
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier: QK5RQ6LO/IzdRqgizv93dEw0dzUKJQzauBnepxciFrU=
Subject key identifier: 4B:BD:DD:AC:14:76:40:C1:74:B4:09:92:50:26:58:C1:7F:8D:8B:1D
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number: 07E0
Signing time: Sat 04 Apr 2026 21:05:50 +0000
Manifest this update: Sat 04 Apr 2026 21:05:50 +0000
Manifest next update: Sat 11 Apr 2026 21:05:50 +0000
Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: VW1wH1QqsYzKGCLKBUIM0j0MhstCtNYJFT+hzzZnEfo=)
2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: lE2Sm7xdj8DAHwT04SLyh8rHvpeARY7nTCmbI3VK9u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Validity
Not Before: Apr 4 21:05:50 2026 GMT
Not After : Apr 11 21:05:50 2026 GMT
Subject: CN=69d17d2e-7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:3b:5f:a8:8d:93:63:79:7a:1f:c1:ba:85:
bd:8d:e4:fa:f4:cd:da:86:3d:ee:7e:6c:4d:4a:30:
a8:89:9b:e0:ad:ba:99:d7:cb:3c:66:e2:4f:aa:c8:
27:06:52:09:04:30:73:d4:fd:ad:3d:e3:28:d1:21:
02:e6:15:23:f9:0f:f2:ae:63:26:10:75:31:35:30:
05:52:8e:da:3f:08:9c:5d:ee:64:70:be:0e:8d:3f:
d5:a0:22:1e:c0:00:11:56:6f:8a:37:3e:1e:ce:0a:
7e:0c:d9:41:68:64:38:63:6e:5b:7f:a3:b1:a1:30:
cc:54:2b:cf:8d:e2:a9:1c:66:9a:d7:a1:b8:e9:92:
a1:3c:f4:83:10:f1:08:e4:8e:0f:d7:df:5d:28:f6:
3b:5b:e1:76:3c:96:2f:80:6c:87:18:03:0c:f6:a9:
49:76:68:9d:8d:2d:0d:9b:0b:62:85:50:35:42:57:
7d:34:0a:95:8d:28:01:4f:88:0d:77:a8:e9:85:c3:
c8:56:65:99:b4:50:88:fb:2a:02:9f:3c:f9:3e:a9:
cc:3e:73:95:b6:2f:ed:44:17:c9:05:89:81:40:81:
7d:b7:aa:8d:1d:d1:99:42:8f:14:1d:d9:27:3a:2f:
7a:53:1e:12:59:d0:c1:e0:70:17:22:61:36:e9:7f:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:DD:AC:14:76:40:C1:74:B4:09:92:50:26:58:C1:7F:8D:8B:1D
X509v3 Authority Key Identifier:
keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:39:ee:84:eb:e7:e9:62:ad:e3:ed:06:cf:9f:af:08:6f:e2:
f9:64:cc:f3:de:a7:de:d2:af:f0:09:7e:10:0f:48:f8:bc:05:
bd:a8:e2:02:03:42:2d:fa:6b:04:8b:8d:87:91:ea:aa:e1:dd:
c1:6b:24:b9:6b:ae:ba:b4:bd:d0:2c:94:97:28:b1:07:ff:f1:
cc:b0:58:f3:f4:10:bb:a7:a2:c8:8e:21:b1:39:f0:41:94:a0:
fe:56:02:45:bc:f8:8b:68:6a:71:2a:f5:39:f1:ee:43:bb:4f:
e7:ec:26:7a:9f:1c:05:7e:b8:83:bf:b3:5d:74:66:1f:d5:64:
3e:16:1c:b3:a1:d7:78:67:39:23:20:6b:63:4d:49:b5:a3:ce:
24:17:4b:66:76:b1:de:c2:2c:2f:99:c7:e5:b8:27:d9:c4:91:
74:ae:1d:f8:2e:40:d4:4a:97:04:0f:de:ae:a4:d5:f9:7e:7e:
81:96:72:41:a6:83:0a:29:4f:14:44:2f:23:7b:6e:b7:3c:fc:
8f:e1:34:58:dc:4a:ac:64:dc:a2:e9:9d:9d:1b:77:4e:09:e2:
1a:5d:1e:a0:cd:ad:6f:a2:2b:b7:96:43:eb:98:3b:d2:47:b5:
ad:35:99:35:93:2a:fc:86:42:9f:34:36:4e:af:35:a5:03:1f:
5c:4f:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:27 2026 by rpki-client