
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: RKK8Lok0WYIGzRIk9FzlfNnDnHVe2zSUeg0p4VotcQM=
Subject key identifier: 56:A2:30:F8:8D:73:52:8F:9D:0B:6F:27:05:7C:1D:A5:79:AD:5F:1E
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 13CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 13B3
Signing time: Sat 28 Feb 2026 17:02:26 +0000
Manifest this update: Sat 28 Feb 2026 17:02:26 +0000
Manifest next update: Sat 07 Mar 2026 17:02:26 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: a2F8XErx2zujRS430fNlqkIkJg3yktaYoEXmReBiRpw=)
2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=)
3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Feb 28 17:02:26 2026 GMT
Not After : Mar 7 17:02:26 2026 GMT
Subject: CN=69a31fa2-ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:5a:b0:5c:2f:bd:11:9c:b2:4d:c4:f4:2a:
a8:07:94:d5:a6:67:ad:75:f9:16:84:77:72:c4:34:
76:3f:73:d8:7e:6a:cf:44:e5:3b:3d:2f:e8:43:95:
37:7e:13:50:8a:cb:56:f5:ef:d3:12:76:fd:b6:f6:
5c:cf:a4:76:fd:e8:4a:64:93:68:d1:75:df:00:79:
fd:bb:fa:37:60:60:7e:3d:41:cc:ec:71:bb:34:ab:
a1:4a:31:17:9f:39:f0:e8:77:3e:bf:c2:b6:cc:78:
9f:4b:8d:f7:d5:ae:46:84:63:e3:50:1d:a2:2e:af:
54:65:c6:93:d9:63:28:14:f4:db:82:0e:50:44:f4:
8c:d7:2b:66:3e:01:21:62:b6:c9:91:67:1d:19:27:
f5:c1:1d:cf:7e:38:7f:53:9f:80:af:e8:8f:a9:6e:
ed:f7:8e:a8:70:c5:41:33:d5:29:be:fd:f4:27:10:
d6:1f:1a:fe:4f:f2:26:df:7e:e2:2b:ff:59:73:3b:
15:a4:e8:cb:d9:16:89:72:c7:be:3c:67:89:1d:9c:
56:f2:0d:96:a6:d8:5c:9c:52:03:e2:e3:85:05:bc:
1c:34:c4:19:5f:4e:ec:e8:48:39:e4:70:bd:36:92:
41:92:45:06:2d:90:61:94:c6:99:a7:ab:b6:71:86:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:30:F8:8D:73:52:8F:9D:0B:6F:27:05:7C:1D:A5:79:AD:5F:1E
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:84:b8:5b:ed:14:d4:e2:6c:a1:5c:ff:c1:28:88:f5:07:7c:
ec:37:4f:3d:b0:8e:dc:33:a2:bc:30:f4:cf:fd:13:92:a0:e7:
d7:19:66:ef:0d:ea:10:66:24:78:08:b5:f4:97:9f:32:e0:58:
e6:28:44:91:7e:17:5a:1c:27:fa:7b:5e:1d:90:29:36:0a:80:
28:3b:5a:ea:7e:ca:a7:7f:25:17:12:55:68:a2:45:58:a5:63:
52:ce:55:09:c1:ac:ad:5e:81:cf:1e:f5:a4:f5:90:a7:86:49:
58:4e:28:9a:3d:f8:ac:7f:d2:8c:21:b1:cf:42:8b:f7:fd:1a:
f7:5e:6d:b7:66:93:a7:f0:0d:88:64:d2:73:b4:52:03:4c:00:
b7:91:c7:4e:33:b8:e2:67:c7:79:9e:c3:8f:45:52:df:ca:c2:
b7:8f:e8:b3:37:ad:28:ba:f7:4a:2f:6d:2d:a4:6d:0c:79:60:
5d:2a:52:a5:88:19:96:b3:a7:8e:05:27:0e:0d:40:e2:58:63:
7c:a0:7a:fd:cf:f9:a3:29:d8:71:e8:b0:56:8d:4f:2d:dc:d5:
40:e1:89:26:7b:cb:84:65:eb:6c:3f:d8:08:c4:c2:53:48:76:
b5:2a:0e:38:00:3c:24:48:bb:f6:39:e0:3b:05:31:ab:5f:48:
ab:87:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:08 2026 by rpki-client