
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
File: eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json)
Hash identifier: KIS8jPQMkqW243hWPTkhBvFhLyOtDA/Ews/UdcWKUHc=
Subject key identifier: 8A:41:CC:41:93:17:AB:13:4E:A4:3D:31:6F:DF:53:86:8C:EA:CF:AF
Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
Certificate issuer: /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
Manifest number: 0161
Signing time: Wed 25 Mar 2026 04:12:36 +0000
Manifest this update: Wed 25 Mar 2026 04:12:35 +0000
Manifest next update: Wed 01 Apr 2026 04:12:35 +0000
Files and hashes: 1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: XvgtE1wFG0j8w5CPxbirnTHLVMTmc0+6waS01b+tGq4=)
2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: rDpMkPCV540+7w+gq1O0qgoOaapf4RCwUWpus7wDt9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Validity
Not Before: Mar 25 04:12:35 2026 GMT
Not After : Apr 1 04:12:35 2026 GMT
Subject: CN=69c360b4-70ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:71:b4:56:63:2c:ec:d7:77:07:64:2a:dc:
e7:0a:9b:72:e5:6b:2a:0e:5e:f1:8d:df:57:67:fa:
ee:ec:d2:83:5d:00:fb:6c:ae:40:8f:02:49:b7:99:
7e:b6:ab:87:f4:21:52:d7:b1:53:cd:59:0c:6e:6e:
95:f0:5d:22:99:43:38:8a:8d:e2:22:f6:22:b5:32:
13:01:fd:5d:54:6f:83:8e:23:51:3c:f4:b8:38:e5:
38:3a:99:4c:7d:39:50:1b:e7:21:e5:ac:d9:6e:14:
21:52:fd:59:60:c0:a8:af:4f:15:e9:7e:20:0f:ea:
93:c7:2c:ed:91:39:bc:d3:18:be:d1:f5:08:00:dc:
7f:e4:ac:12:0a:ec:02:d3:e6:f5:b5:46:df:34:78:
7f:6d:bf:9b:cc:e2:c3:6c:22:fb:3d:68:23:f9:bd:
d1:82:ca:3c:35:53:f5:bf:91:33:6f:51:08:31:61:
46:0c:4f:5f:95:b9:94:ce:4a:49:26:33:29:1f:39:
07:44:94:9e:e0:73:03:8d:7d:13:3d:42:d9:1f:4f:
6b:0c:d3:78:d6:be:45:63:a4:3f:5d:b7:8f:46:33:
30:74:2f:14:3a:5c:20:ce:21:3e:83:ac:9f:01:22:
73:8e:b5:35:6a:bc:e6:9c:b7:21:ba:54:24:b3:67:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:CC:41:93:17:AB:13:4E:A4:3D:31:6F:DF:53:86:8C:EA:CF:AF
X509v3 Authority Key Identifier:
keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:88:bb:55:06:55:3e:15:8a:d0:be:13:ee:aa:64:c3:4b:
cc:88:09:03:90:04:a2:2d:ad:ac:97:d0:0b:99:0b:92:9a:65:
10:b4:6b:40:73:2d:92:a9:c2:92:28:a1:f0:0f:ed:92:9d:4d:
a3:d9:12:f9:53:fc:e0:6f:c9:38:62:56:9b:35:5b:1b:8d:4f:
01:75:b9:4f:33:37:55:b0:25:86:8e:ee:d6:53:4f:ff:67:d4:
62:62:8a:66:e9:f7:60:67:5f:6b:6a:bc:24:7d:aa:2c:53:91:
77:99:6b:4f:b3:bf:e3:78:89:a4:1d:1c:6a:45:1e:7d:d2:be:
f2:e5:27:a7:3b:5a:1c:59:49:ee:8d:8b:bf:fe:dc:00:d1:b7:
21:01:82:83:cb:82:44:30:7f:9a:9b:74:9f:21:59:27:8d:c3:
49:88:a7:8b:67:a2:8e:20:10:37:4c:ae:eb:94:a4:4a:90:f6:
8b:5f:1b:66:0f:94:34:69:14:f7:ca:a8:a6:b8:20:d6:74:5f:
aa:f6:2f:87:e7:bb:f7:6b:13:17:ac:83:c9:d9:aa:2f:99:95:
3b:4f:15:4a:83:65:c4:bc:86:59:10:07:bf:2a:84:1d:03:4c:
2f:af:ec:98:df:9a:30:ce:8c:40:25:94:b0:f4:18:34:25:00:
c3:c5:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:26:00 2026 by rpki-client