
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: Evrc+zQHFBfV48Gr65l5EZyAPY8Uq66VP5RFEzTyrNA=
Subject key identifier: 9D:77:60:A8:00:C3:00:F8:0B:D0:05:8F:66:43:1E:C7:33:4A:06:9C
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 01FB
Signing time: Sun 05 Apr 2026 02:42:22 +0000
Manifest this update: Sun 05 Apr 2026 02:42:22 +0000
Manifest next update: Sun 12 Apr 2026 02:42:22 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: wHp9rLpr5n+W06srkCDu6P/7Zwos5ptPpOjCjngYyYc=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Apr 5 02:42:22 2026 GMT
Not After : Apr 12 02:42:22 2026 GMT
Subject: CN=69d1cc0e-cdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:1c:19:7e:fc:c2:a7:78:9a:7c:5b:fc:2f:
c5:5c:2d:1b:4a:62:c7:bf:14:41:cf:bb:11:94:85:
77:a1:d6:86:94:b6:99:3c:c7:9f:97:94:a9:a9:ae:
ba:4f:1a:e6:d1:d9:5d:f2:e2:15:8b:54:60:0d:8b:
8d:0a:27:48:c3:3f:11:b1:7c:6b:5f:be:4f:a1:29:
aa:22:3a:76:8d:15:eb:8e:c7:76:f9:f1:74:66:ea:
d7:e0:7e:ea:ee:8b:87:a2:42:71:d8:3e:f0:65:dc:
f7:3b:44:28:09:90:ae:5c:91:29:22:1f:c8:5c:ed:
2a:1b:87:4a:bd:11:34:13:a6:a8:f4:8d:1a:c1:c7:
1f:94:df:4f:a6:87:5f:50:c7:ca:77:24:3e:4e:6e:
35:08:fc:3d:fd:88:a2:17:53:51:f5:14:da:b8:60:
57:f0:9b:35:60:19:3c:97:ce:b9:ab:c7:b3:cb:dc:
e1:f8:22:59:f3:a3:28:4c:d7:c3:9c:54:66:5e:de:
3e:5d:ce:1a:94:05:76:ae:59:91:81:66:b2:ec:dc:
5b:2a:38:3f:cb:b6:36:12:1a:1d:79:ce:90:13:c5:
f3:34:48:dd:3c:eb:ec:0b:b2:97:ee:cd:a1:77:a5:
29:41:f3:dd:9e:c2:28:a2:11:a4:66:92:b8:f7:b8:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:60:A8:00:C3:00:F8:0B:D0:05:8F:66:43:1E:C7:33:4A:06:9C
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b3:fd:00:52:58:1c:44:f9:45:e5:1b:27:15:8b:87:64:a9:
f7:3d:58:81:c5:5b:4b:68:b2:e2:9b:ee:a0:e7:0f:aa:d8:4a:
7f:48:a7:88:9e:f0:63:91:a0:92:73:d2:73:8d:26:a0:46:2f:
6a:90:c0:b0:f0:44:52:02:79:ff:77:67:09:61:26:be:31:4f:
75:b2:c9:2d:39:ed:04:2c:4f:38:74:cf:c6:89:71:56:6c:5c:
cb:ce:99:ef:a8:f7:77:b2:26:3a:47:e0:2d:86:26:75:9f:67:
85:e3:89:bc:6a:c1:ab:3e:a4:d2:2f:e8:a7:62:0c:93:4e:70:
70:6d:28:cb:14:14:e8:90:6f:1a:d1:e4:66:8c:df:fc:a6:66:
89:05:2f:3b:b4:86:17:f8:32:6a:7c:9e:24:d6:bc:25:0e:61:
23:23:06:28:7f:c6:aa:9a:a8:f8:71:06:7d:de:55:2d:d5:5b:
21:69:9b:3e:6d:97:d5:ee:ef:8f:a4:e0:2f:0f:d7:1e:ed:e5:
64:e8:7c:2e:d4:90:d9:b1:ec:6a:19:81:63:6f:21:15:bc:35:
3e:f6:bc:95:b9:9b:7b:d1:e5:3e:59:70:15:ac:83:7f:74:5e:
88:72:e2:36:20:0b:ae:83:46:fa:f5:28:07:02:fe:c4:85:df:
0d:f0:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:56 2026 by rpki-client