
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json)
Hash identifier: P5af+6Y8vJxBrgEsnjEVpzcSwdS9vpGPeitnNJQJ+qs=
Subject key identifier: 45:41:33:3F:B8:DA:6C:00:0B:0C:B6:73:A1:34:8F:62:5A:25:31:74
Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
Manifest number: ED
Signing time: Sun 01 Mar 2026 07:29:15 +0000
Manifest this update: Sun 01 Mar 2026 07:29:15 +0000
Manifest next update: Sun 08 Mar 2026 07:29:15 +0000
Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: Sskz6CEO+3RLmFc2OhtXF6gskN2xR0yx0rag4SCJ6ig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Validity
Not Before: Mar 1 07:29:15 2026 GMT
Not After : Mar 8 07:29:15 2026 GMT
Subject: CN=69a3eacb-d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:f0:04:40:7a:19:76:01:c8:3d:f6:44:f1:
2c:63:3f:f4:d6:92:3b:8d:55:1e:c7:1b:43:d8:2c:
d9:da:03:19:f4:54:91:fd:c6:92:9c:60:b2:90:a0:
97:d8:30:9c:a4:0a:a0:e8:98:cf:4d:32:24:16:d0:
96:40:ee:45:12:09:df:f6:41:26:7f:3b:f9:fa:7c:
28:08:88:98:46:84:60:cd:f4:cd:f5:66:e5:b0:73:
88:d3:6d:11:47:6a:0c:9c:df:98:3b:bc:76:d1:c5:
fe:01:09:0f:74:e3:19:85:85:ee:fe:cd:52:ca:8e:
01:b3:58:cc:6e:11:64:d6:cf:84:7e:8b:e2:08:df:
6b:b2:69:44:1d:83:4e:54:26:c2:32:bc:ca:f7:19:
75:cd:a2:c8:4e:62:39:21:f6:34:95:f0:1c:2a:bb:
d7:8c:6e:5c:50:e1:32:65:31:a1:cc:1c:bf:38:50:
b0:d3:cd:32:39:0b:fe:85:c2:e9:1a:2b:4a:ed:b1:
17:3e:3f:23:a7:b4:33:1a:9b:bf:8a:aa:5a:1e:b6:
07:cc:6e:88:93:b3:bf:e7:f1:d3:48:68:4b:9b:3e:
8b:72:ce:25:5f:1d:30:a0:fa:36:23:d9:3f:a8:50:
43:2b:f2:b2:4b:90:ae:9f:93:c1:f1:7d:a7:4c:9c:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:33:3F:B8:DA:6C:00:0B:0C:B6:73:A1:34:8F:62:5A:25:31:74
X509v3 Authority Key Identifier:
keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:93:ce:9b:fb:7f:de:47:09:6f:fe:26:e3:e0:3c:ae:66:
d5:d5:62:17:6f:b8:56:4e:ec:c5:fa:a3:9f:25:96:e8:1c:58:
eb:e4:32:75:a2:9b:22:a6:da:98:8a:e6:af:01:17:52:01:4d:
74:44:82:93:7d:13:98:84:28:d6:01:16:ad:2f:be:ed:ad:b6:
af:1e:da:5d:df:2b:ff:ae:24:34:1d:f5:36:aa:0e:bd:ba:70:
f5:ec:57:0b:f4:b9:be:d4:fa:5e:44:bc:56:f0:61:08:f3:95:
a6:1d:ad:55:02:39:eb:9e:44:17:8a:34:97:db:d8:1b:f9:a8:
a8:9a:1d:5c:cb:41:18:d5:35:44:85:df:fd:68:53:94:f2:5a:
a0:d8:48:82:7f:da:15:1d:bf:7b:80:5f:88:eb:53:1d:86:81:
3d:21:4e:19:72:d0:7f:04:b7:c6:4b:1c:91:75:2b:c4:df:45:
a8:48:93:74:91:8a:97:21:9a:7f:99:1d:a0:20:ff:2d:80:b4:
58:0e:39:ed:8f:96:1e:9d:eb:73:91:f7:3e:20:8e:48:bb:78:
d8:e4:5c:56:3c:26:dc:6e:b7:31:a2:97:3d:df:16:06:59:9c:
3c:81:10:6c:e9:80:e5:09:8d:6a:bf:4f:f2:83:3d:b9:91:83:
0f:03:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:16 2026 by rpki-client