
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier: PAb2qRz9i2XSSADmcMtl4vy5voIVGd8FKEdyo0PdixQ=
Subject key identifier: 23:E7:8E:AC:72:B9:45:FD:11:D7:4B:50:25:6C:18:84:23:F0:F4:97
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 2501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number: 24CD
Signing time: Thu 16 Apr 2026 15:45:10 +0000
Manifest this update: Thu 16 Apr 2026 15:45:10 +0000
Manifest next update: Thu 23 Apr 2026 15:45:10 +0000
Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 3KEualxOG7j0vKktrHIjham8mLE6hYfF1FZFSQyHvJw=)
2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: M07o/4Se0WQ0x98V4EyKF0kElpzcSvmr2bEcsLBgAM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9473 (0x2501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Apr 16 15:45:10 2026 GMT
Not After : Apr 23 15:45:10 2026 GMT
Subject: CN=69e10406-9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:81:63:d6:ad:30:73:a9:3d:9b:a4:89:59:
3f:c6:c3:ec:3f:99:b2:ae:b0:d5:f0:82:3c:78:b9:
5d:7a:6b:ef:b0:c9:e6:65:30:47:04:d9:d2:e4:1d:
9f:5d:be:f2:b7:c9:d2:ca:14:4d:bf:48:33:91:dc:
b8:3c:4f:c5:13:d1:5c:f4:49:7b:03:ee:33:01:6d:
d3:59:da:b5:6d:4d:91:e8:fa:6f:90:e4:d6:17:02:
14:01:7d:06:ee:d1:e2:f4:1a:f0:d7:9e:79:36:db:
95:b8:78:42:6f:3c:e3:4b:7f:7b:21:ab:46:6f:de:
53:b0:d4:08:75:9b:46:50:03:b4:eb:dc:9e:f9:83:
a8:7e:64:85:b7:a2:e9:57:bc:a1:d6:85:48:53:ef:
df:9d:69:75:5e:89:57:21:05:8f:bd:50:cc:dc:29:
0d:87:67:72:93:30:a0:fe:84:8f:ed:b0:42:22:18:
b5:11:b0:11:5b:6e:6a:ce:8b:57:08:40:c4:32:ee:
1f:4e:f6:a3:9b:c5:91:3c:08:30:79:59:80:06:f3:
6e:31:8b:bf:b6:6d:4d:88:54:d9:70:ed:7c:6d:d5:
a1:54:ac:0a:0a:51:c2:1e:36:f7:6d:1e:96:3f:39:
51:7c:99:7d:c9:52:7d:2b:48:65:81:90:54:b9:40:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:8E:AC:72:B9:45:FD:11:D7:4B:50:25:6C:18:84:23:F0:F4:97
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:7c:56:60:15:16:07:98:0c:fe:94:d4:a7:bf:68:5f:b7:
2b:7f:3c:c2:89:0f:21:a1:c2:25:88:e9:f7:c6:d6:bb:e6:01:
77:09:a6:40:f7:d7:1f:ff:1a:5a:1f:5c:69:1f:3d:09:55:4a:
bb:7f:d5:12:3b:75:68:aa:cf:ac:97:39:3f:f1:a2:81:9c:4a:
55:2f:60:91:6e:ef:1c:40:5c:f5:62:a2:8a:89:91:80:c1:4c:
02:aa:7a:7d:3b:a6:31:99:46:87:a7:20:3f:66:2b:a3:0d:47:
8f:13:f9:38:4d:9f:50:71:83:2e:e6:49:cb:12:39:16:92:b0:
79:c1:09:df:c6:4f:34:4b:80:ba:6d:b8:a5:d4:5a:b5:b1:cd:
c5:d7:e8:37:58:72:39:d6:aa:b9:67:ea:36:52:18:80:45:3b:
d6:72:03:bd:88:d4:25:b2:21:a6:ec:43:aa:8b:73:ff:d1:c1:
4e:e7:cf:3a:15:18:92:c0:d6:fa:a6:c3:7c:f2:45:a5:48:d9:
da:93:73:10:51:e4:25:c1:35:e4:e2:1b:ba:68:01:72:3f:a2:
20:73:3d:2d:36:79:92:c0:64:8f:ae:fd:6d:ec:64:ad:22:fa:
4f:71:a1:59:6c:ce:1f:5b:fe:c2:1b:50:ce:39:e7:11:3f:e6:
96:9e:24:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5
NDk5M0Q2MUMwHhcNMjYwNDE2MTU0NTEwWhcNMjYwNDIzMTU0NTEwWjAYMRYwFAYD
VQQDEw02OWUxMDQwNi05NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3qBY9atMHOpPZukiVk/xsPsP5myrrDV8II8eLldemvvsMnmZTBHBNnS5B2f
Xb7yt8nSyhRNv0gzkdy4PE/FE9Fc9El7A+4zAW3TWdq1bU2R6PpvkOTWFwIUAX0G
7tHi9Brw1555NtuVuHhCbzzjS397IatGb95TsNQIdZtGUAO069ye+YOofmSFt6Lp
V7yh1oVIU+/fnWl1XolXIQWPvVDM3CkNh2dykzCg/oSP7bBCIhi1EbARW25qzotX
CEDEMu4fTvajm8WRPAgweVmABvNuMYu/tm1NiFTZcO18bdWhVKwKClHCHjb3bR6W
PzlRfJl9yVJ9K0hlgZBUuUDsUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPnjqxy
uUX9EddLUCVsGIQj8PSXMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1
MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1
N2taZVQzOVVYb3lVbVQxaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACSN8VmAVFgeYDP6U1Ke/aF+3K388wokPIaHCJYjp98bWu+YBdwmmQPfXH/8a
Wh9caR89CVVKu3/VEjt1aKrPrJc5P/GigZxKVS9gkW7vHEBc9WKiiomRgMFMAqp6
fTumMZlGh6cgP2Yrow1HjxP5OE2fUHGDLuZJyxI5FpKwecEJ38ZPNEuAum24pdRa
tbHNxdfoN1hyOdaquWfqNlIYgEU71nIDvYjUJbIhpuxDqotz/9HBTufPOhUYksDW
+qbDfPJFpUjZ2pNzEFHkJcE15OIbumgBcj+iIHM9LTZ5ksBkj679bexkrSL6T3Gh
WWzOH1v+whtQzjnnET/mlp4kNw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:02 2026 by rpki-client