
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier: GgqV+nu33orZSxTIWD20J7iuvKugEQbWwCmYfAV0zFo=
Subject key identifier: A7:FA:98:FA:4A:DD:CA:C7:DC:89:0F:4A:A6:8E:8A:D3:CF:76:FC:89
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number: 3A
Signing time: Sat 28 Feb 2026 20:32:38 +0000
Manifest this update: Sat 28 Feb 2026 20:32:38 +0000
Manifest next update: Sat 07 Mar 2026 20:32:38 +0000
Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: HrmzuhXyETxUtFY6kBwLwziVYphwjuvicdBgFx/eknM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Validity
Not Before: Feb 28 20:32:38 2026 GMT
Not After : Mar 7 20:32:38 2026 GMT
Subject: CN=69a350e6-2d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:76:56:7a:9c:38:cc:ec:a3:46:82:ca:74:
13:01:8b:9f:6e:ab:5b:86:c0:1e:05:23:87:c7:e3:
04:aa:a8:9f:0a:24:de:0b:8e:4c:bc:c2:31:27:c7:
a9:92:ab:e2:4a:f2:ff:17:3a:38:0d:9c:dc:60:06:
cc:43:04:c8:6a:30:86:2d:4a:a9:2d:4d:29:07:ed:
c3:56:03:5f:98:5b:a8:2b:93:90:d8:55:8b:db:98:
d4:aa:53:eb:4b:a5:14:8f:c4:84:03:50:ba:fd:79:
b2:3b:86:53:cc:92:8d:94:60:d9:e7:c3:cc:af:48:
12:10:e2:31:59:23:04:31:01:ad:78:e5:4c:9a:b3:
5e:99:e1:e6:2d:88:85:aa:33:62:93:3e:bb:d7:8f:
52:f5:93:eb:28:de:6f:99:96:76:8f:d8:10:22:3f:
70:08:9a:97:e9:0c:6e:30:60:bc:bd:6c:b1:bb:25:
93:f5:4a:88:6a:e9:89:b7:9a:c4:80:57:7b:df:9d:
03:72:c0:6c:cd:44:62:84:62:38:2d:84:19:38:ad:
93:32:1c:7f:47:9e:4c:24:7b:98:99:a8:4b:9c:48:
e9:0e:d0:18:3e:ec:92:ce:f0:36:93:22:4e:0b:67:
22:c9:dc:91:7d:a0:57:84:c1:03:42:77:b3:f0:92:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:98:FA:4A:DD:CA:C7:DC:89:0F:4A:A6:8E:8A:D3:CF:76:FC:89
X509v3 Authority Key Identifier:
keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:eb:1e:fc:e5:54:e6:c3:cb:98:2c:fe:41:ca:ff:3e:82:
e2:aa:b0:b1:1f:b9:a8:33:eb:79:47:47:83:6c:70:bc:c8:cd:
1f:9e:66:5e:d8:a4:37:2d:24:23:3c:fc:50:3c:6e:8c:08:3f:
58:a3:57:8b:6e:87:aa:b9:77:87:ca:17:35:c2:7f:5f:72:31:
d6:94:63:8f:3a:cb:c6:07:a9:32:fa:1a:23:cf:b7:b5:58:83:
c3:d4:3b:df:ba:4f:50:e9:3d:7e:f8:ef:65:b6:56:30:91:54:
26:f1:ec:08:fa:6f:0a:36:ef:33:48:7f:0f:c3:56:a7:71:2c:
7f:fa:8d:ae:c3:bb:c3:b2:cb:dc:93:57:23:10:db:a7:db:57:
f4:05:13:6b:dc:24:37:4c:cc:2b:6e:32:15:79:f3:59:db:21:
45:7f:a4:53:74:2e:c9:a8:59:4f:a2:ad:18:52:18:43:3c:e3:
8a:e4:67:e7:5a:b4:ba:ff:e7:17:6f:77:40:98:48:db:16:e3:
c1:b6:cd:54:e3:7c:c7:94:11:bd:71:6d:ec:94:6f:58:fe:d6:
7c:1d:82:7b:8f:f1:4d:94:37:5f:e1:92:48:69:d6:8f:ec:1e:
9b:cf:b8:6f:8c:be:f0:2d:a3:c0:32:76:5b:a2:0b:d9:de:7d:
8e:4b:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:08 2026 by rpki-client