
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json)
Hash identifier: kRfLnOancGn+an8wOW2VSx2J68sWQ/3p4e4NqcT+9PM=
Subject key identifier: 7E:D6:81:6A:3E:36:64:15:55:37:57:1E:41:1F:D1:B5:29:E0:62:D3
Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
Manifest number: 010E
Signing time: Sun 01 Mar 2026 22:27:00 +0000
Manifest this update: Sun 01 Mar 2026 22:26:59 +0000
Manifest next update: Sun 08 Mar 2026 22:26:59 +0000
Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: CawVNDFzTXVmYaf7ARRv7Zoh5hnyf5eIyec/+t2ZTb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Validity
Not Before: Mar 1 22:26:59 2026 GMT
Not After : Mar 8 22:26:59 2026 GMT
Subject: CN=69a4bd34-7629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:e3:3b:d0:41:9c:ea:28:04:0c:5b:2f:11:
9a:27:ec:1a:63:2d:fb:1c:d0:c5:ff:8b:96:85:47:
82:22:01:3d:33:86:f1:c3:b0:72:04:45:04:e1:47:
90:cb:b2:3d:df:2d:b0:ed:0c:2b:f5:f9:60:84:46:
c2:3d:6c:4a:98:c2:36:03:14:16:09:98:a6:53:c3:
37:b9:6a:11:97:42:0c:5e:a9:8a:4d:5b:1d:58:16:
33:7f:a6:9e:88:d9:f3:73:90:16:57:d3:a9:74:f9:
70:75:bb:d3:1b:9b:91:3b:4f:3a:10:d7:ff:7f:40:
42:8c:55:8a:c3:fb:ce:96:c6:13:68:51:2d:ad:d5:
12:61:17:b3:0e:a5:25:31:13:e9:9a:a1:d3:27:26:
c7:9e:73:a1:77:f1:c2:9c:1c:6c:0a:db:9d:bb:a2:
9c:45:45:64:66:ac:ef:65:15:39:96:a6:8c:17:da:
94:ee:bd:29:db:47:47:ab:ee:4e:ce:06:ab:5e:58:
b5:4e:67:2b:3a:ad:58:e5:cd:0a:9c:97:24:c5:d1:
b1:24:d8:8c:a8:a7:6d:da:f5:ed:0f:61:62:5f:29:
41:c9:f2:c5:6c:3e:b4:9c:99:bc:31:b9:69:6d:ae:
66:92:ef:2b:74:6b:75:cc:3d:ad:cc:79:f2:06:77:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:81:6A:3E:36:64:15:55:37:57:1E:41:1F:D1:B5:29:E0:62:D3
X509v3 Authority Key Identifier:
keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:92:e6:21:e6:23:d6:ec:26:56:5c:ab:60:af:3d:96:93:d3:
31:4b:16:8a:84:92:48:89:6b:ee:f8:d3:54:13:5c:ae:a5:4c:
71:c2:75:88:73:58:3b:ee:a3:fe:c2:30:aa:c0:e5:73:4f:47:
9b:18:69:41:bc:41:b5:34:78:b1:5d:4b:19:45:0e:f6:1b:f8:
e2:54:7d:dc:eb:c7:e8:3d:c2:f1:82:2e:90:f2:59:b2:a2:e6:
37:0e:71:45:6e:31:2e:3a:7a:40:2c:55:22:fa:05:1f:12:f4:
c8:e9:ef:36:54:cf:02:fc:15:57:22:ae:4b:f2:d3:dd:b3:b3:
28:ee:fc:ef:80:4d:7f:1d:4d:d6:c5:90:4f:c3:12:17:7b:1a:
4a:ca:34:1a:7f:86:06:b1:d7:65:86:a8:a7:fb:b7:c0:5e:7b:
f0:e4:e7:fa:39:ea:ce:83:a5:bb:6c:a4:81:23:c5:dd:97:15:
62:3c:cd:2b:46:14:6b:de:46:7c:0f:d1:b3:f7:30:7b:93:2e:
0c:b1:2f:2d:da:22:1c:83:de:dd:78:c4:61:f0:c1:83:30:7c:
95:fb:ce:a1:1c:ed:79:77:b8:7f:7c:4f:52:4c:97:f9:02:3e:
d2:9e:c8:be:45:fe:12:36:08:5e:51:dd:d9:43:0e:06:14:e8:
f8:c5:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:32 2026 by rpki-client