
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier: HJhAhLpKMEhggBzcJAs42Jq15EgIDAiavlGl6hHS4pg=
Subject key identifier: DA:D0:EC:D9:A6:F2:69:48:EE:FF:39:EA:17:2F:F5:E8:C9:8B:70:0E
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number: 7C
Signing time: Sun 01 Mar 2026 22:26:12 +0000
Manifest this update: Sun 01 Mar 2026 22:26:11 +0000
Manifest next update: Sun 08 Mar 2026 22:26:11 +0000
Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: BZdf8Wl1af/2xpw7ooQWAwHWdkfmqWK6iegQEvqHUnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Validity
Not Before: Mar 1 22:26:11 2026 GMT
Not After : Mar 8 22:26:11 2026 GMT
Subject: CN=69a4bd03-6e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:54:24:32:3c:9c:3e:b1:49:4a:b6:12:42:
c6:25:97:73:0b:af:f5:89:a0:71:09:a1:be:42:0f:
59:fa:65:a2:79:4b:d5:01:ef:8c:68:b8:17:3f:ee:
14:2b:e9:1a:09:cb:dd:28:ab:7a:98:1d:90:c2:a7:
6a:18:7c:47:36:bd:00:a7:45:86:fe:d7:84:57:92:
ca:ae:3a:82:c6:7f:ac:2a:bd:26:75:78:1f:0a:e6:
bc:a4:89:5a:d0:90:72:9e:64:c8:cb:fa:1c:40:a8:
a9:33:d1:17:49:83:fe:ce:78:94:96:da:bd:c0:4d:
d3:87:4c:9c:23:2a:c5:0a:ec:85:ce:86:26:9b:62:
e0:09:02:ec:3d:77:f7:ce:fb:31:7c:35:ab:66:3d:
26:6b:53:f5:ab:18:4f:bf:72:7d:18:8b:5b:22:e9:
49:fc:18:af:a0:37:14:61:45:50:7b:3c:09:9f:3c:
2e:4f:90:63:00:8e:31:64:b4:d5:bc:a8:bd:87:8d:
ea:59:be:13:3a:4d:f5:df:2c:fc:ee:43:70:38:76:
b3:03:8c:4d:fe:61:e5:af:0b:20:66:f3:69:96:55:
92:15:69:15:8b:61:4a:07:e8:22:88:58:3b:06:6f:
74:df:12:34:b5:e9:ef:d1:75:c7:23:e7:11:ee:a0:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:EC:D9:A6:F2:69:48:EE:FF:39:EA:17:2F:F5:E8:C9:8B:70:0E
X509v3 Authority Key Identifier:
keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a4:ef:ec:74:81:72:4c:4a:42:c7:aa:5b:75:5a:e9:5f:bf:
a1:fc:2b:c7:64:a5:98:d2:93:78:84:c9:ee:7b:c7:19:84:2c:
2b:48:68:10:6d:46:3b:67:2c:8c:2a:e9:17:b8:4d:57:c9:1a:
4c:bb:64:c3:64:66:67:ea:13:70:96:02:a6:6c:df:06:39:d2:
fa:ed:75:b1:b2:5e:69:22:99:64:3e:0b:b3:7e:d0:cd:89:5d:
cb:48:47:3e:da:59:0f:a8:47:0d:78:5e:f1:ff:f3:ab:97:b8:
8a:eb:46:0b:4e:00:98:f9:9c:95:0b:6b:e8:d3:48:73:2e:e4:
c2:8d:e2:06:fa:fa:67:04:ca:47:c3:6f:36:ed:21:49:de:cd:
be:5e:51:d0:d2:e3:a0:78:2d:0e:3f:31:a0:56:bf:c8:fc:69:
9d:44:06:61:64:1e:fb:df:bc:c4:06:d5:71:b9:a3:15:68:5e:
1b:fc:91:02:10:10:b9:4b:b3:78:99:79:1d:cf:9f:e6:49:f0:
e7:93:33:e9:1f:a2:87:a2:bc:01:34:e9:c0:80:ad:98:fa:8d:
cd:ed:4d:2b:4a:24:ed:8d:2b:be:c5:f6:91:91:d5:62:81:13:
2f:aa:cc:f1:ce:63:1f:a9:95:aa:ae:08:84:12:03:6c:03:56:
27:81:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:12 2026 by rpki-client