
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
File: E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json)
Hash identifier: ojTEWXeDCisMe4ctXvu7zRuhf4NS459eqxu1fSz+nTE=
Subject key identifier: AC:05:E4:7D:D4:D8:62:13:89:CB:5F:10:9B:29:DC:F6:CB:62:F6:0D
Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Certificate issuer: /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
Manifest number: 23
Signing time: Wed 13 May 2026 08:58:28 +0000
Manifest this update: Wed 13 May 2026 08:58:28 +0000
Manifest next update: Wed 20 May 2026 08:58:28 +0000
Files and hashes: 1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: pGMUw8/0Zm2AGZDMfSnYtkNavQiMa9lTkRCZ/5BZ80E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Validity
Not Before: May 13 08:58:28 2026 GMT
Not After : May 20 08:58:28 2026 GMT
Subject: CN=6a043d34-c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:73:18:ed:9c:5e:15:26:39:ef:a2:51:66:
8c:e1:a8:0c:4b:54:97:8c:52:3e:bb:a1:b8:f7:02:
2d:65:56:59:a9:5e:61:87:e7:2d:d7:7a:bc:8d:32:
81:70:73:70:38:3d:e2:64:fa:61:45:a0:3a:6e:f1:
dd:9e:b7:ae:ac:d1:ec:81:7e:1f:9b:4d:99:a8:56:
b8:84:09:92:60:87:b2:01:21:62:e7:cf:59:f1:d6:
92:ca:21:8c:d6:3e:c1:f3:7a:b3:12:7f:d2:71:46:
23:4f:d9:6b:6c:1f:dd:17:41:d9:fe:8f:92:2e:77:
41:eb:bf:be:7f:99:ce:a2:19:be:cd:0e:40:51:df:
fd:df:e9:98:c1:17:87:07:cd:26:53:45:c7:20:43:
63:5c:41:b8:95:12:6b:df:4b:d9:8d:0b:92:7f:ef:
19:01:74:1f:80:f7:e1:94:87:39:9c:6f:6b:8d:e5:
83:7b:8d:16:87:b0:de:1e:8c:9c:dd:60:e3:6b:7c:
9c:9d:ac:8a:c0:ab:c0:92:5f:44:50:3c:45:5c:7b:
06:ef:10:a0:c5:b2:4c:61:c1:91:a6:ce:3c:20:01:
b4:d8:05:21:08:47:db:5a:39:61:60:bf:bd:66:f4:
e6:c3:4b:36:9b:f6:f5:dd:fd:0a:89:7e:71:d3:17:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:E4:7D:D4:D8:62:13:89:CB:5F:10:9B:29:DC:F6:CB:62:F6:0D
X509v3 Authority Key Identifier:
keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8c:62:42:f0:66:e2:d4:17:77:61:9f:2a:32:51:60:8f:c4:
43:fa:d5:4f:fa:ac:f7:11:6a:e3:23:12:14:67:ce:df:7a:ce:
2d:1a:46:4c:e6:55:de:6b:f8:1c:40:4b:0b:d1:c6:f5:cc:e8:
8f:50:e5:79:9f:07:2e:8c:57:c3:18:a4:70:0e:f3:d5:0c:4b:
01:3b:9e:d1:ae:28:23:ff:14:2c:37:22:ea:f0:a5:52:df:b9:
4d:c9:27:56:00:de:7f:d4:28:81:4a:f5:d8:a9:38:f6:ec:3e:
f8:a1:5e:7c:6d:4a:23:5a:ae:d1:d9:a4:98:77:94:96:e2:f0:
57:74:a6:01:a6:89:53:4a:52:23:78:a1:57:7f:d3:2a:98:a8:
dd:ea:58:c9:d6:41:33:4f:39:85:89:34:57:cd:d3:32:73:9d:
e7:d1:22:2b:b1:cd:27:c8:41:4c:07:0b:20:05:3a:e3:33:c0:
df:ee:f5:6d:fc:71:55:c7:e2:fb:b9:80:03:9e:da:98:d4:9b:
26:e9:59:af:21:66:8e:ed:0f:a1:a1:ee:5c:4c:95:c2:c1:a5:
19:60:a1:19:51:55:5a:3c:62:cf:78:21:c0:4a:60:65:38:9c:
7c:25:8c:d1:b8:bd:de:ba:47:0e:db:14:ae:13:f2:11:99:05:
cc:d2:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:22 2026 by rpki-client