
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json)
Hash identifier: a/T3uISkLWEjf6a2qIr17h1c1dBbr/DUr7m8JO6ny4U=
Subject key identifier: 11:13:69:C9:10:5D:F6:4A:84:4C:5C:59:81:1A:1E:7D:D9:24:66:C4
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
Manifest number: 81
Signing time: Fri 17 Apr 2026 07:23:17 +0000
Manifest this update: Fri 17 Apr 2026 07:23:17 +0000
Manifest next update: Fri 24 Apr 2026 07:23:17 +0000
Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: B2I5g8E9pHKrQNCig4oNCOfALiATW8qiYzpDxUGfoPM=)
2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: SoN2OmaKDx3s/tXFdxvFr9GR6YOZ0tZJgZDuBgai0t4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Validity
Not Before: Apr 17 07:23:17 2026 GMT
Not After : Apr 24 07:23:17 2026 GMT
Subject: CN=69e1dfe5-1533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:fa:50:4e:5a:11:07:78:23:cd:a9:fe:68:
5e:0f:10:1d:bc:50:50:11:d6:1b:50:9e:72:90:f2:
e4:cb:a1:17:05:db:4a:79:35:46:6d:52:01:46:18:
05:98:59:6b:ed:5a:93:79:f5:ce:5a:16:95:99:7c:
54:60:6f:b1:57:67:cf:32:0c:3a:ec:42:d3:d1:e4:
1c:c1:ee:1d:ac:80:cc:28:c2:50:ea:f4:78:fc:15:
d0:05:33:3b:a0:8f:79:5c:23:48:9b:ba:cc:e4:36:
65:58:ad:67:bf:8e:bb:e1:46:a8:2c:70:b7:31:f6:
97:32:f3:f4:4b:d3:07:4d:52:dc:cc:fd:01:9e:4a:
72:bc:45:74:fa:f1:3b:3f:cf:4f:f3:8a:b0:df:88:
a2:4e:98:bb:7d:b7:a4:4c:0d:b1:97:76:6d:0f:ae:
d9:f8:fd:c7:7a:53:2f:6c:cf:ae:6e:c1:94:eb:22:
e4:18:7c:9b:ef:a6:5a:d0:5a:8f:89:a7:cc:70:3c:
04:86:84:70:96:42:91:52:f0:ce:41:1d:91:a0:57:
d4:c6:3e:86:d6:70:da:dd:69:c0:a9:d9:f6:d2:fd:
bf:11:f5:64:6c:65:93:36:42:4f:4c:31:55:80:6f:
2f:3d:fd:99:e9:2e:5c:bc:75:b1:21:e9:f8:37:45:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:69:C9:10:5D:F6:4A:84:4C:5C:59:81:1A:1E:7D:D9:24:66:C4
X509v3 Authority Key Identifier:
keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:19:42:72:b5:12:ce:c1:fd:2f:92:15:b0:2c:a3:45:36:
75:b0:d2:99:3e:5f:c4:d0:87:0f:e8:3b:d1:6f:bc:17:08:06:
98:34:da:20:36:36:0d:5c:a6:cc:d5:b7:76:f0:44:a1:54:47:
ca:95:b5:f8:b1:ce:09:72:f8:4e:d3:7e:10:99:64:4f:68:37:
b3:7a:06:dc:1e:2e:68:9d:29:bb:87:d2:ef:b3:09:74:db:35:
9f:01:be:75:b3:4f:b3:ad:5f:8d:d9:d2:0d:88:66:2a:24:d8:
f9:ff:3b:3f:60:01:cd:58:21:28:6f:a8:ea:93:ae:b7:b3:39:
b0:17:cb:07:08:4d:87:9e:73:b3:75:8c:d7:8a:1a:41:7d:31:
8b:43:b8:8e:e5:7f:d6:85:b1:8d:3f:7b:b7:d1:db:30:c3:a6:
0c:1b:1a:d9:8b:59:a9:5f:33:59:01:9c:dd:4d:a5:6e:4f:de:
6e:b9:d2:e1:d7:a1:02:d9:d1:5a:62:02:3d:a9:fe:43:9d:dd:
6b:51:de:f8:86:59:ce:18:a7:cb:8d:23:ba:70:1a:2f:ab:74:
f7:ff:5f:ab:8a:00:29:84:97:57:f4:a4:42:ca:7c:67:ab:22:
f9:4d:5e:99:b2:4d:90:71:10:0d:91:53:3d:53:24:22:e7:39:
65:57:1c:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkwMUUxMTAvBgNVBAUTKDBCQkJBNDEyNEJBNEM3QzhBN0Y5RDA5N0VFRUFBOTgz
MkYwOTc5NjcwHhcNMjYwNDE3MDcyMzE3WhcNMjYwNDI0MDcyMzE3WjAYMRYwFAYD
VQQDEw02OWUxZGZlNS0xNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnSX6UE5aEQd4I82p/mheDxAdvFBQEdYbUJ5ykPLky6EXBdtKeTVGbVIBRhgF
mFlr7VqTefXOWhaVmXxUYG+xV2fPMgw67ELT0eQcwe4drIDMKMJQ6vR4/BXQBTM7
oI95XCNIm7rM5DZlWK1nv4674UaoLHC3MfaXMvP0S9MHTVLczP0BnkpyvEV0+vE7
P89P84qw34iiTpi7fbekTA2xl3ZtD67Z+P3HelMvbM+ubsGU6yLkGHyb76Za0FqP
iafMcDwEhoRwlkKRUvDOQR2RoFfUxj6G1nDa3WnAqdn20v2/EfVkbGWTNkJPTDFV
gG8vPf2Z6S5cvHWxIen4N0WshwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBETackQ
XfZKhExcWYEaHn3ZJGbEMB8GA1UdIwQYMBaAFAu7pBJLpMfIp/nQl+7qqYMvCXln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9FNkU4ODBEODc4
REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4aW4tZENYN3VxcGd5OEpl
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTAxRS9FNkU4ODBEODc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4
aW4tZENYN3VxcGd5OEplV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANKkZQnK1Es7B/S+SFbAso0U2dbDSmT5fxNCHD+g70W+8FwgGmDTaIDY2DVym
zNW3dvBEoVRHypW1+LHOCXL4TtN+EJlkT2g3s3oG3B4uaJ0pu4fS77MJdNs1nwG+
dbNPs61fjdnSDYhmKiTY+f87P2ABzVghKG+o6pOut7M5sBfLBwhNh55zs3WM14oa
QX0xi0O4juV/1oWxjT97t9HbMMOmDBsa2YtZqV8zWQGc3U2lbk/ebrnS4dehAtnR
WmICPan+Q53da1He+IZZzhiny40junAaL6t09/9fq4oAKYSXV/SkQsp8Z6si+U1e
mbJNkHEQDZFTPVMkIuc5ZVccAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:13 2026 by rpki-client