
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: NWGVIRWvl5J6RmPmP6ibznoKBAEMYNArSDJH8e4GiuQ=
Subject key identifier: 41:F5:C2:ED:30:4C:A7:94:33:E8:63:57:BD:7D:F4:10:24:1D:F7:85
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 0223
Signing time: Wed 13 May 2026 02:54:08 +0000
Manifest this update: Wed 13 May 2026 02:54:07 +0000
Manifest next update: Wed 20 May 2026 02:54:07 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: d8zVQg5sm66w49w0K7zzqZwm+N8nvmk6NaUt+iRpshM=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: May 13 02:54:07 2026 GMT
Not After : May 20 02:54:07 2026 GMT
Subject: CN=6a03e7d0-832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:32:bd:9c:60:28:31:37:7a:5c:ac:04:48:
9b:31:67:43:4b:12:22:b2:fd:47:fe:9c:c3:77:2a:
14:47:98:03:d7:e0:4b:b9:e2:2b:79:65:50:dd:a7:
cc:99:66:63:6c:83:09:1e:ff:0e:80:4a:62:0c:5d:
31:a8:7b:1a:9f:bb:3e:05:09:26:87:31:40:0b:57:
97:5e:d4:52:94:ae:11:cd:28:af:00:aa:2c:15:cb:
14:50:5c:21:b9:82:c0:34:5c:13:e7:ba:66:72:f4:
5b:45:c8:88:1c:f2:7b:43:3e:4d:1c:e1:a5:b5:27:
ea:6d:52:f2:a3:e0:99:b9:0d:a6:3d:72:a1:bb:1e:
60:1d:b6:c0:9f:37:f3:f1:58:ec:ce:9b:ff:07:2c:
28:99:02:f3:d3:12:16:a5:9d:ee:4d:55:67:23:0b:
1a:77:3a:cd:da:7c:15:16:87:5b:a6:cd:0f:d6:21:
cb:df:39:17:b8:49:f8:1c:a8:4e:70:cf:b0:11:85:
57:21:27:d6:90:56:b2:f5:be:af:96:22:b9:4c:fb:
c2:da:40:24:dc:85:2e:ed:09:d3:98:16:df:4a:c1:
89:19:63:7b:0c:09:31:23:06:b1:b1:6c:ce:c0:a3:
d3:8f:7d:09:9b:19:e0:58:42:2b:e3:69:c1:e2:38:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:C2:ED:30:4C:A7:94:33:E8:63:57:BD:7D:F4:10:24:1D:F7:85
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:90:17:c3:d2:25:44:84:44:78:31:57:b0:0e:4d:2d:31:
ef:a9:e2:0b:c9:29:84:b1:96:84:75:be:42:b3:c4:23:3e:12:
f6:d6:3c:85:39:2e:3e:29:e4:2e:38:3e:79:90:56:74:9d:6f:
e8:1b:bd:d3:9d:22:6c:cc:51:68:fd:17:8c:26:50:31:93:43:
7b:be:db:ba:ed:0d:81:de:c9:d5:f3:30:5e:90:90:ff:71:e9:
6d:0f:b8:13:04:8f:bf:95:90:50:96:15:ce:cd:9c:93:71:38:
e1:fd:fe:0d:12:a4:93:99:40:60:2e:6e:75:8b:cb:92:1d:31:
8a:fa:75:b0:83:0b:ee:cb:e5:8e:68:24:e4:e8:32:5a:68:b5:
9d:05:b7:e5:b6:f2:1e:f4:b7:fb:39:40:dc:36:90:ee:40:87:
c8:38:77:af:8e:8d:10:a2:52:a5:a0:ab:d2:a3:2b:45:62:82:
ad:56:d9:74:08:b7:01:4b:00:85:cf:98:9a:73:7a:2c:a3:05:
95:f4:5a:4e:ea:c2:19:5a:18:05:ea:ea:64:9d:5d:06:33:53:
96:77:92:50:9f:b2:03:00:f8:79:01:29:47:c4:39:0c:62:d6:
1b:18:12:24:5a:6a:fb:37:41:43:47:37:bf:6b:4c:c3:6a:f6:
d5:f5:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:59 2026 by rpki-client