
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
File: E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft (raw, json)
Hash identifier: X3daMTja4Snuy3Aqis6Hxbbzc5oP+szKeIiW5XnGNcg=
Subject key identifier: 72:C2:4D:84:96:30:0E:A0:54:45:EF:34:01:5F:02:A7:A2:89:43:42
Authority key identifier: 13:66:1C:EC:9B:12:B0:78:37:1F:FD:A0:59:64:F5:BE:59:9B:89:15
Certificate issuer: /CN=A91B18B5/serialNumber=13661CEC9B12B078371FFDA05964F5BE599B8915
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
Manifest number: 27
Signing time: Wed 23 Sep 2026 08:31:47 +0000
Manifest this update: Wed 23 Sep 2026 08:31:47 +0000
Manifest next update: Wed 30 Sep 2026 08:31:47 +0000
Files and hashes: 1: E2Yc7JsSsHg3H_2gWWT1vlmbiRU.crl (hash: ocAvdxjhbqGJvVXq74mHv9gKvL5BLneKWyLPsFAs+OE=)
2: U7zeixtj6j7i2wFM6HYb4lmyfYQ.asa (hash: uFp59TJpvt6W6wYsnS6gvjEUIK0pNckqweLAltCPm6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.crl
rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B18B5, serialNumber=13661CEC9B12B078371FFDA05964F5BE599B8915
Validity
Not Before: Sep 23 08:31:47 2026 GMT
Not After : Sep 30 08:31:47 2026 GMT
Subject: CN=6ab38e73-9840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:93:0c:18:02:cd:bd:a8:de:32:25:80:7b:
72:c4:ec:6a:a0:8e:86:0e:4c:af:09:71:04:03:78:
bc:34:a3:22:04:f4:71:40:88:44:fe:1a:01:25:a0:
01:37:2b:fc:e3:38:b0:ce:9b:7b:6b:9b:fe:52:03:
30:a2:83:f6:13:79:13:ed:66:1d:68:55:c1:00:ee:
2a:d4:25:a4:c3:11:d5:b0:24:4d:89:68:5b:af:be:
cc:29:34:5b:49:42:b9:68:c8:bc:fc:11:8c:e0:9b:
79:bd:a4:55:44:d0:2d:cd:38:23:73:99:1a:22:77:
3e:d2:52:d8:a8:a2:3a:5a:4e:78:95:7c:da:4a:08:
d7:12:0f:fa:50:9a:b5:d9:a1:5f:1e:4b:d9:e3:63:
af:0c:7c:f4:71:18:53:39:a6:68:e8:9d:e4:76:3b:
a1:b3:4e:d7:5e:70:b0:5f:5c:d1:49:87:a1:ff:48:
b2:f0:6b:16:47:b3:10:16:5b:eb:40:05:dc:ba:49:
f7:db:2e:24:7c:ef:2b:5c:10:63:a2:8d:ce:fa:e9:
a0:b4:03:9d:fc:ff:69:c7:66:92:a0:8a:df:89:43:
b9:4f:9a:04:82:46:51:8d:d8:85:7a:a9:51:07:8a:
45:22:2a:87:97:e7:23:8c:62:cc:3b:df:6b:d5:1b:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:4D:84:96:30:0E:A0:54:45:EF:34:01:5F:02:A7:A2:89:43:42
X509v3 Authority Key Identifier:
keyid:13:66:1C:EC:9B:12:B0:78:37:1F:FD:A0:59:64:F5:BE:59:9B:89:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/9F5D19FC7E5311F18C5BDC2F85A30FBC/E2Yc7JsSsHg3H_2gWWT1vlmbiRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:6e:b6:0b:a2:fc:4b:f0:71:04:d0:77:b5:73:25:64:96:
da:65:51:e6:ff:aa:e8:86:6e:9f:b0:f8:2d:67:56:b5:c4:4d:
2f:39:2e:df:b8:c5:c7:73:c0:d7:dd:21:06:94:8c:96:9a:e7:
70:3f:31:9e:48:d9:3c:67:ae:95:66:3e:1c:b3:72:19:81:d6:
96:02:68:50:84:22:5b:6d:b6:71:2f:4d:c6:77:aa:70:b1:87:
d8:62:1d:65:8a:d2:ee:84:28:15:64:70:57:a3:3f:db:6f:08:
33:95:79:1d:ce:76:d4:a5:b7:b1:0d:b4:c9:cf:bc:dd:91:98:
0b:0c:26:c6:ef:99:f0:d2:7b:f6:93:d4:6d:7c:c7:b4:54:b4:
b2:c8:c0:1a:30:f4:5b:7d:dc:73:e2:ed:b9:61:75:aa:d6:75:
a0:c8:93:ec:69:f1:cb:77:ef:8c:85:a3:ed:35:cf:19:ef:b5:
40:35:c6:4a:25:b8:2b:05:8e:b3:29:79:e8:b8:28:ca:cd:50:
06:4e:f1:a2:ef:80:bc:47:99:22:11:8d:2b:cd:67:7a:3c:14:
d8:de:e6:21:e9:3c:13:2f:59:74:36:a9:6f:ec:fa:fb:7f:56:
d2:5b:80:d9:46:5f:95:a3:ca:db:d0:bc:61:de:ee:e7:72:0d:
28:74:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:05:58 2026 by rpki-client