
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier: FNV1/igGnCTof0V6s+WJHWGt6OrQdFRl+chSRVknux8=
Subject key identifier: BE:4A:F1:D7:10:F3:1E:58:9D:21:B0:31:FD:1D:53:53:49:85:46:9C
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number: 029E
Signing time: Wed 13 May 2026 01:38:30 +0000
Manifest this update: Wed 13 May 2026 01:38:30 +0000
Manifest next update: Wed 20 May 2026 01:38:30 +0000
Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: gNr3UmaQBtKqInl7Tk2MOiF5AdesbOelvABE5b3aeus=)
2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: 7oAXnZAUBtQjX3ZHXMNMC7v8KvbechSNV9axONzAjso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Validity
Not Before: May 13 01:38:30 2026 GMT
Not After : May 20 01:38:30 2026 GMT
Subject: CN=6a03d616-dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:23:d4:29:d4:b8:6e:ef:33:e4:14:5f:7f:71:
0e:9a:e6:2c:d2:4d:99:79:a0:c7:67:54:a7:34:ce:
f5:a0:a8:74:be:2a:87:38:73:c4:05:9b:14:8a:b9:
1d:ad:d9:d2:37:d4:ed:ba:e7:43:ac:8e:7f:a9:c2:
34:38:be:5c:9a:d1:3b:98:34:79:50:43:84:24:48:
85:1b:e6:db:af:2a:a9:bf:89:d7:e9:d4:e1:bd:c4:
1b:ee:c2:f8:fb:0e:65:79:42:f0:34:ec:22:cb:f2:
a3:ef:7a:89:a7:78:6f:3e:49:17:94:96:34:aa:ed:
ff:1b:ea:f0:77:5c:17:fb:08:7f:07:a6:39:a9:ab:
93:ea:e8:5a:8f:7e:a0:f4:af:1f:82:49:06:14:a2:
d1:b8:f1:0c:07:97:52:3c:dd:fe:2b:37:f0:1b:18:
e6:17:fc:6c:3e:99:f3:13:28:65:de:d1:e7:7e:29:
fb:2f:55:4f:f7:b2:cb:b5:c5:4e:a3:6e:78:21:0b:
18:4e:92:cf:3a:a6:4c:16:4a:a9:26:cc:6a:20:26:
0e:a4:9e:4f:be:0c:71:cc:c6:90:a3:a2:fb:7a:4b:
32:e4:8f:1e:e5:42:ef:3d:9d:86:a3:f7:65:d9:0c:
64:09:b4:9d:b5:e1:13:83:25:ae:93:3c:68:74:e0:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:F1:D7:10:F3:1E:58:9D:21:B0:31:FD:1D:53:53:49:85:46:9C
X509v3 Authority Key Identifier:
keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:93:68:b7:f9:ad:3d:8c:19:16:c7:01:38:7e:42:c2:0a:
25:76:9c:f6:01:0b:21:94:a5:ef:c6:88:00:8c:93:0c:d4:a5:
ef:ac:d9:3f:94:a7:cc:41:48:a7:94:d6:72:27:98:6b:b5:3f:
18:de:82:d8:d2:c3:ad:c8:17:92:3b:ef:8c:61:2a:84:bf:1a:
05:51:b3:a7:c5:20:a3:bc:97:62:00:28:61:37:a6:2c:57:24:
a5:3d:af:ab:e5:bd:ff:2c:75:c6:2d:c8:b7:09:3c:c7:5f:4f:
c5:63:1c:73:df:f9:3f:b5:75:70:66:be:b7:fd:ad:d4:25:84:
2d:63:83:d5:74:ee:71:34:d0:3a:6a:6d:0b:45:a8:57:64:32:
9a:94:47:68:ac:b8:0e:72:da:99:7f:7e:d3:0b:e4:86:d3:ee:
e6:40:64:dc:48:1e:38:0f:c4:9f:8e:b4:cc:97:a0:2e:c0:e9:
75:15:a3:13:75:1a:4e:72:9e:16:03:86:cf:b1:8b:8e:fe:f0:
93:c3:e5:f6:70:b6:be:71:f1:67:d2:a0:b1:64:35:c3:cd:0e:
4e:c6:95:a8:ed:6f:91:6f:d1:24:5e:78:c5:3e:8c:9f:5f:f5:
35:58:01:d5:0d:90:5b:04:58:28:b7:1f:dd:86:fe:a0:02:53:
81:83:81:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4
NDkzQ0JCQTkwHhcNMjYwNTEzMDEzODMwWhcNMjYwNTIwMDEzODMwWjAYMRYwFAYD
VQQDEw02YTAzZDYxNi1kY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhCPUKdS4bu8z5BRff3EOmuYs0k2ZeaDHZ1SnNM71oKh0viqHOHPEBZsUirkd
rdnSN9TtuudDrI5/qcI0OL5cmtE7mDR5UEOEJEiFG+bbryqpv4nX6dThvcQb7sL4
+w5leULwNOwiy/Kj73qJp3hvPkkXlJY0qu3/G+rwd1wX+wh/B6Y5qauT6uhaj36g
9K8fgkkGFKLRuPEMB5dSPN3+KzfwGxjmF/xsPpnzEyhl3tHnfin7L1VP97LLtcVO
o254IQsYTpLPOqZMFkqpJsxqICYOpJ5PvgxxzMaQo6L7eksy5I8e5ULvPZ2Go/dl
2QxkCbSdteETgyWukzxodOBtwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5K8dcQ
8x5YnSGwMf0dU1NJhUacMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE
ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1
SDFZaXJld1BHV0dFazh1NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW4+TaLf5rT2MGRbHATh+QsIKJXac9gELIZSl78aIAIyTDNSl76zZP5SnzEFI
p5TWcieYa7U/GN6C2NLDrcgXkjvvjGEqhL8aBVGzp8Ugo7yXYgAoYTemLFckpT2v
q+W9/yx1xi3Itwk8x19PxWMcc9/5P7V1cGa+t/2t1CWELWOD1XTucTTQOmptC0Wo
V2QympRHaKy4DnLamX9+0wvkhtPu5kBk3EgeOA/En460zJegLsDpdRWjE3UaTnKe
FgOGz7GLjv7wk8Pl9nC2vnHxZ9KgsWQ1w80OTsaVqO1vkW/RJF54xT6Mn1/1NVgB
1Q2QWwRYKLcf3Yb+oAJTgYOB/A==
-----END CERTIFICATE-----
Generated at Wed May 13 11:06:17 2026 by rpki-client