
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier: oDicxgothZ5Twxa8rHl2Ry3A8elp5xsMXKN3za5mIFo=
Subject key identifier: B4:3C:10:29:BC:68:A8:49:4B:CE:8F:47:37:A2:9B:13:23:97:69:86
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number: 0D
Signing time: Wed 25 Mar 2026 08:16:53 +0000
Manifest this update: Wed 25 Mar 2026 08:16:52 +0000
Manifest next update: Wed 01 Apr 2026 08:16:52 +0000
Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: ZHmDZk+3Dp0H0ej8RCkflG0SynZvJJp9Std3OLj6im0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Validity
Not Before: Mar 25 08:16:52 2026 GMT
Not After : Apr 1 08:16:52 2026 GMT
Subject: CN=69c399f5-d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:91:fe:2f:8b:f1:fc:85:88:84:e2:64:e1:
16:77:81:40:db:e4:df:6e:ab:67:7f:0f:bb:e3:93:
a9:ea:0f:5b:fb:51:e5:e2:d7:d7:a2:0a:49:b4:c2:
18:e9:2b:b9:8e:39:89:04:ce:d9:85:3b:d1:ff:a1:
a0:4f:57:fe:85:e4:88:b3:18:28:38:68:7a:3d:4a:
9a:19:83:c5:90:33:bb:83:8d:97:1a:0d:60:63:43:
50:9b:ef:7d:a1:61:1f:05:6e:4e:d7:ff:6e:b3:0c:
69:f0:64:65:81:1c:20:1a:d1:aa:f6:c3:22:d3:38:
52:50:ab:a0:3b:d5:35:8f:18:35:b9:e9:4c:84:76:
7b:ef:2c:8f:11:85:5a:95:e1:77:73:73:6c:10:6a:
0e:9d:7e:32:ad:02:f3:2b:5d:73:59:eb:8d:77:57:
f2:8b:96:44:be:9b:f2:70:12:25:32:6e:bd:f7:17:
ba:bc:1b:39:7f:c7:99:d4:2a:07:7c:42:87:a5:01:
b5:b4:11:e4:fe:e2:86:6b:9b:02:f2:fc:53:f1:71:
f2:c9:8e:4a:e0:5f:54:1c:ff:e3:3b:3d:13:68:78:
d1:68:81:ef:87:8b:96:46:5c:ff:db:0b:f1:d9:d5:
3f:bb:57:ec:cf:2e:5f:81:94:f5:a2:8f:7a:22:bb:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:10:29:BC:68:A8:49:4B:CE:8F:47:37:A2:9B:13:23:97:69:86
X509v3 Authority Key Identifier:
keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f2:04:d4:bc:fd:58:a0:e1:07:97:95:54:da:a3:c9:e4:21:
3b:0f:a7:f3:a1:42:5b:eb:2a:f6:3f:e0:e6:fb:80:1f:5a:14:
b2:00:30:42:7e:79:27:38:77:17:22:5e:ce:6e:7a:71:3f:53:
dc:f3:df:47:b9:b0:40:e8:f4:9b:38:30:5b:3a:d9:33:9d:c3:
33:ca:c0:4d:b8:d8:8c:8d:7f:1c:52:21:f6:22:9b:11:c3:5e:
c0:23:a4:ed:13:0f:9a:7f:66:89:cd:ad:10:75:c7:8c:58:c6:
c1:9b:b9:47:31:02:d7:90:13:26:32:54:0e:0b:c4:89:bf:15:
b4:1b:91:75:38:58:74:34:bb:b7:9a:bd:fa:ac:11:ea:5e:73:
d8:63:03:c2:e6:40:8f:cf:91:fd:8e:ee:19:14:92:72:c0:4b:
c3:5c:21:37:a3:ae:b3:ae:5a:c6:c5:1f:7f:08:e2:a8:7d:f0:
6c:dd:bc:96:0f:8d:8b:d0:98:5f:74:ce:08:54:ec:57:08:0c:
9b:8c:b1:14:ed:9c:49:79:de:f3:cf:39:d2:dd:c5:70:41:f9:
21:8c:bc:27:71:8c:c3:04:55:60:6f:ef:24:0a:7e:ca:60:32:
7d:a7:07:f4:a3:48:49:2b:bf:23:d8:01:19:b5:a2:4a:ac:80:
99:a1:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:16 2026 by rpki-client