
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier: vk/5VuR6p3mq8v4VGiuApKhL4wKplRRbKYycBXjb03k=
Subject key identifier: 4E:8F:D9:74:DE:B3:7D:6C:8C:19:A0:C1:F5:54:C6:70:9C:67:1A:CF
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number: D9
Signing time: Thu 23 Jul 2026 08:22:21 +0000
Manifest this update: Thu 23 Jul 2026 08:22:20 +0000
Manifest next update: Thu 30 Jul 2026 08:22:20 +0000
Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: pMV7YsZthVMZhp/LzblBtJmW59Fru8GI7heNXVfchA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Validity
Not Before: Jul 23 08:22:20 2026 GMT
Not After : Jul 30 08:22:20 2026 GMT
Subject: CN=6a61cf3d-fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:83:fb:16:90:5a:8a:f5:12:a7:05:e1:05:f0:
ac:e5:38:9f:00:2d:b9:1f:44:a3:68:24:83:6e:d7:
64:c8:cc:c1:f5:2c:db:2c:a8:f7:31:77:7f:9b:17:
0b:e4:b0:43:47:f8:bf:3d:32:f9:16:da:ba:4f:2b:
f5:a8:1a:12:27:af:5c:85:93:e6:30:83:5c:f1:e0:
bf:60:be:cd:db:e8:9e:e7:4c:cf:a6:e6:e1:17:22:
fe:ae:d9:bb:e6:cb:5c:fc:4f:e8:4e:a7:ea:ab:84:
ee:73:e8:cb:bd:c3:c4:dd:b9:fe:cb:d6:51:24:90:
81:61:d4:9d:fd:02:58:4c:9d:88:1f:b1:a6:ef:33:
73:13:ac:b4:39:36:4c:f1:51:52:03:b2:8a:61:4a:
a2:35:67:47:7b:0a:9b:74:be:71:97:6c:5c:fb:9d:
a8:ef:6e:35:f6:b3:6c:1c:12:28:7d:42:c5:57:59:
1e:27:a6:89:34:15:d6:6a:d1:72:97:b5:e8:23:c4:
93:a8:27:53:f4:14:a6:a4:73:bd:0f:5b:a0:de:71:
a8:1b:e5:d1:cb:38:80:37:03:64:03:3e:9b:71:5c:
a6:23:24:6d:0f:22:f8:1e:dc:f7:df:75:02:6b:45:
d4:1f:64:5a:6d:39:97:b5:50:6e:36:20:5d:5e:06:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:D9:74:DE:B3:7D:6C:8C:19:A0:C1:F5:54:C6:70:9C:67:1A:CF
X509v3 Authority Key Identifier:
keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:c8:f2:a9:c8:ac:ee:62:e4:6a:97:a8:0f:50:91:ec:69:
7c:e8:20:4f:9f:5c:a1:f4:bf:b3:f6:bc:f5:97:a5:c6:30:f9:
83:34:f5:c6:cf:7e:cc:ad:89:85:0b:fd:6a:04:ef:bf:c0:b2:
e0:72:08:5c:08:8c:3d:af:5f:79:9a:25:a6:04:bc:bf:24:a6:
44:26:24:2a:70:47:65:ea:8c:93:a0:60:81:65:59:82:91:82:
a6:1f:9c:93:18:a5:41:22:49:d3:d4:6e:e0:de:15:74:95:ca:
ca:84:c3:18:9a:82:eb:09:df:b4:47:3a:6e:fe:c6:b7:b9:74:
3e:f7:b4:61:03:34:05:5c:f8:88:f8:4e:05:e6:4b:fb:52:9c:
9b:93:f7:1a:b7:b5:78:92:69:75:94:9d:22:56:b5:d2:36:89:
e1:55:65:16:e0:74:ce:a7:f0:84:97:9b:9e:ef:a6:ca:51:88:
b2:8f:ee:ea:66:d2:7c:ca:71:47:17:6d:c6:6c:49:72:16:8a:
28:80:f9:45:0f:40:0b:77:3a:a3:ee:dd:66:82:79:d9:3b:e3:
99:5f:36:92:1f:e2:e8:ba:e4:9d:b2:63:11:d7:af:d7:4f:f9:
05:c7:c6:5e:2e:3c:7d:c6:2c:8e:cb:15:48:18:a4:3f:72:d2:
ff:06:b2:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCQUYxMTAvBgNVBAUTKDdBOUVERUE1RkM4ODJGODY3RUJBMzc4ODlCQ0QzQjNC
QjRBQzYyMzEwHhcNMjYwNzIzMDgyMjIwWhcNMjYwNzMwMDgyMjIwWjAYMRYwFAYD
VQQDEw02YTYxY2YzZC1mZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8YP7FpBaivUSpwXhBfCs5TifAC25H0SjaCSDbtdkyMzB9SzbLKj3MXd/mxcL
5LBDR/i/PTL5Ftq6Tyv1qBoSJ69chZPmMINc8eC/YL7N2+ie50zPpubhFyL+rtm7
5stc/E/oTqfqq4Tuc+jLvcPE3bn+y9ZRJJCBYdSd/QJYTJ2IH7Gm7zNzE6y0OTZM
8VFSA7KKYUqiNWdHewqbdL5xl2xc+52o72419rNsHBIofULFV1keJ6aJNBXWatFy
l7XoI8STqCdT9BSmpHO9D1ug3nGoG+XRyziANwNkAz6bcVymIyRtDyL4Htz333UC
a0XUH2RabTmXtVBuNiBdXgahsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6P2XTe
s31sjBmgwfVUxnCcZxrPMB8GA1UdIwQYMBaAFHqe3qX8iC+Gfro3iJvNOzu0rGIx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJBRi8xOTFBNjM4NjM2
REQxMUYwOTY4NjIxNjZDNEY5QUUwMi9lcDdlcGZ5SUw0Wi11amVJbTgwN083U3NZ
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwN2VwZnlJTDRaLXVqZUltODA3TzdTc1lqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkJBRi8xOTFBNjM4NjM2REQxMUYwOTY4NjIxNjZDNEY5QUUwMi9lcDdlcGZ5SUw0
Wi11amVJbTgwN083U3NZakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZNPI8qnIrO5i5GqXqA9QkexpfOggT59cofS/s/a89ZelxjD5gzT1xs9+zK2J
hQv9agTvv8Cy4HIIXAiMPa9feZolpgS8vySmRCYkKnBHZeqMk6BggWVZgpGCph+c
kxilQSJJ09Ru4N4VdJXKyoTDGJqC6wnftEc6bv7Gt7l0Pve0YQM0BVz4iPhOBeZL
+1Kcm5P3Gre1eJJpdZSdIla10jaJ4VVlFuB0zqfwhJebnu+mylGIso/u6mbSfMpx
RxdtxmxJchaKKID5RQ9AC3c6o+7dZoJ52TvjmV82kh/i6LrknbJjEdev10/5BcfG
Xi48fcYsjssVSBikP3LS/wayOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:24 2026 by rpki-client