
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier: 70yHW6uDVe37adnSD1r6v9xXhrTIeLbc6fE1BIs4NtQ=
Subject key identifier: 1D:89:74:DD:FF:97:B0:8B:4B:06:69:9E:4A:6C:0F:86:24:17:99:AE
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number: F8
Signing time: Sat 19 Sep 2026 06:20:22 +0000
Manifest this update: Sat 19 Sep 2026 06:20:22 +0000
Manifest next update: Sat 26 Sep 2026 06:20:22 +0000
Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: yZu/MeM9hAfef605ngWyV7C0zRPqaCYhstGeUrf05Ig=)
2: EcCPvTURBntX7D-jzYgdgJtlTTg.asa (hash: O71lRX9/PCFd7ADxaJf0JwnKZvGT+TTWumbThM2uuOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Validity
Not Before: Sep 19 06:20:22 2026 GMT
Not After : Sep 26 06:20:22 2026 GMT
Subject: CN=6aae29a6-3dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:4e:6d:90:ba:90:a4:96:91:16:31:78:8b:
57:73:21:15:08:6c:85:86:91:f1:44:a9:22:54:bf:
62:aa:6e:de:d6:d7:d0:e9:ec:8e:20:47:98:e0:92:
39:03:ac:da:b2:58:61:c4:e6:89:23:5d:c3:c4:3c:
53:32:38:a4:f3:24:15:8f:10:7a:d7:b1:a7:e6:03:
b8:55:60:75:05:69:52:5e:76:71:73:17:7a:f3:37:
6a:61:44:fa:17:a1:2a:9b:13:7a:fc:07:cc:3f:f3:
e1:8e:93:6d:15:2f:56:3c:76:ee:44:4d:58:df:e3:
3f:d9:41:cb:44:6b:b9:b8:c9:40:8d:49:76:4a:66:
2a:73:b7:53:a4:7b:f0:4f:f4:77:cb:b8:e3:68:00:
a8:a4:61:04:a1:6b:81:8d:15:cf:e0:35:9d:4f:b7:
65:6b:b7:7d:6b:58:8a:10:ec:e7:88:f9:d7:42:f8:
e1:34:64:c2:9b:e1:85:d5:3d:5e:51:fe:bf:b3:63:
ef:a4:6d:c1:f2:1e:45:de:cc:31:93:ee:12:68:b5:
11:63:be:7b:65:5c:56:0a:1a:40:df:0c:b2:f1:02:
0c:c9:11:70:de:95:1b:f3:f7:f6:4d:ea:fa:e3:98:
56:8a:95:b6:2a:f6:ba:47:b4:d2:27:5a:ca:4b:f3:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:74:DD:FF:97:B0:8B:4B:06:69:9E:4A:6C:0F:86:24:17:99:AE
X509v3 Authority Key Identifier:
keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:3a:8c:ca:6a:66:68:a1:49:01:cf:8b:b0:3d:c9:62:3a:
8b:f4:a5:1d:cb:20:34:cc:d8:a9:4c:db:21:05:3a:dc:5c:26:
ee:d3:41:08:23:71:70:44:16:88:00:9e:9f:26:98:32:5a:b5:
5c:22:d9:76:8d:0d:8b:d7:ad:c0:74:7c:6f:36:b3:1a:41:78:
7f:e6:13:af:35:08:75:18:b9:1b:de:c1:c1:b7:bb:4b:77:a6:
17:63:e3:17:85:e2:15:04:cd:6f:c3:21:7c:ca:8f:8b:87:ef:
42:1d:2a:51:5d:ea:29:d4:4e:71:97:90:c3:b0:d3:92:a0:ad:
6f:6b:8a:7f:3a:e3:cd:8e:00:e2:53:33:8f:50:70:81:a3:34:
4a:7d:c9:3e:0d:8d:2e:17:a0:64:c6:98:7e:97:94:06:95:0c:
94:0e:3d:53:a7:70:96:e8:d1:f1:ed:1f:4c:27:a9:e2:f4:8c:
9c:bf:2e:bf:b8:f3:12:a5:1c:05:c0:60:64:a8:b7:df:ec:62:
44:d4:fc:15:f4:1d:1d:27:70:ab:ab:20:89:19:d9:a2:62:d4:
d3:b1:f5:c9:1b:ed:f9:39:5a:91:01:42:a3:69:62:ac:ba:82:
7a:c1:1d:38:00:88:f5:17:7f:14:8b:7c:46:e1:aa:bd:3e:84:
24:dd:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:28 2026 by rpki-client