
$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier: dnilAQtq+BCvigOUNeooMbtyv5a394mEuCUEkxg+LSo=
Subject key identifier: 85:7B:97:5A:26:9C:92:ED:00:CE:13:51:D5:8A:C3:2F:06:22:4F:60
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number: 9E
Signing time: Sun 05 Apr 2026 06:46:00 +0000
Manifest this update: Sun 05 Apr 2026 06:46:00 +0000
Manifest next update: Sun 12 Apr 2026 06:46:00 +0000
Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: TehnUitlyicJtHhTGONp6unkgAxheJfIiq6TxmKgu78=)
2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Validity
Not Before: Apr 5 06:46:00 2026 GMT
Not After : Apr 12 06:46:00 2026 GMT
Subject: CN=69d20528-920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:c6:4d:f6:09:b6:86:50:21:9b:c9:74:ca:
e8:66:29:6e:76:49:36:42:40:dc:fe:c8:cf:07:2f:
5f:5f:8a:cc:73:cf:7b:c4:85:de:e8:50:96:c7:6d:
e2:bd:40:99:eb:ae:b8:ad:82:46:d6:3a:43:08:e2:
29:d0:5e:19:9d:ed:4d:d1:af:f7:ea:b1:a4:2e:90:
6f:38:2f:bd:37:67:68:0b:44:69:ee:02:27:a9:d3:
e7:65:82:29:37:84:23:d0:0e:dd:02:8c:35:8c:4f:
90:62:be:b7:83:1a:b5:3d:6b:5c:b8:6a:a3:fe:6c:
e6:e9:8f:56:c2:ec:a2:d6:c3:00:f0:d5:e5:f4:c2:
76:a0:82:5b:5a:50:10:a3:22:0a:d8:12:74:42:80:
bd:8a:4e:64:db:70:e1:69:bc:d7:0c:b7:b4:62:21:
bc:a4:61:61:6a:92:06:1c:f4:34:c2:4a:05:4b:24:
37:b0:2a:8c:05:43:58:1d:bb:e4:d1:9a:c1:e7:71:
b3:93:76:73:61:ea:04:78:32:6c:1d:40:8a:24:dd:
99:3e:83:77:a5:ff:34:5b:6a:16:ed:13:c4:bb:c9:
f6:30:57:85:56:ef:4f:5f:35:0b:57:8d:75:af:4d:
0d:b0:6c:a8:a2:97:5f:a1:75:2f:48:75:16:d6:2a:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7B:97:5A:26:9C:92:ED:00:CE:13:51:D5:8A:C3:2F:06:22:4F:60
X509v3 Authority Key Identifier:
keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b6:9a:f2:e9:7b:f9:95:0f:f5:b3:e6:95:1b:ba:a3:93:cd:
3e:67:27:47:72:77:5d:1e:af:71:54:10:9b:f1:5a:46:8b:ff:
64:17:4e:50:b1:6e:81:75:3e:8e:12:92:e2:ff:18:8c:6b:53:
6a:73:d1:53:31:c0:db:75:be:16:29:de:e8:4c:bd:82:fe:03:
94:23:5f:ca:03:72:4b:66:94:63:28:32:fb:88:9a:f6:04:35:
1c:03:86:42:e7:99:a1:4b:f1:ee:ce:6c:e3:46:b9:19:d4:31:
d0:da:51:a3:41:6e:5f:1d:1b:bd:41:8e:c5:fb:43:b9:b6:58:
d9:98:b9:f1:9d:4c:f1:ff:45:88:5b:1b:57:99:68:c2:72:b6:
54:ae:b0:c2:df:4b:aa:bf:c0:6c:ae:3a:cf:df:46:62:a6:09:
95:95:c8:06:d1:b8:5a:79:94:39:c5:04:41:06:c3:c7:d1:e3:
88:45:c1:84:c1:89:73:4c:56:1d:63:12:4a:2b:ba:76:ff:1d:
ad:fb:30:da:03:4b:40:3b:f8:d9:75:21:0c:3d:2a:3e:ae:9b:
9a:3e:24:bd:0e:4b:36:dc:12:e7:cd:2e:c8:37:92:79:b3:fc:
ee:34:bd:bc:e6:42:5a:81:81:24:af:be:b7:86:0b:c3:ef:1d:
7e:5b:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:28 2026 by rpki-client