
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: xZehttSTeRNUUGXCGt3/n5ZqmIyddGbh3LMPWd8hcu0=
Subject key identifier: 89:F2:8A:E8:14:58:41:38:C7:C4:C6:22:04:EE:95:D7:2E:A4:30:D3
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: 014B
Signing time: Wed 15 Apr 2026 04:47:56 +0000
Manifest this update: Wed 15 Apr 2026 04:47:55 +0000
Manifest next update: Wed 22 Apr 2026 04:47:55 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: Ovu3Rm+mF8hCwl6S7gVQn/VBJmx+No5MBxJUy8q34VA=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Validity
Not Before: Apr 15 04:47:55 2026 GMT
Not After : Apr 22 04:47:55 2026 GMT
Subject: CN=69df187b-1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:d1:34:53:9a:e3:cc:43:5f:9b:e0:85:61:
3f:4b:69:36:36:b0:f6:68:6e:49:2f:83:b9:1a:1c:
7b:a0:c5:a1:f6:03:b7:0b:75:33:ab:3c:55:56:63:
da:2d:7b:38:aa:3a:06:bb:70:9c:2b:14:04:3d:94:
c3:32:6b:91:ce:76:7e:ab:20:7a:3c:cd:49:1e:57:
47:3d:48:f4:a0:00:70:05:2a:3c:a5:37:44:4b:c5:
75:66:e0:eb:2d:1e:64:29:49:63:58:0b:6c:c1:cd:
1a:4f:b3:75:b6:1d:bd:58:b3:7e:a4:8d:87:9e:2c:
42:4a:e2:b1:36:fb:a6:b3:aa:fc:92:cc:b4:c4:ec:
ee:d0:7d:76:c7:65:63:4b:eb:24:80:06:44:80:3b:
f1:8c:f7:e9:cc:64:0e:a2:80:c8:9d:91:5f:34:bb:
e8:6a:f6:7e:42:fb:23:50:50:a5:05:7c:3b:55:62:
bb:72:37:ec:bd:81:bc:41:1a:ca:f2:a9:f1:51:e1:
36:2f:09:91:5c:77:e4:90:f4:60:69:10:e4:32:7d:
f8:e0:67:b4:17:cc:a9:d8:fa:f0:60:ec:96:7f:f7:
01:8b:2b:07:be:ab:b5:12:55:d5:5b:1c:b1:c1:35:
d6:93:a6:5b:e8:6b:05:de:65:cd:01:bf:8d:b3:91:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:8A:E8:14:58:41:38:C7:C4:C6:22:04:EE:95:D7:2E:A4:30:D3
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:37:0c:5e:14:42:03:d8:3c:ff:e7:07:03:70:ec:c9:f6:
39:ff:da:4e:f8:7e:13:09:c7:a3:81:7b:ca:5b:81:1f:f1:5b:
05:66:de:00:8b:da:37:d9:1a:30:b7:0a:67:7f:ae:2b:06:b0:
00:06:2f:d3:80:39:23:40:bb:87:62:60:a9:c2:23:f4:02:3c:
d4:ef:db:be:cc:d5:78:01:23:9e:a1:7d:a5:15:6e:15:b4:21:
d2:b6:32:e6:e7:fd:86:1b:09:23:f7:e5:4b:83:6b:83:4d:34:
16:53:22:c6:79:a0:6a:f8:9b:e8:0b:c7:06:8a:23:7b:db:68:
50:85:31:a1:0a:85:50:cc:17:3d:1b:76:0d:c1:d4:3f:da:0e:
d6:d7:27:c5:cb:bf:ff:cf:5b:18:e8:38:03:61:39:12:38:df:
83:c0:7b:b9:34:4e:f2:d2:40:40:8a:cb:34:ee:16:ef:83:a3:
63:46:d4:94:2f:68:79:7c:02:65:dd:68:ba:a8:6c:3c:9d:f7:
19:e3:b4:67:e2:8a:98:bc:3d:ea:15:c4:60:98:9e:a1:c8:7f:
6d:bc:7b:d1:c3:a9:cf:d5:be:da:43:61:ea:37:d0:18:78:58:
25:21:4c:5f:5b:3b:ea:75:eb:1d:b7:29:8a:98:b1:8d:cf:56:
4e:8e:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:50 2026 by rpki-client