
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier: UnrWdppvVVPv9R0HB80bbX09Fp//aDTA30WPRGVlNgQ=
Subject key identifier: 54:1A:EF:8A:11:9F:F6:DB:57:95:2E:B5:A8:29:81:4E:AC:DC:3B:B4
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number: FA
Signing time: Fri 27 Mar 2026 05:04:33 +0000
Manifest this update: Fri 27 Mar 2026 05:04:32 +0000
Manifest next update: Fri 03 Apr 2026 05:04:32 +0000
Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: o5BxcWWPGKSQ9PuYTcgEi4d6VAMxwZ70UDnY58Edz7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Validity
Not Before: Mar 27 05:04:32 2026 GMT
Not After : Apr 3 05:04:32 2026 GMT
Subject: CN=69c60fe1-be0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:19:a3:98:c1:5a:da:15:ac:c3:e7:2e:72:
c2:85:88:35:e7:46:c2:b4:20:dd:de:ea:69:04:1c:
88:02:21:2a:0a:19:40:74:c1:3a:84:73:d9:49:79:
6e:75:2e:8d:78:bc:8e:6b:b6:b7:df:54:30:a3:c3:
b5:68:21:a0:e0:76:af:8a:3d:ff:d1:b4:26:53:8e:
d1:f6:f2:4d:07:7d:e8:1f:ef:b4:f6:34:5c:e3:28:
0f:83:84:5a:0a:91:8c:4e:65:15:1f:0c:39:96:15:
de:87:d2:3b:ba:65:58:8a:91:15:ba:52:02:19:4e:
4f:63:d9:26:ab:46:5b:15:e1:14:e4:65:e9:a8:7b:
c5:35:5a:43:12:37:23:d3:a6:de:47:11:fc:2e:ef:
a8:c6:cc:ab:5c:92:d6:3a:9a:51:f7:ca:b7:fb:01:
0b:23:e6:a5:82:27:53:a6:70:c4:78:61:44:cd:6b:
df:ff:b4:eb:b9:03:55:32:80:b8:ea:db:05:56:17:
08:2a:c0:17:98:5b:2c:b3:65:d4:9a:bc:19:7f:58:
bc:4c:28:38:1b:73:17:e2:58:d5:46:8b:f4:f0:51:
ac:81:a2:10:28:8b:6f:b7:be:4c:d8:4d:b7:cd:a7:
eb:f9:c0:32:7d:6b:11:e3:a2:a9:dc:40:99:72:f4:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:EF:8A:11:9F:F6:DB:57:95:2E:B5:A8:29:81:4E:AC:DC:3B:B4
X509v3 Authority Key Identifier:
keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:90:c6:17:ab:32:ed:ff:1f:a6:a9:e0:d7:58:38:53:f7:
e2:14:cb:82:25:43:72:60:6c:a9:20:4f:be:b1:a7:ef:dc:e1:
7b:f4:c1:b8:ee:b9:7f:4f:97:43:ca:39:5f:ba:20:bc:a9:70:
4c:91:9f:36:ee:bb:a2:b3:f7:63:fd:a9:fa:06:eb:a4:1d:6d:
0e:a7:ad:7e:59:19:55:cd:67:d5:77:3c:ac:b3:7c:95:77:ed:
d8:26:4c:b0:06:9a:31:6b:1f:ef:bf:e4:84:b4:08:e3:28:b7:
f7:3c:e7:46:41:9c:af:fd:73:b2:4a:22:1c:79:1e:2b:a5:12:
d2:bb:da:2e:7a:e1:ea:c2:1f:6a:2d:5b:08:81:80:d4:92:31:
39:fd:a1:c3:af:80:0d:a9:e7:8e:fa:82:2a:bc:c6:a0:03:b5:
e8:98:fa:6f:62:89:30:34:8f:64:3f:9c:5a:84:00:db:fd:cd:
ee:3e:09:22:13:a9:30:77:72:d2:83:3f:4f:01:3e:76:6c:f6:
31:23:1a:67:81:d8:f8:4c:20:4c:0d:cf:e3:85:ef:cf:70:21:
d1:7d:a6:4c:3a:6d:f0:52:5f:0a:26:04:5a:88:2d:05:d5:93:
5f:9b:52:20:d9:41:ba:94:88:5b:f0:2d:fa:cd:45:42:ca:58:
1d:32:03:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNGNDQxMTAvBgNVBAUTKDEzQjk0NEVBNTgzM0NEQjc0MTFGRDRFQzZBQTFDOTYy
Q0YzQjA4ODAwHhcNMjYwMzI3MDUwNDMyWhcNMjYwNDAzMDUwNDMyWjAYMRYwFAYD
VQQDEw02OWM2MGZlMS1iZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BUZo5jBWtoVrMPnLnLChYg150bCtCDd3uppBByIAiEqChlAdME6hHPZSXlu
dS6NeLyOa7a331Qwo8O1aCGg4Havij3/0bQmU47R9vJNB33oH++09jRc4ygPg4Ra
CpGMTmUVHww5lhXeh9I7umVYipEVulICGU5PY9kmq0ZbFeEU5GXpqHvFNVpDEjcj
06beRxH8Lu+oxsyrXJLWOppR98q3+wELI+algidTpnDEeGFEzWvf/7TruQNVMoC4
6tsFVhcIKsAXmFsss2XUmrwZf1i8TCg4G3MX4ljVRov08FGsgaIQKItvt75M2E23
zafr+cAyfWsR46Kp3ECZcvRMTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQa74oR
n/bbV5UutagpgU6s3Du0MB8GA1UdIwQYMBaAFBO5ROpYM823QR/U7GqhyWLPOwiA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC9FMjE5QzYzOEFF
MTUxMUVGQjMwMjk4M0VDNEY5QUUwMi9FN2xFNmxnenpiZEJIOVRzYXFISllzODdD
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0Y0NC9FMjE5QzYzOEFFMTUxMUVGQjMwMjk4M0VDNEY5QUUwMi9FN2xFNmxnenpi
ZEJIOVRzYXFISllzODdDSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNGQxherMu3/H6ap4NdYOFP34hTLgiVDcmBsqSBPvrGn79zhe/TBuO65f0+X
Q8o5X7ogvKlwTJGfNu67orP3Y/2p+gbrpB1tDqetflkZVc1n1Xc8rLN8lXft2CZM
sAaaMWsf77/khLQI4yi39zznRkGcr/1zskoiHHkeK6US0rvaLnrh6sIfai1bCIGA
1JIxOf2hw6+ADannjvqCKrzGoAO16Jj6b2KJMDSPZD+cWoQA2/3N7j4JIhOpMHdy
0oM/TwE+dmz2MSMaZ4HY+EwgTA3P44Xvz3Ah0X2mTDpt8FJfCiYEWogtBdWTX5tS
INlBupSIW/At+s1FQspYHTIDUg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:37 2026 by rpki-client