
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier: dw9T72Ygn1FX0MW2OEcYBN087ZYnyMkWN9V2+LZIxAA=
Subject key identifier: FB:4A:BD:54:7B:92:95:23:73:BD:27:09:C5:0B:EF:CC:06:F7:9A:32
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number: 88
Signing time: Wed 25 Mar 2026 06:51:13 +0000
Manifest this update: Wed 25 Mar 2026 06:51:13 +0000
Manifest next update: Wed 01 Apr 2026 06:51:13 +0000
Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: rk7jtq/4I8nYuceRbRiAz4BDGxlOLKrpsop/IjZ0W04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Validity
Not Before: Mar 25 06:51:13 2026 GMT
Not After : Apr 1 06:51:13 2026 GMT
Subject: CN=69c385e1-1275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:6c:1d:b1:59:ee:7a:b5:48:0a:0a:8a:c5:
64:5f:60:56:fd:4a:57:8e:ee:97:33:62:1f:4c:a4:
15:b0:d1:20:60:fe:eb:cf:e9:13:a0:11:54:e2:b5:
d2:64:12:b8:24:41:87:46:0a:af:aa:44:bf:64:ec:
77:c7:00:c2:4a:6a:96:b6:17:1c:60:3d:11:7a:87:
21:0d:47:81:7c:51:7f:c7:13:3b:85:3d:70:1b:b7:
fe:e0:8a:75:4a:2d:a9:a7:f2:64:d4:33:62:b2:2e:
5d:e9:2c:5c:fa:31:a0:8c:2e:17:d8:58:64:df:2e:
a2:25:a0:c8:7d:0b:69:8f:96:11:50:0b:de:dd:cb:
f7:83:93:9c:8f:b7:3f:97:de:7f:6e:42:fd:22:26:
47:91:8e:3d:e9:fb:5d:a0:88:3f:42:c9:4b:78:5f:
f7:2a:00:26:7c:28:3c:16:b5:9a:f7:f3:80:2a:d1:
e7:19:d4:98:6c:db:3e:74:a4:67:f6:f6:c5:df:47:
9d:22:32:0a:f4:5e:dd:c2:dc:66:c8:75:88:97:20:
a9:91:c0:b4:74:0e:f5:36:3d:7c:11:61:8f:ad:b6:
f7:5f:5d:b0:14:e0:d7:c8:1f:d7:23:95:33:6c:44:
6a:72:8c:8e:8e:07:91:df:37:86:14:64:99:b2:36:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4A:BD:54:7B:92:95:23:73:BD:27:09:C5:0B:EF:CC:06:F7:9A:32
X509v3 Authority Key Identifier:
keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:71:42:3f:40:3a:b6:b6:74:ab:bf:1d:6f:4d:da:6b:a8:
f0:91:aa:6e:93:11:14:12:5a:e0:12:e6:00:42:50:9b:27:dc:
83:8b:95:a1:86:c5:1f:ca:63:81:ee:02:3d:5a:b0:fa:f5:32:
90:ba:7d:2c:e6:0c:80:f0:66:71:f4:ca:b5:52:d8:37:8d:f8:
31:1f:31:23:cf:ba:04:b6:c5:b7:a0:9b:8f:f2:c5:21:13:2d:
9c:f5:87:97:dd:ab:12:de:36:e3:b4:58:9c:20:09:29:19:ee:
76:6b:23:88:e3:1b:e9:9e:15:5d:0f:62:a7:25:e3:e0:74:46:
49:14:38:79:2b:a3:55:15:c6:3e:6a:c8:13:4c:37:b5:e1:63:
bf:8c:b4:98:33:26:fc:ab:71:18:fd:1f:06:d7:49:80:4b:f5:
ec:e0:d6:1a:bd:10:80:e9:63:d4:3e:f0:aa:c5:32:dc:31:a5:
3c:03:13:93:9d:cf:1f:9c:08:5e:f5:26:6e:fc:8c:f4:9e:f6:
bc:74:d8:33:ba:51:29:8d:25:cd:73:39:0e:6c:84:6d:19:eb:
5a:c2:5a:e1:61:8b:4e:22:3a:12:00:a1:5a:5c:9b:1d:b3:d2:
84:c9:72:99:c6:a0:e9:dd:04:5e:36:da:b8:3b:a7:4d:f8:fd:
c0:02:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:53 2026 by rpki-client