
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
File: eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft (raw, json)
Hash identifier: Ie7MigXi+nSwOaeE0u6atMuxhab/3T8a5YXLgTBmLSs=
Subject key identifier: A5:25:F3:FF:3B:82:0E:C5:A7:00:15:A3:80:0A:18:B0:71:08:94:86
Authority key identifier: 78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
Certificate issuer: /CN=A91BCB09/serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
Manifest number: 25
Signing time: Wed 25 Mar 2026 07:59:46 +0000
Manifest this update: Wed 25 Mar 2026 07:59:45 +0000
Manifest next update: Wed 01 Apr 2026 07:59:45 +0000
Files and hashes: 1: eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl (hash: StmZWUt5kKrBzqumfPyrBZk3nIMpsO2rw0KFsgwy17c=)
2: 5BC28CFEF50011F09A5618CE516F56BC.roa (hash: tFyYjAt8LxXxOLUQN63OQgyZ+oQbtNLtHD7NVqig9oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB09, serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Validity
Not Before: Mar 25 07:59:45 2026 GMT
Not After : Apr 1 07:59:45 2026 GMT
Subject: CN=69c395f2-b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:41:aa:89:46:60:85:d1:bb:da:69:f8:c2:
d6:c6:9b:52:79:c5:b2:a5:7f:a0:4b:e3:72:03:7a:
41:de:6a:3a:17:0b:ce:6a:5b:89:52:66:57:57:70:
9a:27:be:23:20:ec:d4:1e:69:b3:87:29:bd:7c:90:
94:e0:f1:e1:40:ef:02:4a:bf:16:3b:32:b8:68:a0:
2e:95:8b:0a:df:3a:34:68:c2:f4:eb:41:c6:fb:13:
c7:ac:6f:8d:4b:88:c6:0e:6e:dc:f0:b4:e9:d3:d0:
bb:a9:5f:4a:8c:fe:c9:66:32:df:f6:4c:74:cf:76:
67:81:19:10:cf:a1:08:d1:fd:29:57:1e:60:43:9f:
a2:50:64:d8:82:a9:a1:6c:28:b2:9d:50:e1:46:60:
9d:0a:92:df:7d:d2:ec:62:2c:29:19:2d:3e:a2:f9:
ee:67:48:15:39:08:f2:63:1d:96:9b:86:f5:52:a4:
cf:5d:12:ed:09:43:15:22:16:17:39:78:29:4d:6d:
51:87:87:b5:5f:52:cb:f0:ba:bf:b6:2d:d6:37:ed:
67:5d:32:86:aa:4f:aa:1b:f3:1a:99:12:50:c5:17:
03:36:55:61:a2:a9:63:43:0c:ea:54:c9:3e:65:e2:
c5:2d:4a:88:6d:64:1f:3f:5e:eb:d3:f7:33:34:79:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:F3:FF:3B:82:0E:C5:A7:00:15:A3:80:0A:18:B0:71:08:94:86
X509v3 Authority Key Identifier:
keyid:78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:aa:05:03:bb:32:31:8f:80:b7:96:57:29:20:2e:2c:94:ca:
41:5f:a5:58:40:fd:78:29:a1:11:10:9d:3b:bd:5d:55:b8:0f:
88:d9:32:cb:ad:dd:4e:06:ac:43:98:c8:a2:a3:89:a6:d5:ff:
3d:9a:3f:be:a8:8f:ae:10:18:6e:70:74:2b:70:c6:0f:08:82:
c1:59:cd:9c:8d:0d:58:48:fe:fe:f4:b5:df:54:b4:55:97:bf:
00:04:c5:26:96:a6:68:86:7e:56:1f:a1:2e:75:5f:46:0e:0c:
d4:be:f9:a4:c3:7e:75:5f:fe:1d:71:0d:b3:79:ee:e7:e2:e3:
b0:29:d9:48:55:01:68:89:fd:00:b1:dd:26:cb:b8:ba:bd:7d:
3b:96:db:de:48:b5:65:c6:a0:8a:45:d1:23:b2:1b:fe:f2:a2:
c7:d3:9f:61:66:9b:6c:b5:94:12:49:39:43:85:7c:c5:2f:ab:
d1:27:19:da:15:60:26:04:a0:4f:bc:fb:f6:41:ef:08:69:3f:
eb:de:9b:aa:1a:2e:7c:c7:43:2d:ab:63:29:4c:45:43:73:12:
8c:4f:98:67:5d:54:36:74:ce:8a:03:9c:54:1d:e1:5b:a6:fa:
2b:27:57:41:fe:04:a7:f0:32:c1:07:05:ae:45:d3:bd:4c:fb:
9a:9d:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:16 2026 by rpki-client