
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json)
Hash identifier: MM0R6mZJ/vVTvHP9uWzS0uVAt9boXmFoFmQujbayt04=
Subject key identifier: DD:2E:D8:A8:83:F4:31:0F:00:89:7E:41:F7:75:83:96:53:45:B4:38
Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
Manifest number: 0101
Signing time: Sun 05 Apr 2026 05:34:00 +0000
Manifest this update: Sun 05 Apr 2026 05:34:00 +0000
Manifest next update: Sun 12 Apr 2026 05:34:00 +0000
Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: HZGSZZ861Gr5Exkywfo44KG89YN2yDDSn+XwgnOB7co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Validity
Not Before: Apr 5 05:34:00 2026 GMT
Not After : Apr 12 05:34:00 2026 GMT
Subject: CN=69d1f448-fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:a0:8c:33:97:db:af:2a:c4:a1:aa:2b:2e:
ae:07:36:2f:88:55:3d:5a:c5:2e:e2:33:a9:8f:00:
bb:eb:62:5e:3e:61:10:5a:63:ad:29:8c:e6:dd:aa:
b1:79:2c:96:cb:82:f8:ec:85:e6:98:3f:14:d1:b1:
22:ca:2f:4e:c7:6a:83:24:ce:fe:d7:2b:66:20:4c:
09:fb:47:b1:54:cc:74:78:ba:cf:ac:d5:32:7a:e5:
1c:d3:59:d4:67:ef:c0:9c:d1:97:96:b4:74:a7:d1:
09:d7:11:ae:9d:d6:30:b7:34:a3:26:4f:77:83:fd:
01:69:c1:74:d5:64:73:9b:10:c8:71:b9:29:24:60:
65:3b:25:91:49:33:2d:fe:d4:49:26:5f:d7:37:e4:
72:28:bc:9e:bd:24:45:28:2e:9b:a8:d4:f5:68:40:
29:f4:4c:16:0a:97:ba:9e:a9:df:ec:96:a3:12:3e:
9d:de:ed:e3:cc:b5:22:d3:7c:6c:3e:dd:75:0f:c8:
9f:cb:f6:e2:23:5d:86:8a:bf:76:ab:1f:e0:8a:83:
f7:00:98:98:92:cd:b9:2d:af:50:39:85:64:d8:c7:
4b:56:e1:e2:bb:1b:f6:1e:90:13:1c:68:51:eb:e9:
33:07:fd:5e:ec:51:ec:91:2b:9d:e1:fe:ad:af:db:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:D8:A8:83:F4:31:0F:00:89:7E:41:F7:75:83:96:53:45:B4:38
X509v3 Authority Key Identifier:
keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:44:19:57:95:bb:bc:64:21:05:84:b7:40:22:c1:ab:70:
34:fb:ee:f9:f6:32:1f:11:2e:01:54:2e:5c:e1:02:85:2f:25:
51:c8:d4:a2:ce:bc:61:ee:c8:0f:a9:33:23:fa:6d:cb:2f:ba:
b3:05:fd:c5:91:03:eb:bb:84:08:08:56:68:5b:ea:33:af:ae:
fe:fe:97:92:df:b0:57:cd:4a:34:0c:cd:36:b7:47:ae:64:82:
97:96:6a:b7:e9:2f:10:43:b2:7e:2a:45:c4:3d:44:57:6e:99:
6b:07:ae:53:7e:e7:25:62:b0:9a:ff:8b:ce:93:13:60:b2:99:
cd:76:d7:25:b8:92:29:f4:66:ec:b2:a1:cf:3a:dc:f6:48:0a:
c1:d5:ec:08:12:b4:cf:6d:0b:be:31:c1:b7:e6:81:8e:27:6a:
59:80:8f:0d:e2:ad:3f:f3:11:76:bd:5e:74:29:79:9f:4b:9a:
1a:81:ae:49:8d:37:59:30:17:72:a4:cd:b0:b6:a1:d8:54:86:
a0:89:67:b0:f4:c4:a9:34:be:3f:a3:06:a0:71:22:52:6a:0e:
99:ae:c6:22:15:ba:3f:92:63:83:df:e7:f7:47:1f:87:d7:f8:
ae:18:bd:99:4b:42:eb:6b:b7:c5:49:8a:ea:6a:b2:e9:7e:fc:
17:ca:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:06 2026 by rpki-client