
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json)
Hash identifier: VKwYrCc3IKrU0lOnOLAZaVh1R/WaNIPBW2p0h+uYS10=
Subject key identifier: E5:54:20:56:FE:A6:B4:E5:E3:96:87:5C:5A:7F:B2:C9:26:EF:47:66
Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
Manifest number: A0
Signing time: Sun 05 Apr 2026 06:44:38 +0000
Manifest this update: Sun 05 Apr 2026 06:44:38 +0000
Manifest next update: Sun 12 Apr 2026 06:44:38 +0000
Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: IV5Ih8vIcaWUV5IegQEmf93P5JOVHsNrJr2d8nhHY5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Validity
Not Before: Apr 5 06:44:38 2026 GMT
Not After : Apr 12 06:44:38 2026 GMT
Subject: CN=69d204d6-d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:01:1d:31:71:c5:89:97:92:6b:f1:a1:ec:
e3:ab:c6:4a:31:97:79:57:3a:dd:53:2c:7d:9b:81:
c7:1c:9a:05:23:07:ab:c3:a0:31:c4:dd:b4:e0:bc:
b6:8e:e0:12:db:d4:a0:04:26:bd:a9:aa:1e:1a:a2:
01:ea:49:da:1f:c0:36:cf:18:4d:dc:3c:47:b1:b7:
c9:d4:68:a7:e6:8f:c3:38:47:a3:14:46:f9:47:a2:
33:59:2a:6a:71:57:ff:93:bd:fa:2b:b8:00:ed:d2:
a6:78:de:25:dc:10:47:95:02:1b:f2:f5:22:96:ab:
a8:f9:7d:6c:30:af:99:a4:5c:02:2f:a2:e2:24:0f:
09:7a:d4:db:07:a0:b5:f5:11:7a:1c:3b:12:17:aa:
96:e7:af:e3:16:f5:ac:14:50:4b:12:c9:40:11:f5:
f1:4a:d1:ff:00:52:65:0e:b6:50:8f:00:47:a7:a2:
d6:15:94:fd:82:86:86:5a:01:93:2a:67:1b:74:16:
dd:6d:13:2e:78:ac:ec:a0:a7:5a:13:57:4f:2f:e1:
19:b6:ff:55:02:30:b8:09:5a:6e:16:91:e0:b5:de:
19:3f:2d:01:65:31:ef:fc:72:56:fb:df:dd:d3:5a:
68:c8:05:91:b7:6f:28:06:69:e4:72:8f:8b:ea:24:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:54:20:56:FE:A6:B4:E5:E3:96:87:5C:5A:7F:B2:C9:26:EF:47:66
X509v3 Authority Key Identifier:
keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:4b:58:f6:ef:fb:72:c3:3b:70:42:24:d8:ee:e1:cc:e1:
3c:ac:34:93:35:15:ad:2c:12:d8:ae:99:6f:a2:ae:1e:7d:85:
dd:5b:92:7b:20:37:07:63:9a:66:02:05:97:00:83:fb:55:dd:
16:6c:e1:8c:11:48:ff:2b:9f:70:76:ce:45:dc:a1:c9:80:b8:
a8:0c:10:b4:eb:88:43:e4:3a:8f:1f:6c:46:4c:a4:66:62:64:
cc:3c:26:85:b1:7a:d3:69:66:21:a1:20:89:91:87:44:5e:a5:
ec:df:72:54:af:c8:e3:93:c4:0a:aa:37:a4:da:b9:c1:c2:a5:
f9:59:1e:c8:8e:b9:8f:cd:62:e8:ee:a6:07:ef:21:97:9e:22:
a7:68:0f:30:cc:1e:a4:d5:82:dd:a2:55:70:3e:e7:48:62:2f:
df:cc:e0:d8:9d:aa:2e:62:6a:97:75:dc:da:b4:2e:55:40:42:
11:13:79:67:90:1c:13:99:00:1d:ff:3e:a3:d1:63:ca:83:08:
a1:47:c3:4d:7c:c4:e8:12:13:c5:7f:92:9b:27:20:42:d4:9e:
46:b7:33:33:96:ab:50:55:26:3f:b6:6a:26:7e:2a:03:e9:0b:
41:74:e8:8b:b2:59:c4:9e:5b:f4:6a:3a:5e:2c:1c:49:e2:68:
6d:8d:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:23 2026 by rpki-client