
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier: Bf0BMyuFTuAWvsZK5RY/6EJML7nVaUauMv/O5frQdAw=
Subject key identifier: 21:C0:CB:8F:0B:1E:73:5F:62:27:6D:6E:B5:F9:A5:AC:02:72:BC:4B
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number: 01BE
Signing time: Sat 21 Mar 2026 03:02:32 +0000
Manifest this update: Sat 21 Mar 2026 03:02:31 +0000
Manifest next update: Sat 28 Mar 2026 03:02:31 +0000
Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: uGKsN6yDeSBso6xiqL7MbiHeJxjfOBm7O6xxj0xn308=)
2: AA02862E890C11EE87862551C4F9AE02.roa (hash: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Validity
Not Before: Mar 21 03:02:31 2026 GMT
Not After : Mar 28 03:02:31 2026 GMT
Subject: CN=69be0a48-8e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:5f:08:a8:c7:43:8d:2a:88:48:7f:a4:04:
56:4d:12:d5:e6:2a:d9:8a:de:8c:4b:68:db:2d:7e:
13:25:56:2d:0d:83:e7:1e:d7:7b:92:1c:d6:93:56:
48:ad:7f:e9:cc:45:42:1b:c6:68:f0:b2:e1:10:f9:
9a:4a:1d:e7:19:1a:ef:48:c8:ef:c0:69:27:9f:3d:
d0:7b:d9:e8:67:57:29:57:ca:d9:71:fd:5e:f5:1c:
11:50:2d:9c:a5:15:f7:6f:81:03:c7:85:3c:40:11:
70:35:a8:0d:22:94:bd:93:15:92:ec:66:05:2a:61:
fe:22:49:22:da:b9:fc:19:68:ad:9c:19:60:d4:e8:
c9:52:1c:6d:55:d1:e3:97:8d:60:85:7c:07:4a:07:
8b:43:b2:22:8d:08:d4:d1:16:e9:7a:19:82:b2:80:
9c:83:07:88:b2:36:45:45:ea:58:5a:f3:f7:93:4d:
9b:ea:96:ee:fe:10:23:7c:cc:12:44:02:47:2a:a1:
f4:16:0f:5c:45:58:77:7b:42:23:4b:e9:a7:58:1c:
f0:72:17:39:ed:8e:56:a0:28:3b:3e:06:8d:61:5f:
8e:74:86:15:a8:cd:a0:8b:1a:94:7d:43:8d:e5:27:
54:2a:5b:01:6d:c3:81:df:b1:aa:70:a2:cb:6e:4b:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:CB:8F:0B:1E:73:5F:62:27:6D:6E:B5:F9:A5:AC:02:72:BC:4B
X509v3 Authority Key Identifier:
keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5a:1d:bf:bc:18:54:7f:73:aa:a9:28:62:4d:9c:b1:a2:9d:
d4:dc:2c:a4:76:27:43:a4:b4:51:b1:ff:30:5b:b7:80:0d:a6:
3e:6d:37:7e:36:4a:a7:0c:8d:8a:28:e8:a6:ef:75:ea:86:29:
1a:82:58:d5:9a:66:3c:47:20:72:b6:4c:f8:47:00:23:be:b2:
4e:f0:8d:d9:19:91:d0:90:7c:c8:41:86:5b:ce:b8:99:98:11:
a5:90:84:6c:69:5b:a2:b2:42:60:9a:e3:10:0c:dc:88:5a:6b:
5d:5e:a6:6f:b8:22:cb:13:05:ba:fa:aa:72:40:a8:a9:68:6e:
9a:3b:89:40:a3:d1:17:98:b2:6a:ec:40:0e:38:c6:c0:33:61:
1e:8c:94:a2:fb:9b:8d:e1:d8:bb:5d:ec:ce:81:81:83:be:0a:
b3:f6:bc:70:d4:ae:4b:b2:5a:4b:ec:e0:b9:08:43:c9:b5:de:
25:8b:6e:7b:37:7f:9a:31:6e:0d:9a:84:49:a0:55:ae:e9:9a:
78:f5:99:20:ab:20:bd:9f:ab:76:fe:2f:25:4c:6f:b2:b6:0a:
7a:bc:db:73:ae:40:8a:ab:47:13:c0:fb:a2:f1:ac:b4:8f:1b:
1e:c3:ed:76:33:56:02:9e:e3:61:cc:f3:4e:18:27:cc:3b:53:
f6:f8:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 19:56:54 2026 by rpki-client