
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier: 8BfDdJsEowuGKMKbX1EFuj7E+hTTurbP+IRp9fZ+H8g=
Subject key identifier: 3D:88:0A:58:39:92:BF:09:2A:0D:75:17:52:75:5A:5B:F5:7A:37:43
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 251E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number: 24EA
Signing time: Fri 12 Jun 2026 15:45:24 +0000
Manifest this update: Fri 12 Jun 2026 15:45:24 +0000
Manifest next update: Fri 19 Jun 2026 15:45:24 +0000
Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: mEZNjlSOnZ8RYSrZtCtOCt/azgmED2nSV0I0FF++JsA=)
2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: M07o/4Se0WQ0x98V4EyKF0kElpzcSvmr2bEcsLBgAM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9502 (0x251e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Jun 12 15:45:24 2026 GMT
Not After : Jun 19 15:45:24 2026 GMT
Subject: CN=6a2c2994-8eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:6a:69:31:cc:d7:d0:ee:34:08:dd:14:0c:
68:1c:10:a6:9c:ff:df:41:19:bb:94:71:6d:a1:be:
a1:25:5d:83:d8:07:60:20:cb:14:ba:ea:83:ff:80:
7b:7c:76:f5:bb:24:f1:03:56:58:3c:36:2d:fb:b3:
bb:02:e7:d0:f1:c6:5a:a8:95:44:28:35:30:7d:f4:
11:97:89:5c:6c:b5:2a:bd:62:4a:cc:f7:ea:1c:63:
f1:21:92:5a:bb:21:05:83:98:80:6a:6b:e3:e2:aa:
e8:6e:48:81:eb:06:20:ff:27:39:7a:d5:99:dc:29:
a8:19:fe:27:81:c5:a7:51:65:f7:f4:82:80:48:86:
cc:a8:56:44:f5:79:db:bb:a7:37:6f:a4:85:0a:5f:
be:99:e0:58:5d:ee:d6:69:da:d3:7d:10:63:65:10:
9e:75:29:dc:ae:7d:c8:5b:45:a9:17:7a:b0:cc:5a:
8e:7e:64:0d:16:c9:dc:63:ba:64:57:ad:d6:4b:cc:
7e:22:40:5f:f0:b1:de:59:50:14:8f:65:27:1f:1b:
4a:bd:9d:dc:cd:ea:cb:90:4c:1f:68:ec:a1:c1:be:
4c:65:b6:55:81:13:55:38:e3:5e:41:f1:ac:33:1b:
d1:e7:b9:e0:5c:93:52:b7:4a:d5:2d:23:0e:34:4e:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:0A:58:39:92:BF:09:2A:0D:75:17:52:75:5A:5B:F5:7A:37:43
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:01:3d:36:0b:85:ac:aa:3b:53:af:54:b2:c6:15:ce:ca:9f:
38:82:26:83:51:71:c5:42:9b:38:28:5f:a5:f1:84:71:2b:c8:
ca:53:20:56:43:ab:7e:d3:06:94:8b:50:08:9e:f0:96:46:9d:
06:43:da:9a:b0:2c:ff:72:64:f0:66:7a:0f:e6:ce:00:75:63:
ef:2a:df:62:0a:94:f1:a0:8a:b8:68:02:2d:ea:d5:da:22:f7:
e4:58:85:6f:02:1c:d9:90:3c:85:70:b6:c3:16:1c:91:ec:fe:
3b:37:4c:a4:14:3c:68:f4:1a:66:f3:2e:d2:3d:aa:da:c5:b8:
83:fe:7c:d0:4f:67:0a:b4:55:c8:e8:b3:99:12:6e:ed:18:73:
26:1f:a0:80:1f:b5:25:4e:ff:e7:7d:cb:7b:c3:da:c6:de:d7:
92:e7:bf:40:7a:88:b9:96:00:d6:f9:17:c8:a2:fc:55:4a:c5:
cc:65:89:81:91:ef:4f:57:94:a8:86:ad:96:ed:f2:82:22:e3:
20:0d:4e:16:a0:00:4a:4e:70:21:96:0d:24:af:5c:0e:72:9b:
91:e5:28:60:8e:0a:2b:ce:c8:5a:e3:62:d7:9b:6d:53:a6:6b:
3d:80:f9:a2:bc:4d:4c:1d:23:eb:e1:3c:c1:e2:e2:b8:16:6f:
33:ad:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:32:21 2026 by rpki-client