
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier: x9XGP5PVy8O20Wx9476it1xvd5ULpt5/hw496LwQ8ow=
Subject key identifier: 4B:D0:BC:42:07:0D:A1:FA:41:9D:C9:71:40:C2:32:31:E6:FB:E6:DD
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 2532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number: 24FE
Signing time: Wed 22 Jul 2026 15:51:04 +0000
Manifest this update: Wed 22 Jul 2026 15:51:04 +0000
Manifest next update: Wed 29 Jul 2026 15:51:04 +0000
Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: x3JyYjilThepnFPfKeDwgmw6aTq/YtDck8jNw5YqFyE=)
2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: M07o/4Se0WQ0x98V4EyKF0kElpzcSvmr2bEcsLBgAM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9522 (0x2532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Jul 22 15:51:04 2026 GMT
Not After : Jul 29 15:51:04 2026 GMT
Subject: CN=6a60e6e8-1737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:66:ef:d2:36:3c:1f:d7:79:ce:6f:5f:4a:
30:02:c2:a5:dc:88:59:de:41:b9:f0:17:f3:a3:73:
ef:fa:f0:26:67:fa:1c:47:05:2d:7f:59:7f:0c:46:
c4:c3:35:c2:df:53:3b:f2:25:83:be:59:b0:0f:12:
c9:82:f7:88:be:a2:3f:51:00:fb:5e:a6:ff:a6:a8:
42:73:88:28:97:9a:a3:ce:b2:66:25:db:ac:46:6c:
ec:4e:04:63:c5:34:28:72:62:30:a4:4f:2d:46:7e:
d7:b4:62:3e:40:e5:8b:ce:ec:60:b4:d5:36:8b:6f:
b8:45:4f:38:ed:4f:d2:69:92:28:7a:1b:53:8d:f7:
5e:fb:e3:5d:d4:53:69:c8:d5:22:8a:5c:1e:6a:e5:
4e:31:0e:23:36:a0:ad:9d:9a:b9:04:29:70:a9:73:
b0:d4:b6:95:c4:5d:96:ab:a5:35:0e:0f:d8:63:0b:
3e:a1:fb:54:8f:95:90:61:b5:5d:aa:44:46:6f:5f:
c9:54:38:02:bc:fa:b1:18:82:67:92:9c:1e:b4:44:
38:ab:c4:60:92:34:de:4d:92:f3:29:c5:1e:e5:11:
49:82:f6:82:30:d5:82:fa:7b:1b:eb:45:c8:fa:ef:
39:f9:ad:35:15:ec:a3:56:ec:9d:3c:7a:0a:26:3c:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:BC:42:07:0D:A1:FA:41:9D:C9:71:40:C2:32:31:E6:FB:E6:DD
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ee:fc:33:c8:59:10:6b:4b:87:75:9d:24:78:3e:86:87:8f:
e4:e0:93:ba:4c:78:54:1a:2d:74:08:8e:0b:93:64:b6:90:79:
37:85:5d:1c:ae:53:b1:72:91:d6:d6:ef:34:25:49:ed:bb:3c:
56:a3:a3:14:a0:76:e1:71:cd:50:50:8c:f4:8a:58:6a:f3:76:
53:f2:71:19:04:ef:a8:53:44:14:c9:c0:4c:d2:17:45:28:af:
8e:2c:fa:cc:5e:4b:4a:c8:c0:3e:91:f6:0c:e2:b0:ff:37:14:
dc:4f:ba:d5:0d:f6:55:d7:5d:a7:9f:e1:28:d7:40:e1:14:0c:
bc:d7:f5:72:4d:e3:b6:5e:fd:16:53:e9:31:91:b3:29:4e:65:
ac:30:84:9f:53:6f:3a:6e:76:3d:f3:93:f1:41:28:2a:95:e4:
04:8d:f7:0f:47:21:6c:97:03:bc:08:02:1b:61:fd:3c:09:38:
09:0e:37:62:11:c0:77:f9:d2:98:d0:27:1a:36:83:36:f7:0c:
f4:2b:ec:3f:a5:d7:5d:f7:86:1b:8d:a0:a5:31:91:cf:c6:8b:
ed:01:5f:a0:4d:9e:a6:dd:0f:6a:84:70:bb:41:ed:1d:cb:8d:
fd:78:b7:17:1b:8c:81:ed:e0:4c:a8:ea:8f:ca:8a:83:93:c5:
73:ff:c2:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5
NDk5M0Q2MUMwHhcNMjYwNzIyMTU1MTA0WhcNMjYwNzI5MTU1MTA0WjAYMRYwFAYD
VQQDEw02YTYwZTZlOC0xNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzblm79I2PB/Xec5vX0owAsKl3IhZ3kG58Bfzo3Pv+vAmZ/ocRwUtf1l/DEbE
wzXC31M78iWDvlmwDxLJgveIvqI/UQD7Xqb/pqhCc4gol5qjzrJmJdusRmzsTgRj
xTQocmIwpE8tRn7XtGI+QOWLzuxgtNU2i2+4RU847U/SaZIoehtTjfde++Nd1FNp
yNUiilweauVOMQ4jNqCtnZq5BClwqXOw1LaVxF2Wq6U1Dg/YYws+oftUj5WQYbVd
qkRGb1/JVDgCvPqxGIJnkpwetEQ4q8RgkjTeTZLzKcUe5RFJgvaCMNWC+nsb60XI
+u85+a01FeyjVuydPHoKJjyp9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvQvEIH
DaH6QZ3JcUDCMjHm++bdMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1
MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1
N2taZVQzOVVYb3lVbVQxaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+78M8hZEGtLh3WdJHg+hoeP5OCTukx4VBotdAiOC5NktpB5N4VdHK5TsXKR
1tbvNCVJ7bs8VqOjFKB24XHNUFCM9IpYavN2U/JxGQTvqFNEFMnATNIXRSivjiz6
zF5LSsjAPpH2DOKw/zcU3E+61Q32Vdddp5/hKNdA4RQMvNf1ck3jtl79FlPpMZGz
KU5lrDCEn1NvOm52PfOT8UEoKpXkBI33D0chbJcDvAgCG2H9PAk4CQ43YhHAd/nS
mNAnGjaDNvcM9CvsP6XXXfeGG42gpTGRz8aL7QFfoE2ept0PaoRwu0HtHcuN/Xi3
FxuMge3gTKjqj8qKg5PFc//COw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:45 2026 by rpki-client