
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier: QwU5NhqVXHxrJu4gyf1fGcCQJs/LyQecHbiiP6+MbY8=
Subject key identifier: ED:0F:0A:EB:83:58:9E:87:E1:1D:3C:1A:CC:07:28:6D:A7:0C:4E:85
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number: 0140
Signing time: Fri 27 Mar 2026 04:48:09 +0000
Manifest this update: Fri 27 Mar 2026 04:48:08 +0000
Manifest next update: Fri 03 Apr 2026 04:48:08 +0000
Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: k6tWuZPyDtguVlcpogw9pNXgi7KXM4Nwbj1L3QFDNfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Validity
Not Before: Mar 27 04:48:08 2026 GMT
Not After : Apr 3 04:48:08 2026 GMT
Subject: CN=69c60c08-f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:92:7b:20:da:02:8d:30:7c:8a:fc:9f:d2:
88:36:c2:75:42:3e:b5:87:e5:db:f3:47:86:f0:3e:
0a:3b:b6:56:ef:b0:de:f2:6a:69:13:c7:09:01:91:
1b:ad:59:d5:32:ad:60:32:2c:70:ad:c0:60:47:ed:
fc:b6:77:c6:d3:ce:bf:cb:aa:46:5d:bf:fb:e4:30:
05:0b:7f:64:a4:6d:7d:33:3a:ee:39:d0:57:8a:d1:
eb:a9:da:6a:95:21:23:64:10:60:29:aa:38:0e:8e:
f9:f0:66:33:f4:7c:51:c5:64:d4:cc:4a:af:e4:b4:
8d:69:56:e3:5d:bb:16:34:e9:2a:37:30:52:c1:21:
8a:14:37:b9:f7:f5:0c:82:f9:05:97:ef:57:50:82:
95:3e:65:33:55:05:37:3d:eb:17:c3:4f:49:c9:f5:
60:32:1c:58:4d:a9:6a:9a:0e:a3:97:e2:71:03:ae:
f5:8a:db:d1:ec:8f:9d:15:cb:d7:e4:94:a0:c7:81:
f1:5e:a1:99:84:f6:a1:98:2e:5f:cd:86:26:cc:f2:
df:44:77:2e:fd:bb:b7:66:40:7e:ad:bf:34:c2:4f:
dc:ab:ee:5e:da:47:49:a3:f7:64:a2:08:52:3b:22:
cf:5d:c4:4c:b1:66:aa:38:ec:d5:fe:f0:53:d2:a9:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:0A:EB:83:58:9E:87:E1:1D:3C:1A:CC:07:28:6D:A7:0C:4E:85
X509v3 Authority Key Identifier:
keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:0f:76:2a:5e:85:4e:b2:ae:3e:16:c9:b5:5d:21:18:b4:
c8:bd:74:9a:fc:95:47:e1:b0:7a:fe:c1:42:b0:72:ad:a7:30:
ab:29:13:25:5e:1f:56:40:2f:7e:d5:5b:26:0c:a9:c7:1e:bb:
36:62:c3:ea:cc:88:5b:dd:da:f1:eb:6c:58:e0:25:a0:6f:3e:
aa:7f:d3:ad:20:1d:25:de:e1:cc:f3:12:cd:c5:29:9c:7d:54:
a6:c3:0d:08:90:85:8c:55:3f:74:e7:52:7b:c3:00:7c:f4:2c:
5f:56:d9:8c:6b:b5:95:55:54:b7:a6:10:72:77:de:0e:06:48:
98:f6:d7:06:d4:d6:45:66:f4:70:2e:5a:98:e4:fb:bf:2e:70:
92:e9:5f:a3:d5:75:2e:3d:0f:33:10:f0:d0:de:62:b5:da:e9:
22:fa:10:e7:f0:7c:2a:58:c6:9c:ca:7e:7f:42:1e:44:36:45:
97:23:86:43:ea:fa:b8:44:13:2b:dd:01:0d:f4:6d:7e:34:48:
79:56:94:d0:f5:e0:7d:23:c3:52:ac:a0:f2:f0:dc:0c:1b:37:
39:07:a0:54:21:0f:c3:eb:36:39:5a:63:b3:4c:eb:dd:07:5f:
b8:fa:a1:4f:56:2a:f6:45:09:18:d9:1e:ac:09:eb:b0:40:11:
81:48:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:11 2026 by rpki-client