
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier: ggy6QO1yTzUJuRVPW/ghCjlb+uai8iwTiTl8jUMIO4k=
Subject key identifier: 2A:CF:04:95:47:AD:74:06:39:F5:97:7C:DA:0B:BF:1D:BF:23:76:CD
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number: 066A
Signing time: Tue 24 Mar 2026 22:18:06 +0000
Manifest this update: Tue 24 Mar 2026 22:18:05 +0000
Manifest next update: Tue 31 Mar 2026 22:18:05 +0000
Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: NhZBkECbdSg+eno3XUBawC113JARIjEZcL8Z//mx6R8=)
2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: cbfqMcMwqjcXfTnCUXdYhPSWB3uKfxrHrfD55mLoBo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Validity
Not Before: Mar 24 22:18:05 2026 GMT
Not After : Mar 31 22:18:05 2026 GMT
Subject: CN=69c30d9e-09a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:c2:9d:5d:f6:6e:70:f7:34:eb:f8:4b:b8:
0d:96:5e:15:30:83:68:25:e1:77:5b:f8:9d:c6:67:
a0:16:78:8e:88:f4:33:6b:ce:72:b5:67:1e:24:2a:
20:ee:53:00:bc:50:8c:fe:0e:27:2c:f8:74:2a:2e:
ab:5c:0c:8a:36:e2:88:cc:13:e6:59:7c:d2:8c:1f:
38:32:12:d5:9d:a9:91:51:87:26:cf:53:2a:c2:85:
3b:27:0f:89:83:50:22:7e:64:e4:2d:6b:f6:44:bb:
04:6b:8c:d2:50:be:ed:57:52:59:76:00:bc:50:8c:
b8:fd:f9:5d:77:68:b9:20:97:38:3d:c0:cc:7e:fa:
ca:1c:4a:3a:95:87:49:62:4f:a1:6c:b4:ea:bf:f2:
c1:83:8f:38:f4:e0:b0:20:4b:a1:6b:2e:9c:93:d0:
86:d8:26:57:5f:49:15:6f:0e:16:12:42:cd:63:8c:
55:67:e8:10:d9:e2:52:52:7e:e1:2d:f0:dc:08:00:
ff:c8:be:37:16:05:59:f6:04:1d:65:99:1c:66:bb:
40:7b:82:1c:b6:55:47:ab:eb:d1:5e:7e:51:ec:ec:
05:6a:9a:ca:08:95:5b:48:b5:da:37:09:8f:a9:fb:
45:a7:e4:f9:37:29:32:df:30:d5:33:90:81:6b:c1:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CF:04:95:47:AD:74:06:39:F5:97:7C:DA:0B:BF:1D:BF:23:76:CD
X509v3 Authority Key Identifier:
keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:e7:28:48:a3:54:b4:09:76:dc:65:27:f0:1c:ee:6a:f2:
b8:6d:60:80:7a:b5:c2:19:80:a9:d1:31:44:ca:8e:c3:e5:b6:
73:a7:c2:9d:96:89:84:e0:ab:21:bf:e8:1d:05:a9:97:9f:70:
a7:97:1a:2c:0e:5c:c5:75:4e:0f:e6:14:25:ba:ee:3d:63:85:
8a:6c:3f:15:08:68:e1:7a:7e:eb:d0:41:ab:7c:c7:f7:22:ba:
c1:39:b7:8c:66:4a:dc:db:09:eb:90:52:13:7e:54:21:e2:8e:
d4:4b:d6:a5:e9:ef:fa:cb:96:1d:20:b7:8e:7b:a1:93:85:af:
38:0c:cf:aa:e1:0d:7f:8f:5b:9b:d7:fd:a7:81:1c:c3:dd:a8:
a5:b0:79:d8:aa:76:4f:40:e0:ed:bc:0f:23:d8:5f:27:7f:c0:
1f:2a:91:a3:82:ab:3e:11:46:5c:1d:c6:a1:e2:38:ea:15:0f:
e1:ed:af:b9:94:7c:1f:fe:da:2b:96:ad:91:06:32:2b:78:08:
74:8a:2f:57:cf:12:11:3a:10:da:5a:4e:bd:7a:17:91:01:17:
5b:9a:7c:06:53:d5:ea:94:31:a7:07:a5:af:9a:70:5b:47:96:
8f:3c:0b:7f:3a:57:00:74:af:71:2a:7c:8b:8b:31:af:d4:49:
30:55:1e:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF
NkM4MTY0NUYwHhcNMjYwMzI0MjIxODA1WhcNMjYwMzMxMjIxODA1WjAYMRYwFAYD
VQQDEw02OWMzMGQ5ZS0wOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/XCnV32bnD3NOv4S7gNll4VMINoJeF3W/idxmegFniOiPQza85ytWceJCog
7lMAvFCM/g4nLPh0Ki6rXAyKNuKIzBPmWXzSjB84MhLVnamRUYcmz1MqwoU7Jw+J
g1AifmTkLWv2RLsEa4zSUL7tV1JZdgC8UIy4/fldd2i5IJc4PcDMfvrKHEo6lYdJ
Yk+hbLTqv/LBg4849OCwIEuhay6ck9CG2CZXX0kVbw4WEkLNY4xVZ+gQ2eJSUn7h
LfDcCAD/yL43FgVZ9gQdZZkcZrtAe4IctlVHq+vRXn5R7OwFaprKCJVbSLXaNwmP
qftFp+T5Nyky3zDVM5CBa8FHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrPBJVH
rXQGOfWXfNoLvx2/I3bNMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE
MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy
S29fWUc4ZnR2cjNteUJaRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeuPnKEijVLQJdtxlJ/Ac7mryuG1ggHq1whmAqdExRMqOw+W2c6fCnZaJhOCr
Ib/oHQWpl59wp5caLA5cxXVOD+YUJbruPWOFimw/FQho4Xp+69BBq3zH9yK6wTm3
jGZK3NsJ65BSE35UIeKO1EvWpenv+suWHSC3jnuhk4WvOAzPquENf49bm9f9p4Ec
w92opbB52Kp2T0Dg7bwPI9hfJ3/AHyqRo4KrPhFGXB3GoeI46hUP4e2vuZR8H/7a
K5atkQYyK3gIdIovV88SEToQ2lpOvXoXkQEXW5p8BlPV6pQxpwelr5pwW0eWjzwL
fzpXAHSvcSp8i4sxr9RJMFUeNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:44 2026 by rpki-client