
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: 5m2R3lAQapI21kFhKXB/4CmXolXuz3pLYXWDH6p5Dy0=
Subject key identifier: FC:D7:89:17:DC:E5:CC:62:3A:48:1E:C4:73:C6:CF:E8:EE:80:32:1E
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 13EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 13D1
Signing time: Mon 20 Apr 2026 16:54:07 +0000
Manifest this update: Mon 20 Apr 2026 16:54:06 +0000
Manifest next update: Mon 27 Apr 2026 16:54:06 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: WJ3GBZuJ2iosiEiO9CXyAKS44/X6+G/MOLToLBNqQNk=)
2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 16:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5100 (0x13ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Apr 20 16:54:06 2026 GMT
Not After : Apr 27 16:54:06 2026 GMT
Subject: CN=69e65a2e-568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:77:20:8c:48:3b:7c:86:27:c4:e6:58:89:
3b:5f:f1:71:c6:a9:37:21:a4:6f:e8:51:a8:29:5d:
b3:f5:52:f2:ff:34:16:b6:69:06:65:14:85:1a:a9:
d2:87:87:2b:95:fc:b1:a7:24:25:0e:68:a7:2f:38:
c1:27:b6:da:b7:1a:12:3f:eb:e9:92:73:3b:af:65:
df:c2:5c:d2:44:56:ba:e1:90:d0:d3:03:a3:96:e1:
19:d9:49:03:8d:45:29:cd:22:40:cb:04:66:56:b7:
eb:9b:25:24:40:cb:9e:a7:11:d7:2f:fe:69:22:b6:
bd:33:4e:e6:0d:b6:bb:3b:cb:68:39:37:04:3e:e6:
5f:77:39:7c:79:c9:ec:8e:b7:b6:39:39:06:28:86:
ed:96:5d:34:30:93:5d:c5:ba:ea:93:3d:a7:d6:45:
e6:0c:27:28:64:6e:2b:e5:53:01:de:1f:c4:f3:4e:
27:e2:29:6d:3a:59:fc:fc:67:91:6a:8f:bd:77:d3:
e6:10:f6:93:db:5b:f9:af:0c:d6:3a:38:67:de:d0:
14:0f:7c:c5:95:38:52:b6:33:f8:3a:6c:93:2a:c1:
9e:3f:34:57:7e:db:12:97:ed:96:59:85:58:43:ef:
d2:d5:ac:42:eb:59:bb:f8:2f:ca:59:12:94:8d:42:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:89:17:DC:E5:CC:62:3A:48:1E:C4:73:C6:CF:E8:EE:80:32:1E
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:78:f1:e1:dc:80:79:2a:c4:3c:2f:cb:cb:09:c8:7f:04:
0f:44:c7:f0:da:7d:16:bc:06:02:dc:8a:54:5a:52:a9:c2:de:
b5:7f:ad:a5:47:18:67:6d:22:2d:bd:7e:ab:c7:56:96:de:fe:
fc:09:07:4c:7d:f9:68:4e:7f:df:7e:e8:32:4a:3b:51:fe:c1:
27:77:be:8d:37:c8:07:31:21:93:fe:c4:aa:4d:6a:7c:03:e9:
05:e3:fe:4f:08:0a:1d:e8:77:17:6d:96:1c:81:b0:27:5b:0c:
cf:8a:6e:fe:a4:c3:03:12:b5:c9:e1:74:ea:92:3f:fb:95:4e:
64:60:49:c8:f2:15:89:32:44:34:8f:be:9d:ac:08:a8:f9:c9:
80:61:62:e4:1d:67:67:c8:57:8d:55:1a:50:0e:1e:1c:53:fa:
29:60:a1:a1:db:e2:81:0e:de:cd:98:08:06:24:0a:00:49:d7:
87:cc:57:45:22:90:30:e9:cc:2c:6b:4d:8e:1a:3f:08:46:a0:
59:dc:9d:fe:61:74:a5:93:50:e1:bf:69:a4:56:e6:7d:51:40:
66:6b:62:50:d1:b8:04:c5:9f:0a:93:ff:5f:de:2a:80:79:bc:
cc:9d:b3:fb:cf:14:3b:69:33:0e:70:52:5c:34:1d:f7:e6:2d:
67:c0:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:56:00 2026 by rpki-client