
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json)
Hash identifier: MssE+Ajir6Wn2xM3jUL3z+LbCY/+n7/be5Zy6N/DSTU=
Subject key identifier: 0D:2C:DB:BF:4D:55:95:36:A5:42:D6:EF:65:65:3D:15:26:87:FF:F0
Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
Manifest number: D7
Signing time: Sun 19 Apr 2026 06:17:34 +0000
Manifest this update: Sun 19 Apr 2026 06:17:33 +0000
Manifest next update: Sun 26 Apr 2026 06:17:33 +0000
Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: GhTmPsyBl/noyPPW9GFkZLbELKxeAine+gKOkKLMSKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Validity
Not Before: Apr 19 06:17:33 2026 GMT
Not After : Apr 26 06:17:33 2026 GMT
Subject: CN=69e4737e-190a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:86:83:fa:23:d7:bd:a0:70:e0:b6:68:2f:
b6:fb:fd:13:fc:2d:06:1c:1a:f5:5a:c1:43:9a:ba:
8f:b8:38:96:cc:1a:30:af:f9:74:93:45:cf:90:65:
92:82:67:93:3b:0e:38:46:19:9a:36:26:b1:a9:7c:
83:f9:ed:a6:bd:7f:90:7e:99:90:3b:c6:f0:ea:d8:
72:b3:fb:d4:4c:e2:83:14:00:55:4d:50:00:f3:1d:
29:8f:b2:76:7a:4c:b1:f9:42:35:f5:7a:fb:93:ec:
46:e9:8a:dc:53:b5:0b:67:67:20:1e:6a:07:97:73:
42:82:ff:c1:1b:1c:28:82:74:8b:a3:94:78:93:95:
ff:8b:7c:a1:92:02:ec:ce:94:9f:c9:f5:83:e5:73:
e8:45:c3:b4:c0:43:84:81:d7:82:38:a8:ec:1b:df:
b1:38:66:52:12:af:59:0e:b6:f1:3d:69:a3:e4:0f:
1d:24:71:5a:32:ff:11:6d:a3:1d:a7:d9:c0:42:18:
ab:58:e3:4c:98:f5:89:2a:91:28:9f:e4:28:49:4b:
0d:2f:41:70:a7:30:89:15:a9:d0:16:2f:82:6d:39:
99:bf:af:b5:4b:b3:f6:8e:b5:7c:96:8f:04:7c:81:
59:ad:44:92:18:6d:02:37:f3:2e:24:e6:91:f7:d6:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:DB:BF:4D:55:95:36:A5:42:D6:EF:65:65:3D:15:26:87:FF:F0
X509v3 Authority Key Identifier:
keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:54:06:cd:af:5f:39:78:38:72:bd:b3:24:73:e4:43:38:
86:15:c1:64:a4:45:0e:b5:fd:8c:9a:5c:2e:23:74:d6:b1:e1:
47:79:44:df:33:c5:a8:fd:28:35:c7:fc:31:aa:91:97:b3:40:
9f:8b:e3:65:35:ad:c9:ec:d2:64:34:50:40:85:fe:37:14:e0:
84:06:c6:8c:0c:63:c4:97:3e:af:88:b1:91:f7:ec:8f:7d:8b:
75:5d:a3:d1:21:d4:83:8a:02:71:bd:f7:69:d9:48:59:4f:5c:
85:4a:60:f4:ba:57:bc:4f:f7:ce:bc:9c:54:8d:96:64:f9:65:
ad:6d:c9:57:da:b0:e2:b6:ff:ce:04:2f:a7:55:ac:95:75:e4:
bb:3b:cd:50:aa:a1:09:f0:0a:98:2a:64:79:98:0c:81:4d:92:
50:ea:4a:34:e4:6e:23:b0:4f:cd:d7:b0:2f:dd:65:d4:ba:6e:
39:8c:9f:7e:94:8f:39:dc:16:f5:3f:f9:0d:f4:7e:17:a0:f0:
de:eb:32:fa:15:51:bd:39:d2:04:8f:5f:1e:f0:44:ea:29:12:
45:4a:43:c2:18:34:ef:c3:3b:1d:2c:d7:e3:10:a5:4b:6a:75:
69:de:ae:1c:79:84:5d:55:c0:12:36:a4:d4:19:bb:6c:61:7c:
44:1a:b4:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVCMzcxMTAvBgNVBAUTKDc5RjVFREE0QzcwRTJFMDNFOTA4QjgxOEMxNzc1OEYy
QTY2OTc3NTcwHhcNMjYwNDE5MDYxNzMzWhcNMjYwNDI2MDYxNzMzWjAYMRYwFAYD
VQQDEw02OWU0NzM3ZS0xOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugqGg/oj172gcOC2aC+2+/0T/C0GHBr1WsFDmrqPuDiWzBowr/l0k0XPkGWS
gmeTOw44RhmaNiaxqXyD+e2mvX+QfpmQO8bw6thys/vUTOKDFABVTVAA8x0pj7J2
ekyx+UI19Xr7k+xG6YrcU7ULZ2cgHmoHl3NCgv/BGxwognSLo5R4k5X/i3yhkgLs
zpSfyfWD5XPoRcO0wEOEgdeCOKjsG9+xOGZSEq9ZDrbxPWmj5A8dJHFaMv8RbaMd
p9nAQhirWONMmPWJKpEon+QoSUsNL0FwpzCJFanQFi+CbTmZv6+1S7P2jrV8lo8E
fIFZrUSSGG0CN/MuJOaR99aG+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0s279N
VZU2pULW72VlPRUmh//wMB8GA1UdIwQYMBaAFHn17aTHDi4D6Qi4GMF3WPKmaXdX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy80OUVFMjMxNkY1
RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9lZlh0cE1jT0xnUHBDTGdZd1hkWThxWnBk
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUIzNy80OUVFMjMxNkY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9lZlh0cE1jT0xn
UHBDTGdZd1hkWThxWnBkMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADDZUBs2vXzl4OHK9syRz5EM4hhXBZKRFDrX9jJpcLiN01rHhR3lE3zPFqP0o
Ncf8MaqRl7NAn4vjZTWtyezSZDRQQIX+NxTghAbGjAxjxJc+r4ixkffsj32LdV2j
0SHUg4oCcb33adlIWU9chUpg9LpXvE/3zrycVI2WZPllrW3JV9qw4rb/zgQvp1Ws
lXXkuzvNUKqhCfAKmCpkeZgMgU2SUOpKNORuI7BPzdewL91l1LpuOYyffpSPOdwW
9T/5DfR+F6Dw3usy+hVRvTnSBI9fHvBE6ikSRUpDwhg078M7HSzX4xClS2p1ad6u
HHmEXVXAEjak1Bm7bGF8RBq0Jg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:26 2026 by rpki-client