
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json)
Hash identifier: USGRLVpwcUce/psyWTip8YqZ4mnodwhjvJ1nJi8Guk8=
Subject key identifier: DE:B7:0D:5F:E8:DD:D6:37:AD:82:61:5A:9C:19:BC:09:26:FE:04:63
Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
Manifest number: 02D0
Signing time: Fri 17 Apr 2026 01:17:23 +0000
Manifest this update: Fri 17 Apr 2026 01:17:23 +0000
Manifest next update: Fri 24 Apr 2026 01:17:23 +0000
Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: zvliAaIWEJhqxcWUYiBAurqdYvp7eeKX2U1E10yoPVo=)
2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: YXWFFFPBzpkV2m2yoFC2Tf/XolI9oJsfQCRArQVbJbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Validity
Not Before: Apr 17 01:17:23 2026 GMT
Not After : Apr 24 01:17:23 2026 GMT
Subject: CN=69e18a23-0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:9e:55:0e:28:64:84:2a:3a:03:b5:7b:86:
8e:9b:10:f8:ff:cc:52:02:7b:82:7c:8d:e8:04:7d:
46:35:d3:52:bb:95:af:7b:f3:b4:55:eb:fc:f3:ac:
ac:1b:65:f7:a7:a7:cf:fd:3a:c3:d0:78:ed:ba:f1:
01:37:b6:7a:3c:8e:2e:74:b2:5b:16:b4:b6:16:76:
be:87:9d:44:02:7a:ee:49:86:cb:c2:d7:96:17:2f:
a9:63:1e:33:e2:6b:6e:62:31:fd:6d:3b:10:40:16:
18:00:2e:d0:3e:0f:7c:93:d1:69:23:93:38:c9:aa:
9a:d9:a3:7c:71:cd:14:24:20:60:9d:ea:3b:0a:e1:
5c:2f:92:72:26:1e:7a:84:3d:99:09:91:09:a4:a0:
1c:5c:da:b4:00:f1:dd:e7:00:e8:5a:e3:ed:f2:7d:
20:b0:8f:33:f7:6f:b5:f6:6c:2f:14:79:08:f1:e7:
11:a6:20:e3:29:47:ee:67:39:d7:84:98:ab:31:d2:
1a:9e:8e:12:6a:52:92:89:40:54:8d:ab:25:6a:e4:
59:c0:2d:63:70:6a:13:1d:68:ed:fe:8c:7d:31:9e:
ce:fb:b2:d8:de:5b:56:5f:8b:5c:ea:c0:c6:e9:6d:
58:1d:20:75:0a:1f:60:01:72:cb:b6:44:b6:50:d9:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:0D:5F:E8:DD:D6:37:AD:82:61:5A:9C:19:BC:09:26:FE:04:63
X509v3 Authority Key Identifier:
keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:e2:c6:40:b6:20:20:29:1f:bb:fc:75:bb:e1:8f:06:15:
9c:44:b4:f3:24:80:86:ee:a5:7e:1f:27:49:e9:80:0c:38:4b:
ba:a2:96:6e:94:77:f5:5b:58:c3:c1:f5:b0:b1:68:e8:d0:6f:
84:a3:95:80:65:b5:0c:be:59:de:31:94:75:00:cd:dc:af:86:
a3:e3:2f:f8:d3:cb:ce:8f:82:01:5e:52:b6:fd:54:41:be:ce:
a0:3b:b4:14:e7:c7:5a:a0:2b:3f:10:c6:cf:08:78:5c:86:88:
fd:a0:3b:33:b6:cf:27:84:01:b9:57:36:a0:d7:7c:39:b9:32:
69:5b:7a:33:11:de:96:d8:41:94:12:f4:92:6c:0a:25:b0:cc:
6e:b2:61:6d:df:25:4b:34:9e:f0:f3:bb:7b:0e:7d:ce:bc:f5:
bb:fd:ca:6b:cd:c9:90:32:0c:6a:fb:d7:1d:33:a7:ad:ac:22:
81:af:8f:90:92:d1:7c:b3:9a:ca:88:d6:6d:e1:5d:c8:36:2a:
47:f4:31:7a:22:a4:bc:ca:bc:bc:e0:70:65:b8:79:8c:58:79:
eb:41:28:b5:60:59:2b:4c:5a:e7:f8:27:d8:28:0d:50:1b:c2:
80:f8:cd:32:b3:53:92:3b:f3:67:7b:1f:81:89:bf:d6:55:ef:
40:8c:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:51 2026 by rpki-client