
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier: VTUCEKLwP/M1v5j1xJ4DlPUgqyHLPIFEHfD4tWcrVi0=
Subject key identifier: B2:FB:06:78:D9:27:B3:B9:40:1C:0D:49:82:C3:6A:29:29:E5:9A:41
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 255A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number: 2525
Signing time: Fri 02 Oct 2026 15:52:29 +0000
Manifest this update: Fri 02 Oct 2026 15:52:29 +0000
Manifest next update: Fri 09 Oct 2026 15:52:29 +0000
Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: Xbfzg7eSeXT5u68AfahCp3WuikbVttMRJUY8eFvNMU4=)
2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: kPZF1f+IsmegMSPGWaL3KI6K4oWydR2UHiKi0R7o0u0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9562 (0x255a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Oct 2 15:52:29 2026 GMT
Not After : Oct 9 15:52:29 2026 GMT
Subject: CN=6abfd33d-0173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:92:bd:0f:c6:f8:ce:95:6f:f6:06:21:03:
33:1d:04:59:9b:a5:ee:06:cf:81:05:4c:fe:af:49:
5e:c1:02:85:8f:3f:8b:eb:a4:19:91:38:e1:74:c1:
92:3c:5d:78:34:1e:46:e1:8a:25:cb:03:98:04:c7:
ce:87:60:24:b9:96:1c:79:bb:27:02:fe:61:ce:bd:
d6:55:de:ee:76:ef:1d:87:8a:5a:15:c6:b8:eb:39:
73:b4:ea:6a:ff:d4:92:71:73:5e:f7:d7:fb:4b:19:
36:b4:e5:78:58:a1:f0:d9:35:7a:76:7c:5e:0b:98:
91:7f:84:08:2d:2b:c2:c8:b0:30:06:06:64:05:3b:
00:d1:8f:a2:8b:a2:aa:5a:02:48:5e:97:fe:1a:fd:
44:ed:a3:d9:89:7c:e1:d3:da:80:84:d7:7c:a1:c3:
c7:8f:48:01:1c:6a:c6:ca:e2:d9:08:83:6b:b3:37:
27:32:fb:d8:6c:68:12:a1:bc:d9:21:db:b6:f3:dd:
8d:23:6f:72:de:a3:63:4a:23:6b:22:50:74:25:3e:
5a:4e:3e:02:77:0a:49:c9:8d:ec:dc:9b:75:86:ec:
f4:ed:55:a7:26:ae:25:2c:ed:bd:ae:93:b2:6a:bf:
93:94:69:99:15:8e:05:7e:29:84:6c:85:81:67:14:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:06:78:D9:27:B3:B9:40:1C:0D:49:82:C3:6A:29:29:E5:9A:41
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:50:41:15:53:8c:b3:de:5d:75:78:3b:a3:e6:da:f5:c3:e4:
cf:e2:bd:38:34:09:f6:f6:e3:12:e4:ae:3c:b7:16:df:0c:7d:
12:29:18:3b:0e:64:81:d5:b6:58:5f:0c:78:b6:22:1c:a5:78:
b0:31:c2:17:28:eb:59:15:0e:c7:1d:77:75:84:87:4a:29:2f:
a3:43:b7:dc:92:07:d4:ab:40:0f:85:fb:c2:5a:c7:3b:1c:65:
6a:c8:cc:a0:9a:71:bc:11:02:91:9c:c7:93:2e:a6:ca:86:85:
f4:ee:d3:8e:b0:dc:58:51:1d:29:7a:a9:a4:b3:9c:7d:bd:40:
06:d5:69:a4:55:a8:fa:92:8f:48:ee:ff:bb:d3:7f:f4:bb:e5:
16:80:c7:17:c4:6d:91:e9:d2:f5:4b:42:42:af:c8:99:1c:17:
f8:e3:c6:d3:f5:ee:0a:68:74:86:a4:a9:cc:2b:30:10:2d:86:
a9:0f:1a:25:24:cf:60:f1:6a:1d:66:da:6c:70:6e:71:ee:0c:
3c:43:a3:e1:83:49:99:73:c1:9d:9f:40:55:39:4e:6a:0d:c7:
02:98:be:e2:90:2d:31:e4:b9:b5:37:01:46:5f:1f:ee:b3:a3:
78:36:cb:4b:64:a0:dd:a5:ac:25:aa:a1:91:2c:64:07:8c:a3:
b7:6f:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:09:48 2026 by rpki-client