
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
File: E0_EgN8WeugPs_TETe9qm6mZWpE.mft (raw, json)
Hash identifier: /BGEd9m++DUa9IPWkgHquCJIpPlR6MlUxLEJkVwa5Ic=
Subject key identifier: 2A:71:AA:A1:FB:C3:0D:AF:77:73:A6:17:BF:B9:62:21:43:95:86:A4
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Certificate issuer: /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
Manifest number: 33
Signing time: Wed 25 Mar 2026 07:52:43 +0000
Manifest this update: Wed 25 Mar 2026 07:52:42 +0000
Manifest next update: Wed 01 Apr 2026 07:52:42 +0000
Files and hashes: 1: E0_EgN8WeugPs_TETe9qm6mZWpE.crl (hash: 6DvfsjcAj9ekoMc84EBsmOeg9Kr4Ff4rzwmGXKgUJS0=)
2: F2C40E76FCCF11F08F91A5156B6F56BC.roa (hash: cGwV7bgKdceFNs6VRRM2Am77NZHIMJxyNkGVkbRTjLY=)
3: 17CFC78AFBA611F084AB06C85C6F56BC.roa (hash: EFiAI8HriNBWNG3CIQNK3bGdXLBEF+nSIaNzRbQQUMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Validity
Not Before: Mar 25 07:52:42 2026 GMT
Not After : Apr 1 07:52:42 2026 GMT
Subject: CN=69c3944a-454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:0f:b2:66:94:cc:b3:65:bd:89:5a:10:c2:
02:c5:d8:d0:45:bc:f7:0e:d6:31:a6:82:72:ad:4d:
8d:6d:b2:66:93:0f:4e:7d:e4:cc:89:d7:20:9c:05:
37:11:65:0a:20:9a:41:da:49:0a:14:d4:9b:f0:01:
67:8c:dd:d4:ca:b5:47:50:8c:2c:15:e6:89:63:8f:
e4:3d:01:07:45:f5:9a:20:de:47:3f:42:10:9d:8e:
d7:5c:fb:b4:e4:2a:6d:d5:fa:a0:13:5f:32:5f:98:
57:7c:2a:e7:6e:62:59:19:b9:d8:84:57:59:eb:7c:
8d:4f:b0:77:bc:66:5f:1d:4c:a9:1e:ec:d5:1b:d3:
65:b5:f8:03:a6:a9:80:d0:be:7e:2e:62:87:82:4b:
95:49:75:57:3d:18:00:62:ad:81:e5:b0:c2:1c:71:
00:7c:ed:63:1b:72:b6:ab:51:4d:ec:1e:64:74:04:
24:37:24:23:1f:58:e6:f1:ce:0c:6b:d7:5d:f6:29:
d2:04:8f:2e:18:00:92:26:c3:d9:36:ff:0d:d6:3d:
cc:e5:15:dd:ab:e2:c4:a1:01:af:06:ce:10:ae:c7:
66:f0:59:35:38:2e:55:52:45:89:4d:5a:a0:42:71:
17:6d:34:b9:02:58:b2:ad:8c:87:a6:e6:b6:ce:5e:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:AA:A1:FB:C3:0D:AF:77:73:A6:17:BF:B9:62:21:43:95:86:A4
X509v3 Authority Key Identifier:
keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:3b:61:b2:10:ee:4d:cd:b7:d4:3b:86:6a:2a:00:d5:73:
24:fd:d2:bf:5d:a0:f8:c4:89:c7:f7:a8:b5:cd:86:13:11:a5:
b7:b6:0f:8b:ba:f4:da:25:d7:bc:be:5e:cf:34:f0:29:31:b2:
48:4f:68:39:6a:b4:9e:7f:8e:dc:ca:12:4d:0f:49:2a:52:a2:
76:ee:61:c7:f9:39:04:e3:7d:dc:e4:66:f6:f3:b9:14:6f:c5:
1b:95:1d:ab:70:81:3e:94:8d:76:cd:a7:37:34:37:2a:2e:ea:
4d:54:c8:88:3b:1b:fc:de:f8:8c:bf:8b:84:47:7b:a5:67:35:
f6:0c:23:29:2d:45:6e:cb:47:ee:1e:e2:10:6c:00:63:bc:d7:
32:26:eb:b1:07:06:b6:d4:73:b3:14:b0:98:c1:67:15:64:3d:
4b:90:d2:00:ca:9a:40:c9:06:74:f0:a6:43:9c:ee:fa:1a:b3:
6f:2b:df:22:e2:7f:93:6f:d2:8f:26:71:8b:44:22:21:5b:7c:
56:56:2d:cc:69:9a:a2:4e:d7:f2:19:d7:2b:8b:a1:ae:46:74:
de:24:11:34:96:e4:c8:f3:4b:83:34:e6:61:a7:ff:10:6f:10:
02:bc:3f:45:b5:2f:37:bb:e6:01:61:1f:3b:bb:1c:f9:42:fa:
be:cf:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:48 2026 by rpki-client