5e:52:3c:7e:ba:70:8a:20:42:f5:8c:95:af:77:29:be:a5:dc:
2c:4b:4c:7c:3e:de:79:1d:31:0c:8b:60:be:9b:37:46:75:6c:
cc:0c:9b:e0:b4:66:19:de:33:19:4f:8e:ff:62:97:e7:38:f2:
07:49:8a:00:d3:69:eb:08:11:cd:49:26:de:f1:83:33:90:e2:
19:d2:34:1e:63:ff:0a:c0:80:82:7a:c3:54:96:7d:af:33:4f:
a0:74:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:33 2026 by rpki-client