
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
File: EJuU59mz5nnpnGKnotSXoX05lxg.mft (raw, json)
Hash identifier: RIm7mIHjp3GMtaJRefzg+xt3okMXQETiY0c2TaLAQmU=
Subject key identifier: 96:9D:39:B4:02:00:BE:05:C0:8F:71:45:6B:E5:D9:A7:7C:D8:86:82
Authority key identifier: 10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
Certificate issuer: /CN=A91AA1F9/serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
Manifest number: 3C
Signing time: Fri 09 Oct 2026 09:19:50 +0000
Manifest this update: Fri 09 Oct 2026 09:19:49 +0000
Manifest next update: Fri 16 Oct 2026 09:19:49 +0000
Files and hashes: 1: EJuU59mz5nnpnGKnotSXoX05lxg.crl (hash: 4lIx4XuiigRQnBNMLddG7c0we9qPxdo76iLEkDrv1TQ=)
2: 4A12ECDA687B11F1991CF7FE6647A888.roa (hash: DUotnWkAe6FNoAWorklQvryeqsRSLpu4L9xS7rYPygY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Validity
Not Before: Oct 9 09:19:49 2026 GMT
Not After : Oct 16 09:19:49 2026 GMT
Subject: CN=6ac8b1b5-f3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:c1:91:c4:06:7d:db:16:d9:71:df:aa:42:
fd:b8:03:70:e9:14:da:39:05:57:c2:cb:1c:51:aa:
34:73:6e:e1:4f:b6:d2:02:f5:48:56:da:c2:2e:ce:
e7:0d:d0:cb:ea:41:cb:c0:b8:28:cd:db:e3:25:0d:
a8:01:6c:ef:ef:7e:b6:e2:65:3a:88:e0:62:51:c8:
60:5d:cc:00:03:b7:b8:4d:31:29:97:a6:0e:ac:3a:
26:07:b0:77:a1:44:0d:66:8d:08:20:14:0d:b1:d7:
64:c7:70:52:0c:63:66:ea:4f:5b:70:ac:8f:b5:ab:
65:88:a5:65:f8:e4:6b:3e:99:7d:98:0c:de:02:73:
6d:9b:69:40:ba:5b:7b:a1:c1:56:82:f8:78:7b:04:
bc:51:d8:2e:8d:bf:96:63:ed:e6:d5:84:12:f5:36:
94:bd:4d:7d:da:34:7f:13:49:a5:e3:9b:1f:dd:e0:
10:81:cc:ef:ca:6f:c4:a4:ce:f9:ab:98:b5:fa:79:
b9:cb:14:0a:1f:5c:d0:55:ed:6d:03:97:9d:8f:85:
5b:80:27:a2:21:22:fc:2d:26:ff:9b:06:fe:eb:43:
fd:d0:d6:2b:6d:42:31:f6:d6:62:62:01:6e:91:1b:
3a:62:4e:2a:a8:cb:01:88:37:52:a5:ff:1e:89:49:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:39:B4:02:00:BE:05:C0:8F:71:45:6B:E5:D9:A7:7C:D8:86:82
X509v3 Authority Key Identifier:
keyid:10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c2:35:16:6b:01:37:1f:10:dc:3b:39:93:74:bc:ba:a6:21:
77:0a:55:38:4e:b9:15:43:fa:e6:3c:a4:45:49:f2:bc:76:d7:
5c:dc:95:b5:52:0a:c2:a3:63:a3:59:46:b9:9e:d1:fc:27:24:
1e:6a:68:42:5b:ee:f5:de:3a:18:64:6a:7c:f9:4c:00:42:70:
c3:ff:21:b9:bd:e1:6a:06:95:b8:9d:53:be:ad:2d:39:e6:6e:
ca:13:9e:31:b3:91:e7:12:15:79:30:41:d4:c5:41:03:d8:c8:
11:c3:32:43:b6:41:c8:ce:52:8e:a1:93:df:0b:dc:a9:30:83:
1d:19:a8:fa:9f:d4:63:32:7b:8a:e3:89:ec:5b:78:d5:f8:19:
9f:9a:ba:7d:42:43:7d:ee:ef:53:1f:51:63:57:f3:ad:d2:1f:
b7:94:49:bb:1f:05:a1:c5:56:2d:fb:c1:20:d9:93:a1:f6:b4:
8c:06:da:ab:98:46:c4:3c:f0:89:55:94:5a:34:18:ca:a9:82:
ec:d5:c6:e3:33:5a:c6:f0:8b:83:0b:c4:0a:4e:07:d7:0f:12:
4e:fc:60:ba:f9:e6:8b:3f:e5:68:d3:af:20:f7:db:da:6c:e3:
c1:3a:c7:c8:de:9f:eb:59:3c:c4:01:f3:8f:44:61:69:ef:8b:
33:ab:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:53:07 2026 by rpki-client