
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json)
Hash identifier: xHpzpPtYY4twJpQ676rTVwm6FDY1oAh5Ex0DJjqVcqY=
Subject key identifier: 8F:47:9B:B6:9E:28:2B:91:A9:91:8C:54:D2:C0:BB:12:B5:2B:04:88
Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Certificate serial: 352B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
Manifest number: 352B
Signing time: Thu 16 Apr 2026 15:10:17 +0000
Manifest this update: Thu 16 Apr 2026 15:10:17 +0000
Manifest next update: Thu 23 Apr 2026 15:10:17 +0000
Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: imf+9Vv1TGZKRIKMXOeBjCoH4PlOCm1xxbfFSn6Pacc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13611 (0x352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Validity
Not Before: Apr 16 15:10:17 2026 GMT
Not After : Apr 23 15:10:17 2026 GMT
Subject: CN=69e0fbd9-61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:43:b0:c7:77:5f:5b:b5:7d:6d:b8:79:f6:
ee:72:d8:74:05:1d:c6:8c:16:1b:9c:f5:51:fe:f1:
4f:45:be:d1:9a:0f:47:3d:d4:e4:46:72:d9:ab:ec:
7a:74:74:95:60:a4:97:ed:ea:51:33:01:c1:53:27:
6f:57:7a:6a:f3:6d:c6:38:24:f7:14:00:6e:94:2d:
5d:7f:8b:da:a6:e3:62:d7:cb:c9:1f:4a:21:52:a8:
81:a1:d4:10:13:4d:b7:85:36:fc:87:d8:86:33:0f:
8f:60:9d:41:da:55:3e:fd:ea:ad:8c:4a:a5:5a:b9:
bd:67:bd:98:8c:93:b8:7d:a3:3b:58:69:64:45:99:
10:1b:aa:30:49:21:f5:30:f0:7c:52:ff:2b:ee:06:
aa:02:35:52:d2:71:75:0e:58:5d:13:14:22:b2:bc:
d6:bf:88:d1:f4:e1:d6:e4:48:33:dd:e5:00:98:ee:
3a:d1:6b:72:9f:54:f0:9c:17:8c:13:e2:aa:2b:bd:
e9:7a:c1:5f:0f:4a:10:06:f1:68:03:70:aa:9f:c5:
b8:4e:d7:05:57:8c:da:c2:be:22:01:12:51:69:61:
8d:29:8d:65:7e:8a:6e:6d:c6:67:b0:7a:56:98:d8:
34:9b:2e:59:7d:0c:77:fb:7e:f9:0c:d5:01:89:cf:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:9B:B6:9E:28:2B:91:A9:91:8C:54:D2:C0:BB:12:B5:2B:04:88
X509v3 Authority Key Identifier:
keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:ed:b7:56:9b:04:3b:e5:41:2c:d7:2f:e7:f8:bb:39:da:
4c:09:78:1f:c7:10:5c:30:68:66:3c:bd:b8:2f:2e:fe:2e:ff:
d4:8c:a4:e3:18:23:55:9c:10:04:a3:26:01:09:5c:a8:17:ab:
57:d1:20:5c:cc:15:8a:88:46:0b:32:29:ea:fa:19:95:38:38:
84:5b:18:f7:14:ad:1c:d7:f5:b1:98:ba:61:c6:4b:a8:96:2e:
e1:25:8e:27:5f:99:fa:fb:63:6b:44:2f:0a:05:e2:21:ba:f5:
60:76:c6:44:46:c9:38:93:f6:86:18:01:d2:ba:3c:12:a3:5b:
9d:63:81:f4:b3:c9:f7:2c:52:f2:d1:82:b9:d0:88:9f:91:17:
d3:7c:da:4b:3a:2a:3b:b5:e3:9d:4d:eb:98:5b:95:3d:65:69:
15:ba:fb:cc:20:bb:05:31:ef:81:b5:ec:05:0a:16:98:93:88:
d4:e8:a4:fe:81:0e:86:5b:b7:ee:01:8d:1a:00:f8:5e:0c:2d:
41:dc:c0:b9:68:ed:bd:6e:fe:0c:79:b5:59:a8:cd:ac:d6:2b:
e4:ac:55:3b:bf:16:74:aa:30:a4:84:87:86:66:f2:9a:7c:a7:
36:0e:19:3e:07:8a:85:fd:0b:5c:24:45:4a:60:59:42:dd:3d:
dc:b6:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:56:19 2026 by rpki-client