
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json)
Hash identifier: xJVkFzKPzASoZJl4f34mTrGzH0Y+ZIHn1xlAuG4y7p4=
Subject key identifier: 16:0A:FB:C5:13:A9:BB:55:8A:0A:CF:37:90:B9:87:45:E8:7B:FA:0D
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial: 07DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
Manifest number: 07CE
Signing time: Sat 04 Apr 2026 21:12:16 +0000
Manifest this update: Sat 04 Apr 2026 21:12:16 +0000
Manifest next update: Sat 11 Apr 2026 21:12:16 +0000
Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: 0L2kVJrYOdVQsHyLTcZ0nYRDwDiIOaI27VatyYhs+M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Validity
Not Before: Apr 4 21:12:16 2026 GMT
Not After : Apr 11 21:12:16 2026 GMT
Subject: CN=69d17eb0-c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:9d:e2:c6:86:f9:6c:cb:b7:5c:0d:86:27:
21:87:26:72:09:47:e4:a7:09:1a:2e:91:43:e3:3b:
0c:ad:3b:10:5e:07:bc:c6:b9:91:0e:95:07:5a:2b:
f3:4d:e4:dc:ca:65:ef:46:9b:3f:df:fc:d7:5a:28:
08:8a:0f:79:37:8e:d6:7c:77:7b:5d:8c:ca:c4:9f:
25:3d:33:c6:c3:f1:d3:91:48:f9:bc:48:2d:a3:18:
9b:b3:87:32:a4:af:18:15:9f:69:ab:c2:e7:b3:f1:
0a:d4:76:50:da:c8:62:ab:53:a2:4d:ca:53:69:8a:
95:91:bd:96:d8:97:31:0b:e3:39:27:b7:56:98:c7:
c6:46:2c:ed:d8:2b:d2:ea:02:dd:b8:c4:f5:c7:44:
31:e7:00:01:12:2c:5a:07:37:ba:f5:23:f7:c2:cf:
b8:3a:76:74:d0:87:6c:85:48:cd:20:20:17:44:e4:
ae:56:55:5f:ed:bc:dd:6e:59:e0:82:bf:34:7d:9e:
9c:66:e1:02:46:56:48:95:ca:79:83:b8:35:27:cd:
e7:b1:e1:2d:9d:a0:ea:02:4b:6b:07:86:11:97:0d:
4a:fe:e0:85:8c:56:ac:8e:1e:1d:17:db:87:c6:51:
51:ba:58:8e:24:66:d5:2e:e6:eb:5e:56:ad:ef:18:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:FB:C5:13:A9:BB:55:8A:0A:CF:37:90:B9:87:45:E8:7B:FA:0D
X509v3 Authority Key Identifier:
keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4a:44:29:6c:51:9b:a2:c3:45:56:89:d7:8f:86:08:0f:72:
30:d4:16:b4:68:52:36:4e:65:83:2a:1a:8f:74:31:b6:e9:52:
21:7a:06:ed:25:bc:12:87:a8:88:2f:76:0f:3a:89:5f:77:45:
c2:15:0d:c6:d0:70:b6:d8:6d:71:4b:42:77:1c:d8:66:03:a9:
48:30:e3:fb:c0:88:71:53:d0:34:18:85:c7:70:1c:be:b7:08:
c0:f2:32:eb:4b:9f:0d:9b:c4:08:1d:a4:5c:6e:43:31:63:02:
8f:45:09:61:8e:84:54:9b:da:95:b7:40:05:73:0d:e7:27:42:
d7:ad:38:bb:b5:03:ff:96:c0:01:e8:97:b0:20:82:26:e8:43:
a9:8d:48:40:40:98:bd:3e:be:d8:d7:ec:cf:aa:2e:c7:ec:1c:
a4:ec:60:d3:5b:b9:88:47:72:c7:e0:f8:55:39:a3:43:8a:3d:
46:8f:d0:90:02:f5:b9:92:40:db:a7:5a:92:67:92:7c:56:a5:
c7:6d:b0:67:b8:b6:0b:34:74:3e:c3:69:32:63:59:02:89:af:
1d:5f:23:82:da:4f:36:f0:af:1c:d6:20:6a:11:a1:af:f4:f4:
2a:57:04:81:5a:76:ce:d2:90:65:99:8f:84:03:6f:a0:dc:b8:
19:29:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:43 2026 by rpki-client