
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier: Aksx38mEunwhVc7QwZAboIHshgSuZJ7psOoAyCuNt54=
Subject key identifier: CD:84:FA:05:8A:09:C5:B5:A7:B1:76:FE:C8:6B:FB:31:F8:1E:8B:EE
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number: 065E
Signing time: Sun 01 Mar 2026 23:34:05 +0000
Manifest this update: Sun 01 Mar 2026 23:34:02 +0000
Manifest next update: Sun 08 Mar 2026 23:34:02 +0000
Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: lEa2pPAtsWkqGhG3mM/YZi++YRZrFlfrGGoWmw3ZvVA=)
2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: cbfqMcMwqjcXfTnCUXdYhPSWB3uKfxrHrfD55mLoBo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Validity
Not Before: Mar 1 23:34:02 2026 GMT
Not After : Mar 8 23:34:02 2026 GMT
Subject: CN=69a4cced-60d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:13:fd:82:53:89:df:cb:93:0f:b1:67:0a:
04:7a:30:64:9f:04:86:c8:de:48:d1:f4:31:30:d5:
f9:5e:84:a8:46:98:b2:da:7f:79:25:8e:1f:fd:64:
a4:40:34:9f:1e:9c:41:45:72:01:0d:aa:c2:ab:f2:
9d:b6:a6:ab:b9:ea:03:c6:8a:8d:af:86:d5:49:24:
b4:07:78:67:80:0a:31:e0:f8:8e:33:b6:c9:87:bf:
00:bb:f1:24:e6:1e:be:cb:93:5c:dd:29:0f:84:55:
e7:63:02:13:46:6b:ee:ec:c6:57:49:1a:1e:a1:d9:
77:a5:9f:a1:02:80:f3:3a:5d:f9:7e:17:33:9f:ab:
7a:53:95:b5:ec:3b:d0:04:2b:e0:fb:67:02:46:e1:
d8:b7:96:77:b0:ea:6a:3a:4a:13:40:aa:9a:c1:c9:
f5:fe:6d:99:6f:6a:26:68:65:6c:fc:ef:3c:af:8e:
c0:f1:76:29:79:51:12:7b:24:72:8a:9b:53:b2:a6:
b1:e3:c5:24:da:00:0c:88:2b:64:b4:07:5e:24:f7:
1e:7d:05:d8:ef:c4:e3:c4:13:1c:23:c1:f3:30:31:
c7:1a:44:92:7d:56:33:f8:65:43:82:48:30:b6:4e:
98:2f:26:d9:66:01:fc:94:99:df:58:d9:16:38:c7:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:FA:05:8A:09:C5:B5:A7:B1:76:FE:C8:6B:FB:31:F8:1E:8B:EE
X509v3 Authority Key Identifier:
keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:9f:1b:70:c0:f2:1d:9a:b7:f4:01:04:60:8c:8b:57:13:
82:b2:27:6b:0d:b8:1f:98:09:c2:7d:56:80:39:8c:c8:44:82:
97:30:66:0e:b0:52:44:77:a0:98:8e:a7:e0:fd:64:16:27:8f:
d2:ba:5e:b3:8d:cd:42:f4:30:97:bb:99:1e:1c:f7:8f:0a:45:
05:a0:a4:90:13:de:f1:67:74:69:8e:02:99:71:f4:18:23:83:
a4:4d:4f:e1:82:b8:40:42:20:cd:de:e4:eb:93:3a:74:4a:bb:
cc:54:bc:71:8a:95:6c:47:42:45:ed:35:a0:01:10:c4:13:84:
11:5f:03:3a:a4:49:e0:e3:b6:04:72:58:ef:7f:31:06:da:a0:
4d:20:70:f9:66:fe:be:00:c5:52:31:ad:66:dc:70:5e:1a:92:
02:3d:e2:34:72:bb:74:9b:22:c6:a3:74:37:b7:91:f0:15:6e:
c1:ee:82:0a:94:71:06:6d:2f:d7:ad:05:9d:13:75:a4:0a:d3:
c2:73:d6:61:aa:50:e2:95:91:c3:9a:2a:37:0a:24:8a:df:73:
8d:dd:78:9c:e9:23:b4:45:eb:45:c3:b4:73:85:48:51:5e:42:
2c:39:7f:b5:82:2e:cb:17:7a:94:e3:e2:ff:55:ac:2b:f8:59:
15:4c:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:08 2026 by rpki-client