
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier: ttDOcjfQlZHSXdzMi4s9INO+AKnaMVhRz/lXz1Ef2wc=
Subject key identifier: 0F:92:EA:18:FE:0E:B7:DF:C6:E8:5F:50:0C:EF:4C:D6:95:B1:2C:C1
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number: 14AA
Signing time: Tue 24 Mar 2026 18:15:12 +0000
Manifest this update: Tue 24 Mar 2026 18:15:12 +0000
Manifest next update: Tue 31 Mar 2026 18:15:12 +0000
Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: FQDb62I3jqBg2bw/P1zddCN5OAaXv60Ihh56pYWMTF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Validity
Not Before: Mar 24 18:15:12 2026 GMT
Not After : Mar 31 18:15:12 2026 GMT
Subject: CN=69c2d4b0-0ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:48:e3:34:c1:36:0f:2b:30:0e:50:b2:1f:
b6:b4:03:d1:c0:d1:0f:38:e9:4a:d0:2e:99:13:cc:
bc:2c:21:39:f8:d8:9f:4c:91:c7:e6:da:e3:f6:54:
50:b8:ed:e3:9d:c6:b0:67:f4:43:4c:e4:8d:72:7e:
e2:ce:98:1b:19:d3:7a:a4:4a:38:dc:3a:51:7e:4e:
87:3f:e6:64:c9:e1:9b:f7:77:d9:b6:99:a8:91:bb:
1d:a7:e1:c2:db:a3:75:c8:72:30:72:d5:d3:8b:58:
83:c9:bb:f6:09:9b:27:05:84:4e:98:7b:b8:ef:c9:
89:6f:7b:ad:87:5e:2b:bf:44:9e:82:42:15:73:49:
6a:e7:3f:9d:75:3b:72:0d:04:41:59:e9:e0:0b:66:
8d:0f:64:62:ea:5f:d6:2e:bf:59:db:e8:fe:0a:40:
6c:f7:46:a3:6c:01:fa:61:80:d5:03:0f:9f:68:fa:
3e:06:dc:8e:81:a5:be:33:5c:80:30:52:e7:be:43:
53:5d:6a:6f:d7:29:bd:f0:dd:7e:b9:a4:81:5f:5a:
b8:37:95:54:0e:6b:80:8f:57:a4:6c:90:d1:6d:1c:
f2:cc:d0:7e:fb:23:0c:6f:28:03:87:15:80:52:e2:
81:58:ac:9f:2a:fc:2c:e4:da:71:61:54:47:f0:81:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:EA:18:FE:0E:B7:DF:C6:E8:5F:50:0C:EF:4C:D6:95:B1:2C:C1
X509v3 Authority Key Identifier:
keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ab:68:34:6a:89:ca:ae:17:da:73:d3:9a:7b:79:1d:e6:f4:
7f:da:25:81:6a:a3:d5:61:53:13:3f:df:a6:e2:31:d3:fe:26:
da:d8:2b:0d:43:27:88:ae:50:a4:7d:44:a5:15:6e:e5:94:a7:
99:23:28:9d:31:e6:98:c1:d6:4b:5b:bf:19:26:35:76:e2:5a:
3a:a0:60:21:45:e7:45:a2:ee:2f:7c:56:b4:2c:85:bf:2a:25:
a2:ef:e3:d2:12:c0:c0:f5:fd:3e:60:5e:d5:3e:28:95:9e:35:
0c:e7:ad:c3:06:b2:39:4e:5a:77:45:91:20:72:42:24:f6:de:
ef:d5:46:8f:6b:ed:47:27:ed:0e:e7:e9:78:7f:4e:52:7a:a4:
92:4d:34:f4:d8:b1:6f:e2:45:a5:01:9e:c2:c9:f5:c8:d1:d3:
fe:f8:68:8a:1c:e2:f4:9f:dd:a1:bc:71:70:a5:14:da:bd:8c:
98:5f:04:3f:52:af:bb:61:62:69:15:b8:3b:2e:74:7f:a4:a1:
ec:ae:60:0a:c8:dd:bc:ac:14:a6:43:42:cf:5a:a6:24:99:44:
d8:4a:cc:b1:98:8c:c5:36:ff:70:22:4b:89:e2:54:16:8d:d9:
b9:9c:de:57:f9:6c:55:e5:d9:f8:b1:2a:f6:47:f6:5e:43:24:
6c:11:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:49 2026 by rpki-client