
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
File: dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json)
Hash identifier: Ifa9CEzqY9yGCdXBkC79tf841IyP7HKc+SxZmqtTdEo=
Subject key identifier: 21:91:F2:3E:42:CA:E8:0C:CD:3C:82:10:FC:DD:B4:D9:B2:7D:67:1D
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial: 0875
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
Manifest number: 0861
Signing time: Sat 28 Mar 2026 20:36:59 +0000
Manifest this update: Sat 28 Mar 2026 20:36:58 +0000
Manifest next update: Sat 04 Apr 2026 20:36:58 +0000
Files and hashes: 1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: 34OYXAKqR28K5/TvfllwC77ojiHP4nBL7/2eIYz1CkQ=)
2: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: 83NmbAy2cIXc5RFQjEGxhaLUliH4l24y6tTy7l/cCdI=)
3: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: yZMlmWs6ehiqiK21MWo58HZmpGkvpysqNROF9+RqzZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 20:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Validity
Not Before: Mar 28 20:36:58 2026 GMT
Not After : Apr 4 20:36:58 2026 GMT
Subject: CN=69c83bea-2475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:00:06:74:97:41:aa:29:c5:67:03:ac:b2:
f8:2a:08:3e:fb:b5:b8:a6:38:4d:8d:63:b7:9e:f9:
4a:d8:e3:01:fe:f7:43:b2:f9:dc:2f:be:03:79:6f:
88:7d:80:42:5f:94:b1:06:d7:3e:30:d0:f3:a0:b0:
3f:ae:bf:7f:66:44:ea:5a:f7:5f:90:72:46:07:a4:
8a:bd:c8:c1:bc:ec:1d:25:73:22:b5:06:f5:0b:ca:
88:5a:72:0d:72:13:02:ff:9e:b6:77:af:61:0b:0f:
86:39:62:9b:00:95:57:07:a7:c1:94:62:ff:be:bc:
78:fa:c5:8c:b4:b5:b3:25:92:a3:cf:13:0b:e2:ee:
fd:99:a4:d5:be:ec:ff:4b:81:96:d5:86:b7:33:08:
ee:16:43:50:39:68:dc:17:73:25:dd:42:d5:a8:29:
81:a4:1d:11:cd:0d:71:f8:2c:1d:d1:e0:75:ac:75:
9e:e2:12:3f:88:d5:cf:5a:39:3d:48:4e:a3:9d:d1:
03:66:83:53:00:ce:17:bc:f8:bf:92:a2:ba:42:b7:
55:0a:8a:1e:b7:3d:3a:86:88:41:e8:14:88:7e:19:
76:4a:c2:26:78:15:24:ce:80:4d:e8:f6:62:c5:89:
eb:ed:69:7b:e9:9a:8b:28:2b:64:3a:a1:89:a8:e2:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:F2:3E:42:CA:E8:0C:CD:3C:82:10:FC:DD:B4:D9:B2:7D:67:1D
X509v3 Authority Key Identifier:
keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:42:7f:14:52:4c:f7:78:9f:73:8e:0b:75:e4:82:64:a6:
3b:2c:7a:5a:65:9c:95:62:8f:ac:55:a7:63:d2:fb:3c:b0:52:
7c:9a:31:88:9c:e3:34:cd:52:9f:b1:e8:43:a3:a0:10:47:3f:
c8:b1:1c:77:dd:f4:5e:df:df:0e:52:ab:07:b3:a7:27:56:06:
2f:d2:0b:8b:4e:af:0d:01:21:33:db:19:89:c2:16:65:66:64:
d1:4e:e7:8c:6f:59:cc:17:02:58:9e:18:cf:28:a2:90:4a:29:
45:a8:70:aa:36:ae:96:0d:f4:cf:8c:fc:73:c6:0c:ae:59:88:
22:fc:5a:59:b9:6a:fc:51:ec:c2:de:76:27:55:5d:52:2b:89:
55:b4:a8:70:e0:5f:20:17:ba:97:66:82:64:3e:0b:e6:fa:b3:
ca:a4:1c:de:ae:0b:5b:0b:90:79:45:ef:8d:e3:a8:d2:46:b1:
5c:be:11:a5:43:69:1b:9c:1f:5c:63:6f:0d:29:90:89:5a:1f:
ab:24:02:a2:fd:ae:10:4b:2b:8a:d4:63:d1:f3:08:26:7c:58:
8b:81:0f:19:ca:45:81:7b:0d:44:6e:eb:cc:44:8f:5c:b8:af:
21:41:f9:af:96:07:e7:62:8d:ee:dc:06:44:c2:3e:b4:e1:68:
16:b3:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:59:13 2026 by rpki-client