
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json)
Hash identifier: dpOsRZvzz4eUpRMUkmIndZtxXb+LqZrw3xosp4y29eE=
Subject key identifier: 13:26:32:97:2E:12:54:64:62:08:E2:3C:FA:2A:87:6F:23:CF:16:CC
Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09
Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
Manifest number: 0288
Signing time: Sun 05 Apr 2026 01:22:09 +0000
Manifest this update: Sun 05 Apr 2026 01:22:08 +0000
Manifest next update: Sun 12 Apr 2026 01:22:08 +0000
Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: UjetStj8HOIHH8an2U0v4kUq9+KwOCpXPqPo86D4lIU=)
2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: mfyyZsTnZSgcx20FOWESFBLlMkoZEqoTypZc1yf3CyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl
rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
Validity
Not Before: Apr 5 01:22:08 2026 GMT
Not After : Apr 12 01:22:08 2026 GMT
Subject: CN=69d1b941-934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:e0:41:ee:07:4c:48:3e:ab:ea:cf:57:f0:
9e:2e:9e:12:07:ea:64:ac:65:be:5d:df:47:e5:62:
97:ca:57:cd:84:09:b8:90:33:2e:29:a9:89:b0:65:
01:87:a4:a5:6d:bc:29:75:05:dd:10:89:10:3d:4a:
55:55:c3:84:58:4d:ce:ff:d4:23:7b:9b:88:b9:43:
3e:c5:86:f2:c2:fd:5d:6d:dc:e3:bc:15:d5:6e:0b:
85:90:22:29:c1:2d:39:11:81:1b:1c:c5:6c:89:08:
6c:dd:9f:dc:ee:a0:41:30:f2:59:8e:3c:80:ed:e0:
e1:18:76:31:43:f3:25:2c:fb:22:f0:db:13:cc:ae:
56:01:b1:ce:e6:f2:74:93:9c:fd:12:ad:59:36:90:
94:03:21:30:5f:c9:c5:be:65:c4:e0:93:20:00:d7:
0c:21:66:f7:c9:08:89:4d:9a:b1:4e:24:51:6e:04:
57:2d:6d:19:41:71:bd:28:55:cc:c8:71:8c:3f:15:
4a:b7:0e:ad:eb:98:92:af:ca:b9:6b:94:cc:11:28:
f0:da:43:fc:1c:ec:57:70:8f:15:e9:fb:2f:52:56:
71:a0:5b:9c:bc:dc:15:a1:6d:21:9f:ad:d4:3d:f5:
b6:01:ec:ed:0f:74:2d:37:9c:4f:ec:cb:19:c0:67:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:32:97:2E:12:54:64:62:08:E2:3C:FA:2A:87:6F:23:CF:16:CC
X509v3 Authority Key Identifier:
keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:a8:e0:06:08:0c:e3:88:00:30:6f:91:5b:bc:20:50:48:
8d:7d:20:66:1f:24:c3:08:4d:4e:39:cc:5a:19:62:87:84:df:
30:72:01:c4:73:86:dd:f5:56:93:de:ac:e9:47:1a:dc:62:57:
a8:f1:de:51:f9:95:0c:d5:98:62:fb:18:e3:31:32:cd:cb:81:
24:89:5e:63:3a:c6:24:60:10:84:3c:1a:36:df:6a:fd:31:17:
54:83:cf:a5:56:00:ed:4d:cc:47:a5:83:ec:75:02:cb:07:f4:
85:52:8b:ee:23:59:7a:c7:96:c8:13:8a:0f:d3:14:c8:4b:5c:
6a:be:1d:21:04:58:cd:8b:5d:c2:9b:94:45:b2:84:65:34:71:
70:b0:57:0d:c8:84:5c:c0:da:60:c6:ba:87:8b:29:f4:12:0a:
36:f3:86:d1:8a:03:1a:d7:12:81:d5:17:45:4d:03:4f:9a:7f:
08:10:c8:48:ae:f2:d9:94:65:59:03:9a:a9:0f:af:71:6a:c3:
7f:17:c3:56:bd:97:cc:b6:e8:d2:b7:7a:f6:a9:a9:f4:69:59:
fd:a0:57:37:b2:1e:c3:4d:3b:c7:ea:17:05:5a:87:74:ff:bc:
4e:48:f3:40:42:41:ca:ce:a9:d0:81:20:1a:d5:ee:ac:c8:8e:
c7:b7:64:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3
RjFBMzA2MDkwHhcNMjYwNDA1MDEyMjA4WhcNMjYwNDEyMDEyMjA4WjAYMRYwFAYD
VQQDEw02OWQxYjk0MS05MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+ngQe4HTEg+q+rPV/CeLp4SB+pkrGW+Xd9H5WKXylfNhAm4kDMuKamJsGUB
h6SlbbwpdQXdEIkQPUpVVcOEWE3O/9Qje5uIuUM+xYbywv1dbdzjvBXVbguFkCIp
wS05EYEbHMVsiQhs3Z/c7qBBMPJZjjyA7eDhGHYxQ/MlLPsi8NsTzK5WAbHO5vJ0
k5z9Eq1ZNpCUAyEwX8nFvmXE4JMgANcMIWb3yQiJTZqxTiRRbgRXLW0ZQXG9KFXM
yHGMPxVKtw6t65iSr8q5a5TMESjw2kP8HOxXcI8V6fsvUlZxoFucvNwVoW0hn63U
PfW2AeztD3QtN5xP7MsZwGfb/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMmMpcu
ElRkYgjiPPoqh28jzxbMMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1
MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL
Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANO2o4AYIDOOIADBvkVu8IFBIjX0gZh8kwwhNTjnMWhlih4TfMHIBxHOG3fVW
k96s6Uca3GJXqPHeUfmVDNWYYvsY4zEyzcuBJIleYzrGJGAQhDwaNt9q/TEXVIPP
pVYA7U3MR6WD7HUCywf0hVKL7iNZeseWyBOKD9MUyEtcar4dIQRYzYtdwpuURbKE
ZTRxcLBXDciEXMDaYMa6h4sp9BIKNvOG0YoDGtcSgdUXRU0DT5p/CBDISK7y2ZRl
WQOaqQ+vcWrDfxfDVr2XzLbo0rd69qmp9GlZ/aBXN7Iew007x+oXBVqHdP+8Tkjz
QEJBys6p0IEgGtXurMiOx7dkgw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:26 2026 by rpki-client