
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier: nSYgBeYAiiBrXUeYCr1gw0mkCxXqEAHy9V/FAAS4AMA=
Subject key identifier: 53:85:37:3F:24:82:D2:B8:E5:A8:5E:4A:74:13:BE:85:B1:03:35:72
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial: 0690
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number: 0687
Signing time: Wed 20 May 2026 22:33:19 +0000
Manifest this update: Wed 20 May 2026 22:33:18 +0000
Manifest next update: Wed 27 May 2026 22:33:18 +0000
Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: NiAN1wp1HeUbB6dWpEayEs5Y633u3t1VuNK72AUAW/I=)
2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: cbfqMcMwqjcXfTnCUXdYhPSWB3uKfxrHrfD55mLoBo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Validity
Not Before: May 20 22:33:18 2026 GMT
Not After : May 27 22:33:18 2026 GMT
Subject: CN=6a0e36af-a186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ad:23:a2:f8:3e:a6:36:ab:21:12:f6:25:
49:ae:3a:cc:5b:78:10:4a:8e:dd:fd:52:71:cc:68:
59:1e:77:74:32:a8:26:cf:0a:2b:20:38:a0:27:94:
e8:66:6e:9b:d1:a6:34:f6:aa:ca:1f:a0:e1:c3:cc:
50:6f:19:fa:7a:19:de:9d:64:31:78:b8:f2:38:15:
56:d4:b3:90:b8:45:8e:25:71:83:c7:c3:7b:a5:08:
2f:01:60:7d:8d:44:9c:bd:b9:03:c2:86:d2:8c:7e:
76:59:83:df:2d:10:e1:4a:85:84:bc:15:b4:67:b1:
4f:6d:42:51:69:a6:48:f2:02:53:2b:80:cd:6e:4b:
44:71:f9:13:2e:a8:ba:a0:34:93:5c:26:21:43:08:
45:9d:83:24:70:40:4f:9d:a4:c0:4b:99:65:dd:52:
32:00:b5:95:1a:e5:84:45:34:4c:78:89:1d:a1:80:
23:35:00:46:72:9d:ef:b6:19:41:cd:8d:c0:4a:34:
86:03:c6:a6:91:c3:97:f8:a7:b8:1a:bb:a8:e8:50:
09:a8:f7:16:5f:11:fb:a2:f4:97:34:32:a4:8d:56:
06:81:cd:f8:d6:98:be:cd:2b:a2:1e:ea:6a:b2:03:
d6:b5:ee:dc:fb:3f:96:1e:32:8d:5b:5a:e7:2b:ec:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:37:3F:24:82:D2:B8:E5:A8:5E:4A:74:13:BE:85:B1:03:35:72
X509v3 Authority Key Identifier:
keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:72:f1:cf:aa:16:99:a4:9e:f0:5e:b4:39:11:0e:52:f0:
7c:31:2d:73:d1:57:64:98:3b:ba:d5:8b:ff:2b:c9:4e:77:0e:
8f:c8:ab:f0:c2:83:c1:c1:65:ee:aa:10:e1:e8:5c:a9:7e:1c:
38:af:13:51:d1:b4:61:02:72:f6:f1:88:99:10:5f:2b:ff:ac:
52:fb:1a:f7:5e:12:29:81:68:77:e3:c7:dc:64:88:76:c8:a8:
e5:bd:5a:4d:1a:89:bc:fd:a4:a8:1f:ee:ca:6b:a2:dc:cd:e9:
c8:82:63:8d:95:32:f0:a5:05:6f:34:da:f6:73:35:17:c1:72:
5f:3e:35:af:d6:9c:d6:4a:57:d2:55:40:d8:78:02:97:33:59:
80:a7:37:e5:5b:bd:99:4a:d2:5d:6a:da:f2:b6:97:d4:3a:4d:
fd:93:2e:74:3f:84:42:f6:00:98:ed:53:91:48:2a:0c:2b:63:
5c:19:b0:73:8c:4b:ba:17:97:6a:10:9a:90:6a:60:f8:3e:7b:
28:db:4b:a2:22:17:10:4b:58:f6:f8:2c:6b:4a:ec:24:85:d4:
97:af:80:8f:2e:46:3b:32:37:ea:e5:0f:ab:d1:90:94:bf:89:
48:1f:70:f6:9a:d0:df:0c:b5:b1:0c:ee:40:c8:e8:1f:1c:b4:
f8:84:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:13:00 2026 by rpki-client