
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
File: E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json)
Hash identifier: Mqk1VbE+SjMF8Y0IgrBAUHcprDUj5Xg4rd+ukCnDipU=
Subject key identifier: 11:FD:CC:A7:97:8E:CD:FF:B0:A4:E5:2E:AF:ED:BC:22:2F:BF:17:08
Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Certificate issuer: /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
Manifest number: 0A
Signing time: Wed 25 Mar 2026 08:19:23 +0000
Manifest this update: Wed 25 Mar 2026 08:19:22 +0000
Manifest next update: Wed 01 Apr 2026 08:19:22 +0000
Files and hashes: 1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: 0bPfxM3GDGAJbL9Sk8xmRE69/+/abyuZ2gqpKp9Jbp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Validity
Not Before: Mar 25 08:19:22 2026 GMT
Not After : Apr 1 08:19:22 2026 GMT
Subject: CN=69c39a8b-0d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:79:a1:e6:d1:e5:a3:fd:82:08:3d:a8:0b:
37:23:5f:78:24:5e:ee:56:05:27:05:2a:94:1a:86:
14:2e:bb:2f:39:44:05:e8:4e:9d:95:3d:12:00:b0:
6a:1d:99:8a:86:aa:f9:a9:37:c3:b8:0d:91:29:cb:
8b:65:d8:00:56:18:d3:2c:72:e6:29:c4:20:a6:1e:
a1:78:c5:f8:32:1c:83:95:10:81:d4:70:2e:01:d4:
1b:34:a0:03:e0:af:2c:73:f8:4f:88:df:22:e3:5a:
4b:f7:63:0b:3e:0d:8f:45:5b:62:db:2d:52:f5:b5:
22:9a:8f:db:b1:7c:b1:3d:e0:70:25:39:91:bf:ba:
43:03:2b:90:d6:26:9c:f7:f8:b0:79:f1:3e:b5:ae:
d7:1c:99:cc:7e:23:9e:cf:8c:a9:40:ac:d2:56:e5:
a7:26:fb:d2:27:9f:c8:77:1e:f1:af:61:a0:61:d8:
ec:38:f0:74:a0:a8:51:25:af:b2:74:82:a1:34:ef:
07:bf:90:ea:a6:dc:22:e6:e3:4d:4e:e0:fe:2f:1a:
7b:f0:52:4e:93:f5:cc:2d:9e:0a:e0:ea:fd:5b:e8:
7c:15:02:fd:c0:f0:66:fd:a8:e3:91:3a:ad:64:6c:
7c:1d:8b:48:ae:3f:0f:47:06:ac:29:db:51:00:56:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:CC:A7:97:8E:CD:FF:B0:A4:E5:2E:AF:ED:BC:22:2F:BF:17:08
X509v3 Authority Key Identifier:
keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:22:50:b4:3e:81:47:8e:a5:c0:f0:a5:dc:33:04:c3:06:
f5:5b:35:c8:ff:a0:4a:bb:7b:99:ce:4c:30:2c:50:01:99:4e:
69:96:2c:50:a5:fe:aa:d5:8b:30:0f:22:a3:94:1b:55:ee:9b:
4d:88:db:38:d5:10:e2:85:2c:81:b8:76:36:88:f2:f2:30:91:
72:a3:38:1c:0d:be:79:da:20:e5:04:17:1c:4a:7e:ac:d6:3e:
37:6c:e0:c7:85:77:3d:f2:ae:7c:72:55:e5:56:75:38:a3:aa:
95:4c:74:49:89:44:22:44:95:1c:60:84:a1:fa:1a:4a:4b:f9:
cf:ae:60:ef:85:41:22:3a:e3:f8:72:98:5b:f1:3b:41:54:34:
a2:19:23:db:57:d3:d0:2f:39:af:f4:f2:c0:72:eb:29:33:d8:
41:97:d2:65:5f:84:86:f1:bf:aa:a2:af:88:81:76:8d:0d:e3:
e7:df:59:d1:25:30:12:4d:67:0b:9b:79:49:00:af:8d:77:dc:
bc:33:2b:58:3d:9a:14:83:99:8f:b2:6d:48:0a:67:3b:ae:c4:
ec:ad:23:ca:10:55:fb:20:89:ae:4a:56:c0:0b:b5:f2:04:3e:
22:6d:fd:f1:6b:8a:60:42:85:4e:f1:73:15:0e:64:9f:65:3f:
c9:85:f0:03
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RTdDNTExMC8GA1UEBRMoMTNCQTVDNjk4MUQ5OTdFOTA4OUE5REU3QkM4QTJCNzI5
QzIyMTM2ODAeFw0yNjAzMjUwODE5MjJaFw0yNjA0MDEwODE5MjJaMBgxFjAUBgNV
BAMTDTY5YzM5YThiLTBkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCobXmh5tHlo/2CCD2oCzcjX3gkXu5WBScFKpQahhQuuy85RAXoTp2VPRIAsGod
mYqGqvmpN8O4DZEpy4tl2ABWGNMscuYpxCCmHqF4xfgyHIOVEIHUcC4B1Bs0oAPg
ryxz+E+I3yLjWkv3Yws+DY9FW2LbLVL1tSKaj9uxfLE94HAlOZG/ukMDK5DWJpz3
+LB58T61rtccmcx+I57PjKlArNJW5acm+9Inn8h3HvGvYaBh2Ow48HSgqFElr7J0
gqE07we/kOqm3CLm401O4P4vGnvwUk6T9cwtngrg6v1b6HwVAv3A8Gb9qOOROq1k
bHwdi0iuPw9HBqwp21EAVo67AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEf3Mp5eO
zf+wpOUur+28Ii+/FwgwHwYDVR0jBBgwFoAUE7pcaYHZl+kImp3nvIorcpwiE2gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzE3QjFGRDQ0MUI1
MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1rSW1wM252SW9yY3B3aUUy
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRTdwY2FZSFpsLWtJbXAzbnZJb3JjcHdpRTJnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF
N0M1LzE3QjFGRDQ0MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1r
SW1wM252SW9yY3B3aUUyZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOEyJQtD6BR46lwPCl3DMEwwb1WzXI/6BKu3uZzkwwLFABmU5plixQpf6q1Ysw
DyKjlBtV7ptNiNs41RDihSyBuHY2iPLyMJFyozgcDb552iDlBBccSn6s1j43bODH
hXc98q58clXlVnU4o6qVTHRJiUQiRJUcYISh+hpKS/nPrmDvhUEiOuP4cphb8TtB
VDSiGSPbV9PQLzmv9PLAcuspM9hBl9JlX4SG8b+qoq+IgXaNDePn31nRJTASTWcL
m3lJAK+Nd9y8MytYPZoUg5mPsm1ICmc7rsTsrSPKEFX7IImuSlbAC7XyBD4ibf3x
a4pgQoVO8XMVDmSfZT/JhfAD
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:27 2026 by rpki-client