
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier: 2Ms1ioHPLGczO418fO7BZk/QD10yAG4cJTwzOlcYDHE=
Subject key identifier: DC:03:D0:3E:98:19:3F:EE:3E:3D:06:B4:19:AE:C4:21:89:D7:99:25
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number: A9
Signing time: Sun 19 Apr 2026 06:47:19 +0000
Manifest this update: Sun 19 Apr 2026 06:47:18 +0000
Manifest next update: Sun 26 Apr 2026 06:47:18 +0000
Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: pnyn5IkykkMP//tin2F3b+Ovbiy1CbqvzCcqMsi7L/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Validity
Not Before: Apr 19 06:47:18 2026 GMT
Not After : Apr 26 06:47:18 2026 GMT
Subject: CN=69e47a77-b07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:44:56:7b:32:86:85:c6:11:68:10:bd:bf:
c4:47:a1:0b:9a:be:a3:2b:0b:cd:2e:0b:b1:a1:16:
f8:39:bb:ef:25:16:69:b7:ea:d6:6f:94:e9:92:a8:
53:d4:ac:1d:08:f1:2b:fd:d1:62:b6:2c:6c:cf:2f:
13:4a:4f:8c:00:3a:72:b2:5b:d5:57:2f:26:73:43:
de:77:ca:63:d0:7f:13:da:e2:11:a4:1c:a9:93:62:
0f:b0:16:f2:65:f5:44:83:6f:41:f8:62:b4:27:c6:
d2:77:33:3a:ce:ee:c8:b2:fb:53:2f:d1:51:cc:eb:
86:54:2f:50:fa:5f:7f:4e:52:7b:9e:04:2c:d8:dc:
f9:5b:a3:28:6c:9d:23:17:3d:46:68:20:86:00:eb:
c0:67:42:9c:07:91:d8:a4:a7:e3:fc:1d:3c:a2:52:
90:88:1b:0c:46:a9:79:23:ea:83:aa:68:57:b1:16:
62:23:17:c1:2c:5b:2a:0c:79:5f:0b:72:30:39:90:
0e:85:52:3f:a6:db:dd:1c:16:13:4d:77:75:59:06:
27:06:f2:fb:0f:d8:e8:9b:3e:68:71:78:f3:93:27:
17:ec:d2:9b:37:80:12:c0:d2:48:a5:f3:f9:d8:89:
1a:af:76:24:69:67:80:d1:f7:64:44:a6:fd:43:ff:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:D0:3E:98:19:3F:EE:3E:3D:06:B4:19:AE:C4:21:89:D7:99:25
X509v3 Authority Key Identifier:
keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:73:20:ab:28:ed:09:98:c0:39:05:17:75:f7:96:0e:23:
47:4c:71:02:f0:bd:c2:b2:68:d4:41:bd:4f:c8:68:8b:e1:12:
ad:5b:73:cb:f1:03:e5:5b:be:a6:dd:c7:4f:b8:e5:1b:ea:55:
0f:7f:cd:02:a4:89:ec:df:a5:74:ae:8b:d8:e1:13:41:f7:7d:
64:e3:e7:d6:9d:9d:43:66:06:9e:cc:76:02:b9:ec:53:7b:c6:
d9:09:16:cd:fe:17:18:b7:77:e2:31:ef:6c:7a:42:b7:99:7b:
6d:d6:9e:ab:9e:f3:9e:0d:aa:5f:89:13:dc:53:de:8c:67:ed:
a1:39:ce:10:7a:a5:ec:50:30:7c:43:83:1f:5e:16:4a:c2:5a:
40:f6:54:4d:9d:c6:a7:8e:67:0d:a4:7b:7b:20:5c:03:1f:b1:
84:4c:8f:4b:2d:5f:0e:37:10:b7:03:13:51:69:53:52:de:fa:
47:49:06:4f:92:11:2c:f1:e3:bc:c7:ff:98:f8:fb:3a:88:64:
25:e6:16:38:66:5f:b9:24:f2:aa:49:41:34:f6:d9:18:16:b5:
d8:a2:e5:5f:75:38:0f:83:3c:83:c2:72:69:db:ff:03:5a:88:
f7:37:1f:d2:0d:f2:64:d6:a2:f7:b4:3a:99:0f:bd:c4:ea:7d:
54:85:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:25 2026 by rpki-client