
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json)
Hash identifier: UzuBaDde4/T+SvEH6fhjD537s67sBH25PVJoOvM47I0=
Subject key identifier: 2B:EA:D8:99:E4:E0:78:E2:76:B2:79:6B:3A:F8:C1:19:B4:01:F9:01
Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88
Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
Certificate serial: 1282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
Manifest number: 1B41
Signing time: Tue 24 Mar 2026 16:59:26 +0000
Manifest this update: Tue 24 Mar 2026 16:59:25 +0000
Manifest next update: Tue 31 Mar 2026 16:59:25 +0000
Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: Ljjgsiv/gpDh3rk1KStrOta5J76kPuguBDOcneqVft0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl
rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4738 (0x1282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688
Validity
Not Before: Mar 24 16:59:25 2026 GMT
Not After : Mar 31 16:59:25 2026 GMT
Subject: CN=69c2c2ee-fbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:e1:06:a3:9a:bd:80:cd:36:f7:8e:ac:e4:
96:c8:36:e1:1a:8e:02:66:bd:31:59:9f:7d:c1:03:
2c:0f:ea:21:73:19:dc:84:d1:71:8e:e7:f6:e6:77:
28:49:ff:e0:b9:24:e2:89:a1:26:00:7d:7a:e2:89:
47:8d:59:df:f9:96:42:8c:04:ad:db:43:62:bf:a4:
94:f3:a4:70:a0:5a:f6:ab:64:8b:27:87:36:2e:5b:
fd:10:a5:66:24:e7:1e:20:27:71:b7:50:3d:c5:64:
72:9d:f0:7a:02:f7:1b:7d:77:1b:83:9e:be:5e:89:
f7:99:2e:a3:2c:5d:a2:96:c2:76:89:93:08:d3:e2:
3e:30:b3:74:d1:19:99:26:13:f8:5e:a7:60:25:b8:
e7:ae:b4:15:9d:1d:a2:e8:40:53:0d:06:44:ab:31:
cd:ce:f3:ec:e9:82:37:39:36:da:48:6b:b2:af:6a:
c8:ca:0b:d4:e8:6e:64:9f:b6:bf:4f:9e:f2:5a:be:
83:c1:43:3c:dc:ea:9d:23:35:47:6a:eb:72:fe:ef:
42:78:f5:ad:b4:a8:c3:87:cb:50:45:2f:fb:30:57:
d3:17:68:2d:bc:56:41:a8:03:4b:ab:ca:d6:ac:75:
b7:55:e4:79:36:33:d5:f1:9d:10:0f:08:17:39:1b:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EA:D8:99:E4:E0:78:E2:76:B2:79:6B:3A:F8:C1:19:B4:01:F9:01
X509v3 Authority Key Identifier:
keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:67:7e:2e:79:55:f5:76:a3:f6:51:ac:c3:80:8c:8f:bf:
56:69:b1:d8:fa:94:09:af:8c:49:64:71:79:10:18:d9:f2:56:
0d:da:65:5b:12:69:a7:ee:6e:4c:c6:8c:3f:71:b3:80:c3:28:
f3:65:6f:b9:53:1f:54:9b:f7:be:0d:2a:c4:a8:5d:bc:fa:42:
eb:c9:a0:03:6e:f4:5d:f0:be:f6:90:97:eb:ef:b1:0c:63:fa:
c1:c0:7b:3c:8c:e8:94:9f:2e:9b:08:2e:9c:bc:b5:ce:b7:bc:
1b:fd:e5:dd:59:84:49:a1:f0:c3:93:b0:40:31:51:22:12:24:
a8:55:80:ce:d9:0b:16:c5:cb:39:81:af:0e:0c:41:1b:ed:7d:
9e:62:b4:38:a4:2a:d7:36:9b:40:69:98:f0:71:50:e1:4b:39:
44:dd:05:cf:83:f3:88:43:dd:18:77:1b:a9:34:41:f6:1b:8c:
c5:6c:be:e3:20:40:62:39:9f:24:ee:d1:61:c0:96:d0:b8:07:
a3:71:96:c0:76:fc:65:4a:03:2b:6b:66:8c:34:dd:59:c1:fb:
2b:7d:cb:87:8a:ee:ae:cf:48:d7:33:e2:cf:aa:de:84:d0:9c:
cc:1e:25:e5:e3:e0:6b:c9:b9:92:65:00:62:71:09:96:b2:59:
e3:cf:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:20 2026 by rpki-client