
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier: iGh699LmOd6fLDy3Wyg20YiQXWESxBTZPdaO355h0SM=
Subject key identifier: 38:17:CC:8E:8C:7F:A2:FF:02:60:57:C7:3E:60:4E:41:71:77:5A:66
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number: 7E
Signing time: Thu 05 Mar 2026 06:36:27 +0000
Manifest this update: Thu 05 Mar 2026 06:36:27 +0000
Manifest next update: Thu 12 Mar 2026 06:36:27 +0000
Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: nihXOCATD6mRYyv9YjgfzYNbc3GtsdT+raAM8kJzWoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Validity
Not Before: Mar 5 06:36:27 2026 GMT
Not After : Mar 12 06:36:27 2026 GMT
Subject: CN=69a9246b-09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:3b:4e:17:e6:c1:0f:e3:7d:af:1a:59:d4:
ed:a2:dd:22:d6:b4:9f:f7:81:c3:3a:4e:d5:e9:b0:
c5:6d:c1:47:e0:a6:b6:1f:c9:04:ce:6c:cb:ea:ff:
fa:88:ad:e4:a4:60:db:b7:8e:96:79:27:77:f9:19:
92:7e:e7:f8:68:cf:43:77:68:24:99:9e:3d:2b:40:
37:b8:32:61:3b:fd:56:d4:78:13:46:6d:bc:2e:01:
95:a9:04:a8:c6:33:72:89:9f:18:ff:d6:ed:82:6f:
c5:9d:ce:14:0b:f9:24:b9:a1:ba:23:6f:56:2f:12:
a4:73:be:ad:0f:ff:63:2c:29:cc:38:56:4f:1a:93:
32:23:f9:83:3c:4a:e5:d7:ea:0b:ea:af:eb:98:5b:
67:88:48:04:e0:b4:f8:39:37:01:89:0e:9d:c1:fe:
3e:34:a5:de:95:e9:a0:0d:61:fa:f3:96:76:2c:34:
10:02:c0:d8:c3:89:ce:53:92:21:5d:0f:e9:ed:e3:
ba:d5:6b:2d:3b:db:0f:be:a5:72:7c:c5:3f:d8:5a:
1b:c8:32:28:a1:6f:5f:82:b2:88:fe:ec:9d:73:df:
3e:66:c5:54:ac:d2:00:01:2c:df:62:61:a7:6f:0e:
eb:b2:14:6d:f5:aa:d8:a6:ba:bf:ca:ce:33:ca:a3:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:CC:8E:8C:7F:A2:FF:02:60:57:C7:3E:60:4E:41:71:77:5A:66
X509v3 Authority Key Identifier:
keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:a3:96:01:7d:53:db:42:ce:a3:75:ca:b7:b4:f3:75:7b:
ee:c1:a5:df:0b:f5:25:7a:75:0c:46:a6:fa:8e:98:93:43:d6:
3c:ab:6d:ab:4e:c2:8a:4f:fb:75:02:22:43:4a:b3:4e:71:b2:
13:a5:02:cf:cf:84:bf:8c:21:e1:89:5d:7c:a4:74:6d:b5:2f:
0e:34:af:06:b0:62:6c:b8:96:8d:e2:83:22:a7:8d:c7:4b:8e:
ce:ae:d9:90:c7:59:79:a5:b0:9d:b6:b9:57:a7:5e:e9:5e:55:
a4:9a:2b:9c:7c:90:7e:c2:04:db:43:08:76:9b:38:59:3e:1d:
6f:18:46:20:b3:9d:10:43:21:8a:a7:a5:87:03:1d:cb:65:60:
7a:2e:19:37:5a:75:60:ab:8a:ea:a7:1e:77:0d:5f:36:4b:dd:
88:e1:1d:a4:05:b5:aa:2f:d8:1c:52:54:14:e2:01:2d:9c:92:
fe:cd:f3:60:98:d7:d7:62:57:10:c9:fd:b2:a6:cf:5b:24:ac:
01:37:a3:01:67:0b:f3:45:99:61:2a:b9:e1:48:a5:80:69:61:
1c:27:81:fd:44:09:ff:43:89:2c:eb:95:88:38:dc:71:57:4a:
19:1d:f9:36:50:42:e7:55:7d:6a:ad:9d:dd:a8:a3:fd:99:ed:
bb:b2:38:de
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF
OUFDOEE5QzAeFw0yNjAzMDUwNjM2MjdaFw0yNjAzMTIwNjM2MjdaMBgxFjAUBgNV
BAMTDTY5YTkyNDZiLTA5ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPUjtOF+bBD+N9rxpZ1O2i3SLWtJ/3gcM6TtXpsMVtwUfgprYfyQTObMvq//qI
reSkYNu3jpZ5J3f5GZJ+5/hoz0N3aCSZnj0rQDe4MmE7/VbUeBNGbbwuAZWpBKjG
M3KJnxj/1u2Cb8WdzhQL+SS5obojb1YvEqRzvq0P/2MsKcw4Vk8akzIj+YM8SuXX
6gvqr+uYW2eISATgtPg5NwGJDp3B/j40pd6V6aANYfrzlnYsNBACwNjDic5TkiFd
D+nt47rVay072w++pXJ8xT/YWhvIMiihb1+Csoj+7J1z3z5mxVSs0gABLN9iYadv
DuuyFG31qtimur/KzjPKo7WDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOBfMjox/
ov8CYFfHPmBOQXF3WmYwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC
NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ
X3FkbDE5RjBmOWVtc2lwdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7EaOWAX1T20LOo3XKt7TzdXvuwaXfC/UlenUMRqb6jpiTQ9Y8q22rTsKKT/t1
AiJDSrNOcbITpQLPz4S/jCHhiV18pHRttS8ONK8GsGJsuJaN4oMip43HS47OrtmQ
x1l5pbCdtrlXp17pXlWkmiucfJB+wgTbQwh2mzhZPh1vGEYgs50QQyGKp6WHAx3L
ZWB6Lhk3WnVgq4rqpx53DV82S92I4R2kBbWqL9gcUlQU4gEtnJL+zfNgmNfXYlcQ
yf2yps9bJKwBN6MBZwvzRZlhKrnhSKWAaWEcJ4H9RAn/Q4ks65WIONxxV0oZHfk2
UELnVX1qrZ3dqKP9me27sjje
-----END CERTIFICATE-----
Generated at Fri Mar 6 08:37:26 2026 by rpki-client