
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json)
Hash identifier: kl0vFDhttt66LK6f66y6kkDliTZWc3wLQSz7W3iGGj0=
Subject key identifier: 7E:70:D8:6A:CF:D1:7B:24:9E:BE:8F:55:B4:F8:6E:85:59:0E:97:25
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 2535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
Manifest number: 2501
Signing time: Tue 28 Jul 2026 15:52:09 +0000
Manifest this update: Tue 28 Jul 2026 15:52:09 +0000
Manifest next update: Tue 04 Aug 2026 15:52:09 +0000
Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: +FK6CNR9tLlmLQLJqiyiPm9vl0gvTgkBqkfTMIFrcB8=)
2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: M07o/4Se0WQ0x98V4EyKF0kElpzcSvmr2bEcsLBgAM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9525 (0x2535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Jul 28 15:52:09 2026 GMT
Not After : Aug 4 15:52:09 2026 GMT
Subject: CN=6a68d029-fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:f4:b6:d2:b0:d0:2c:19:d4:5a:d9:b0:a0:
f7:b6:41:df:29:88:b3:53:25:17:0a:30:f4:f0:8d:
49:16:00:91:dd:d4:d7:f9:37:8e:16:5b:f6:63:97:
7a:7b:ff:74:a1:39:d6:72:89:2c:65:a9:e3:64:66:
9e:ca:28:54:26:57:64:87:9a:1a:6c:62:6a:7a:bc:
76:0d:65:ed:04:6d:d5:2c:7e:ba:52:c6:74:e0:c3:
64:de:e3:92:f3:6c:74:45:28:25:7c:e8:81:c1:0d:
76:ed:f9:2b:c3:ca:92:69:51:df:1c:48:bf:9c:4b:
52:b3:c3:9f:fc:35:cc:2a:aa:b4:76:ac:13:ac:35:
49:ae:3b:8c:22:25:00:81:0f:4e:f2:f4:37:6e:0c:
55:b6:56:24:73:1f:19:d8:f8:3e:a0:91:df:ca:ca:
38:99:38:3c:8d:be:47:01:94:b8:3c:46:49:eb:78:
5b:4a:6f:20:02:ad:08:85:24:31:c4:1c:f8:03:5a:
6c:33:40:4a:c7:c1:96:e0:6d:24:73:ff:bf:d1:8d:
6b:81:c9:76:ce:2e:3d:90:68:82:37:52:88:00:f2:
b4:70:70:9f:01:67:4a:e5:ad:1d:93:79:7b:2a:0e:
21:b4:27:91:0b:e1:48:82:b4:53:14:c0:06:e5:d7:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:D8:6A:CF:D1:7B:24:9E:BE:8F:55:B4:F8:6E:85:59:0E:97:25
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:ef:7c:79:e8:1b:af:aa:5f:62:10:77:45:95:a0:06:59:
e7:99:bf:80:c1:7c:55:83:87:f6:76:ee:ad:95:cd:86:58:0c:
6e:f0:a1:2a:e6:c5:79:a4:26:60:ad:f6:b4:a7:a1:e9:57:e2:
5a:16:5b:35:70:30:c2:6d:c3:34:c6:ad:38:04:3f:ca:d6:c1:
1f:f9:6b:a4:8e:a5:8d:31:bb:57:26:e8:b5:e3:4a:a2:4c:ce:
a0:54:34:d5:94:1a:c3:2c:fe:6c:8a:a7:cd:76:1c:c0:b6:6d:
5f:b8:70:86:ef:41:14:d1:ff:05:9b:c9:d4:ca:14:52:3e:14:
c9:57:a0:15:38:e8:81:58:87:b8:53:38:f0:5f:ed:0b:49:5d:
69:d8:1c:69:89:15:08:ff:11:79:b8:63:59:4b:44:fb:c7:ef:
ba:96:60:ff:10:af:21:67:39:6b:29:e1:bc:52:6a:88:19:89:
cc:de:5b:35:6f:d5:1e:d1:8b:0b:f0:80:92:3b:8e:04:65:86:
fe:5c:47:e4:a2:dd:c7:e3:ba:b7:7e:cb:30:37:6a:d4:0e:1a:
95:85:3e:05:b3:5f:6e:48:81:7f:a5:23:30:96:3e:ff:82:43:
50:7b:20:0f:e8:44:02:42:17:b8:9a:a3:f1:ac:22:be:f1:4f:
fc:e6:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:40 2026 by rpki-client