
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier: /iE2T4j7sezfT4hjUaU6xTsIdjqWC+kRXUBjEeAqOIQ=
Subject key identifier: 70:D9:98:C4:56:4C:99:08:33:71:2A:B2:1B:4B:94:9E:75:9D:46:8F
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number: 01CC
Signing time: Fri 17 Apr 2026 03:30:58 +0000
Manifest this update: Fri 17 Apr 2026 03:30:58 +0000
Manifest next update: Fri 24 Apr 2026 03:30:58 +0000
Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: qAYgOkL20XCG+bsovcd3nORMRshKadIj7Ius8kPNEuA=)
2: AA02862E890C11EE87862551C4F9AE02.roa (hash: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Validity
Not Before: Apr 17 03:30:58 2026 GMT
Not After : Apr 24 03:30:58 2026 GMT
Subject: CN=69e1a972-4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:b5:09:15:c3:b9:49:a7:b8:97:c7:70:0d:
b5:25:49:db:c8:20:06:6d:5c:6f:48:5c:2d:98:12:
cc:b5:10:44:58:fa:ae:25:7f:01:bb:9e:c0:40:4b:
d7:56:09:a4:a6:ec:8b:da:20:97:78:7e:af:ce:19:
c3:e4:a2:56:bb:f6:91:07:b8:89:55:ca:ba:b3:a4:
68:5a:51:dc:cf:6a:29:de:7c:89:27:a8:b0:ec:a5:
8e:dd:a5:aa:b0:36:ab:21:2a:27:ec:f8:1a:5d:ad:
c9:5e:0f:ec:6e:c2:47:c9:02:d0:3e:b5:40:f4:bd:
84:9a:d3:78:36:e8:ac:6a:e4:41:1a:5e:a1:f1:a1:
6e:e5:9c:df:ab:62:05:f1:d4:6d:7c:df:63:c0:f1:
f0:e8:5f:0b:76:bc:cf:59:35:5d:d3:08:93:5a:24:
b8:84:30:00:2c:e9:28:51:3d:7c:bf:49:fb:6e:bf:
46:e8:52:7c:6a:c8:db:80:77:f0:6b:27:23:e1:ae:
b9:c0:c8:c0:b8:f8:b9:e1:c8:3b:60:74:91:07:36:
2e:ad:d6:b0:b0:5f:3e:a9:0a:3f:a1:f6:fe:58:4a:
28:55:02:d2:9f:53:90:31:e8:cd:44:c6:d5:5b:49:
05:83:1b:0b:38:ea:2b:a4:ae:d2:4f:68:fc:53:a4:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:98:C4:56:4C:99:08:33:71:2A:B2:1B:4B:94:9E:75:9D:46:8F
X509v3 Authority Key Identifier:
keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:6b:ae:31:51:a6:ff:2c:bd:d7:0d:ca:12:74:59:97:0a:
25:8b:af:39:7c:c8:d5:c4:31:0a:04:dd:c2:fb:63:19:f6:96:
db:9a:2a:4e:d8:3e:81:37:09:e3:c9:e0:6a:c9:60:05:37:90:
3e:e2:0b:45:8a:92:96:63:5b:dd:c4:a7:19:9d:56:5e:74:19:
14:fa:fc:e1:73:75:a2:86:96:7f:69:ac:06:bf:4f:1f:b3:b9:
20:81:c4:72:76:d0:97:e2:77:93:56:ce:bd:66:e2:b5:68:c3:
2b:e0:71:45:c8:92:2b:ec:43:ac:ae:53:5c:1f:67:9a:3f:19:
37:a8:b0:33:cb:84:ad:21:fb:fc:f2:eb:ba:2b:15:3f:78:56:
f4:fc:c5:66:ba:82:11:95:87:08:dc:3f:a2:84:a7:5e:fc:68:
75:70:e1:d3:82:09:d2:89:fc:3c:ed:45:8d:d7:78:8b:67:51:
b6:cb:db:97:43:ca:4e:82:1d:b1:c2:ef:b2:79:2f:7d:a2:02:
d2:fd:09:fe:42:65:3f:82:c9:92:ba:92:4c:18:5e:e8:5b:2f:
c3:3d:93:92:5a:2d:e7:36:c7:29:4a:1e:a8:e2:b8:9c:1c:e2:
52:1a:05:76:b8:36:5e:07:75:06:6d:0e:a1:12:8b:04:e7:bf:
e3:64:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:49 2026 by rpki-client