
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json)
Hash identifier: c38laZhKxB4yS9bsFdTkbUcTJ0ghlvW11Ln2vrTXghU=
Subject key identifier: 21:BE:06:FD:6A:E4:19:AB:80:3B:A6:8F:55:54:9C:CA:8B:56:F6:AF
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial: 04CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
Manifest number: 04C5
Signing time: Sat 04 Apr 2026 23:40:38 +0000
Manifest this update: Sat 04 Apr 2026 23:40:38 +0000
Manifest next update: Sat 11 Apr 2026 23:40:38 +0000
Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: Tq7ldR7f6AxWpv3Vzj4sm1b7308dUBdF886mX2X13T8=)
2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: Zccbv8dcS5H485GgGvv2gnpToyn81cRGaFg9r2jbzac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Validity
Not Before: Apr 4 23:40:38 2026 GMT
Not After : Apr 11 23:40:38 2026 GMT
Subject: CN=69d1a176-e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:2c:01:5f:ea:df:92:7f:e4:c4:8e:95:50:
f5:8b:57:b8:a8:69:4e:52:2d:f7:6c:b0:a9:69:76:
62:5d:40:a3:c4:10:8c:a8:09:92:97:8a:1f:08:4b:
02:bc:12:02:ff:37:f7:01:09:69:dc:85:28:3a:c3:
e8:ae:37:97:5f:5c:68:9e:b6:aa:34:d9:e7:ea:bf:
c4:61:5f:02:c0:2b:96:e6:74:83:83:5e:e3:16:8d:
37:09:09:97:05:2c:3a:b4:7f:fe:4e:48:13:bc:4e:
d1:d5:8c:42:bf:f3:97:74:a6:9a:37:1d:77:35:19:
f4:c2:ac:a8:1f:1b:fb:61:06:53:71:76:7a:c8:58:
04:75:2d:81:37:0b:58:6b:d0:57:57:4b:d8:fd:b6:
91:1d:a0:c4:43:06:03:eb:31:4b:6b:a1:5a:aa:a6:
65:29:ab:02:54:5f:4a:0a:98:ea:3b:98:43:5b:e7:
df:2e:b3:3d:60:5b:97:0d:23:d5:0a:5e:01:eb:e9:
6c:db:1a:59:67:7b:ec:bc:24:37:a1:1c:16:79:ec:
68:8c:6b:3e:9e:6a:6d:bd:d2:9b:eb:3b:d0:1c:71:
a1:fd:db:db:0c:c6:04:fe:47:cf:42:96:50:61:b3:
79:74:f1:cb:4c:f6:da:40:2d:51:36:eb:59:51:3a:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:06:FD:6A:E4:19:AB:80:3B:A6:8F:55:54:9C:CA:8B:56:F6:AF
X509v3 Authority Key Identifier:
keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:2d:bb:50:e2:26:80:ca:9b:c8:bf:79:2c:b1:c6:3b:fb:dc:
8b:2c:b8:9a:30:8c:90:fe:49:8d:d1:ab:26:69:9a:04:23:24:
d4:37:7d:23:a1:01:95:58:dd:50:31:19:2a:74:40:db:6d:86:
fd:ea:e8:19:49:64:25:86:83:9f:d7:bb:63:31:9c:a0:ac:2b:
2a:4d:9c:78:12:42:d4:bd:d6:f1:ca:35:5c:85:8d:f6:e1:01:
e0:cb:57:1f:81:c8:e1:27:85:1b:bc:8f:62:14:19:a6:31:1f:
f8:69:e0:2e:5e:21:35:54:bb:40:c0:2d:01:ed:24:6b:73:e7:
88:55:fe:a2:95:f8:9b:3b:7a:92:7a:3b:32:c3:46:37:f1:14:
a0:3a:a4:03:74:63:40:56:ac:3e:da:27:c9:28:20:42:26:4d:
f0:24:0f:d3:52:d4:2e:97:8a:55:cb:2b:e5:59:9d:1e:32:2e:
13:8b:92:ad:41:50:d0:d6:39:1f:30:bf:63:d2:4d:8c:10:9a:
4d:9a:27:ed:40:57:f1:96:b5:1a:69:dc:a6:6f:91:28:16:d6:
db:72:a7:ab:37:27:9f:10:e9:33:92:37:15:38:df:1c:54:80:
83:46:f5:5f:a1:eb:8a:fd:a2:9d:6a:ea:77:6d:a5:d8:f3:2c:
98:b3:26:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5
OTczOTE0QUIwHhcNMjYwNDA0MjM0MDM4WhcNMjYwNDExMjM0MDM4WjAYMRYwFAYD
VQQDEw02OWQxYTE3Ni1lOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCgsAV/q35J/5MSOlVD1i1e4qGlOUi33bLCpaXZiXUCjxBCMqAmSl4ofCEsC
vBIC/zf3AQlp3IUoOsPorjeXX1xonraqNNnn6r/EYV8CwCuW5nSDg17jFo03CQmX
BSw6tH/+TkgTvE7R1YxCv/OXdKaaNx13NRn0wqyoHxv7YQZTcXZ6yFgEdS2BNwtY
a9BXV0vY/baRHaDEQwYD6zFLa6FaqqZlKasCVF9KCpjqO5hDW+ffLrM9YFuXDSPV
Cl4B6+ls2xpZZ3vsvCQ3oRwWeexojGs+nmptvdKb6zvQHHGh/dvbDMYE/kfPQpZQ
YbN5dPHLTPbaQC1RNutZUTrzhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCG+Bv1q
5BmrgDumj1VUnMqLVvavMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2
QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4
MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4C27UOImgMqbyL95LLHGO/vciyy4mjCMkP5JjdGrJmmaBCMk1Dd9I6EBlVjd
UDEZKnRA222G/eroGUlkJYaDn9e7YzGcoKwrKk2ceBJC1L3W8co1XIWN9uEB4MtX
H4HI4SeFG7yPYhQZpjEf+GngLl4hNVS7QMAtAe0ka3PniFX+opX4mzt6kno7MsNG
N/EUoDqkA3RjQFasPtonySggQiZN8CQP01LULpeKVcsr5VmdHjIuE4uSrUFQ0NY5
HzC/Y9JNjBCaTZon7UBX8Za1Gmncpm+RKBbW23KnqzcnnxDpM5I3FTjfHFSAg0b1
X6Hriv2inWrqd22l2PMsmLMmGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:52 2026 by rpki-client