
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier: RgjDyjKvzZsr4XYkh+ywLUeLw6ib25Qm7csRsKvCJEU=
Subject key identifier: F0:B1:0A:7B:C4:E4:AA:84:44:3D:01:40:15:BB:A5:71:D2:78:D1:27
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number: 9D
Signing time: Fri 27 Mar 2026 06:52:00 +0000
Manifest this update: Fri 27 Mar 2026 06:52:00 +0000
Manifest next update: Fri 03 Apr 2026 06:52:00 +0000
Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: KiWfpMmrC/XDxZkPXpfbDKr/4+eTjTlY9flRiQKsbQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Validity
Not Before: Mar 27 06:52:00 2026 GMT
Not After : Apr 3 06:52:00 2026 GMT
Subject: CN=69c62910-8ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:59:b1:41:52:76:99:dc:ce:a2:c6:7d:72:
9f:45:90:42:aa:57:5b:12:88:bd:b4:6e:02:f5:4c:
d5:51:f9:c1:58:47:3c:5b:bf:ff:70:dc:81:98:b4:
6a:c5:a2:d7:ae:71:b9:88:d0:09:b9:c7:9a:8a:cf:
68:33:98:f4:dc:12:31:9d:86:3a:8b:eb:37:fb:5b:
f8:72:ce:f1:b6:02:f9:41:a7:bd:1a:5d:2d:df:12:
6e:4d:50:60:2e:9b:f9:92:99:84:ae:fd:e0:d4:57:
fa:6e:ec:8e:d6:0c:2e:a7:a6:52:b3:13:22:d7:08:
fe:55:97:be:29:6b:c0:0b:43:1d:87:32:cf:e4:97:
1e:88:24:28:ca:e6:80:ff:11:c7:87:b3:77:4c:fd:
aa:3c:5d:db:cf:c3:4a:00:67:49:ba:f3:35:42:a9:
d0:dd:b4:1e:61:31:23:0a:7d:87:d8:e0:03:33:2d:
53:87:a5:cb:6b:90:9f:50:a1:2a:b4:aa:8b:c6:d8:
fd:82:bb:d2:83:47:d0:ad:af:a7:61:e4:76:8e:6c:
9a:db:97:4c:79:d3:db:2f:6b:34:1b:50:9b:94:ba:
07:46:0c:31:7c:f8:60:ac:38:22:c9:f0:e2:55:e4:
3f:c3:9b:2c:b3:e5:cf:c4:5a:4c:27:8b:47:88:a8:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B1:0A:7B:C4:E4:AA:84:44:3D:01:40:15:BB:A5:71:D2:78:D1:27
X509v3 Authority Key Identifier:
keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:8a:27:6f:19:49:74:a7:a0:b8:71:c7:b2:53:1e:78:2a:
04:60:3d:22:8f:7c:c2:4e:49:eb:cf:cb:bc:28:e1:80:24:63:
16:4e:05:9c:f0:97:12:1f:67:c2:98:46:17:ae:f8:4e:cd:e4:
97:4e:0b:df:16:d4:66:fb:d8:2e:5b:b1:c9:57:30:9f:f7:5d:
8e:cf:7b:ad:2b:01:d6:77:a1:18:a3:29:30:10:29:a3:cb:e0:
69:67:2f:ea:07:79:4c:6b:c9:99:7d:e9:0e:0a:4a:f5:de:cb:
6e:f9:5a:c2:a7:97:71:32:9b:22:db:bf:31:c5:f6:de:0e:8f:
cf:6a:72:20:3e:ac:59:14:92:2c:9c:e6:6d:60:f9:8a:0e:aa:
0d:58:9d:a0:d1:ff:eb:15:b3:3d:c2:31:84:a5:ce:dc:a9:a9:
61:99:a4:48:b8:8b:46:70:15:3d:2f:fe:d3:66:72:4b:c1:99:
56:2a:6a:65:4c:6d:ba:ac:15:7f:2e:af:83:fd:6b:11:4d:1b:
49:78:54:8d:0e:a3:54:a6:28:dc:ac:1e:6d:6b:2f:70:ce:1e:
0e:f8:93:b2:89:79:63:b5:55:1d:d8:fa:ba:f0:3f:d4:41:c3:
f6:45:ad:a9:ae:4b:df:6a:88:8d:94:9b:e5:64:58:97:67:15:
4e:42:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:59 2026 by rpki-client