
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json)
Hash identifier: KViCUjs2ExJegDRth2WEqzWeZvHIUFwEyoavQnFHm0Y=
Subject key identifier: 64:64:CB:2F:73:D1:7F:A7:A9:70:68:80:35:B5:7D:45:67:90:58:E9
Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Certificate serial: 02F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
Manifest number: 02ED
Signing time: Sat 13 Jun 2026 01:17:54 +0000
Manifest this update: Sat 13 Jun 2026 01:17:54 +0000
Manifest next update: Sat 20 Jun 2026 01:17:54 +0000
Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: VQylX71a2xxxQVaTQGWX+aoBIAKaA0i4tdx8CsEG4/4=)
2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: YXWFFFPBzpkV2m2yoFC2Tf/XolI9oJsfQCRArQVbJbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Validity
Not Before: Jun 13 01:17:54 2026 GMT
Not After : Jun 20 01:17:54 2026 GMT
Subject: CN=6a2cafc2-1e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:7c:df:5f:13:a4:6f:20:b0:f9:e1:3d:03:
0b:d7:18:5e:52:ab:0d:48:b8:f7:ee:7c:ac:e0:0d:
21:89:51:50:81:3e:80:a4:86:63:d4:fb:9c:e6:8b:
3f:a6:5b:e7:08:8d:fa:eb:4e:7d:07:61:aa:4c:b4:
33:af:95:78:c7:78:5c:8a:ec:24:83:03:bb:53:cd:
ac:29:04:a6:90:39:3d:10:e3:2c:e2:53:13:7d:53:
aa:06:70:05:34:fb:40:e7:b8:25:5a:6b:47:2d:fa:
13:0a:e2:fc:49:4b:9c:41:c5:5a:23:c5:d0:30:5a:
db:45:cb:54:50:87:93:63:ac:32:17:ad:02:44:a1:
a2:83:c9:f6:9d:bf:87:52:ae:67:b8:72:ca:5a:fb:
85:e1:02:bd:5f:79:80:12:a0:8c:73:51:dc:e4:ff:
79:f2:d4:27:19:cc:c2:51:71:90:51:b6:ba:77:53:
59:4e:8a:b9:15:0d:30:ff:ee:b8:57:c8:ec:e1:71:
70:a1:a3:d3:69:0e:a3:e9:c7:d6:45:b0:df:27:ee:
29:d3:61:9a:e9:9c:f4:ef:0d:b4:1f:34:4e:4d:40:
2f:48:70:f4:c8:a4:da:93:c8:cd:17:19:42:3a:f8:
80:44:33:d4:a5:c2:cf:8b:d2:7e:63:ba:d2:f7:90:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:CB:2F:73:D1:7F:A7:A9:70:68:80:35:B5:7D:45:67:90:58:E9
X509v3 Authority Key Identifier:
keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:7f:c0:e0:bd:fa:b0:ea:7c:e8:0c:dc:55:24:2c:52:fd:
87:81:98:2b:a4:53:b9:2a:0a:18:3c:42:a5:23:1a:4b:b2:74:
f4:ca:ba:4e:5e:fe:6d:52:be:d7:e6:fa:cb:cd:b0:77:d9:e2:
6a:0c:c5:fb:81:12:07:90:fe:51:11:db:0d:c4:cc:c6:1a:fe:
fc:78:3d:42:be:fa:a7:d1:9c:47:e7:b1:5c:fd:01:9e:4e:48:
fd:b7:85:d1:1e:64:27:11:37:e3:91:5f:1f:97:35:3f:f2:99:
29:1e:08:71:7a:d4:09:a8:1a:77:b0:e1:87:81:5f:9f:67:3e:
34:fe:bd:2a:3f:02:38:42:8e:8f:fd:ee:78:d4:df:04:8a:be:
79:e0:01:33:d1:39:d9:f8:0d:c9:dd:c1:97:ea:61:9f:f1:87:
69:4a:b8:fa:83:01:f7:2f:e0:7f:c6:f1:16:4c:a9:3a:a4:03:
a1:b2:5e:08:c7:f0:38:cc:f1:8c:f3:ad:75:a0:94:96:6e:d9:
30:ad:61:cd:83:82:b5:e4:b8:e0:4f:d4:1e:08:41:b2:17:5f:
d2:e4:09:4b:87:95:0f:2e:75:dd:61:79:be:92:69:a4:7e:29:
e4:43:43:05:84:f1:70:94:2d:15:1c:ec:89:a6:86:7d:a0:05:
8b:43:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:24 2026 by rpki-client