
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json)
Hash identifier: BlEBDNZS39911W1NYqXp+L2J7lsp4iGll6MFWhhOI/A=
Subject key identifier: C4:2C:C0:49:5F:AA:3F:3A:14:9E:D9:B7:7E:0F:38:71:59:40:CF:E1
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
Manifest number: 020E
Signing time: Thu 23 Jul 2026 04:17:59 +0000
Manifest this update: Thu 23 Jul 2026 04:17:58 +0000
Manifest next update: Thu 30 Jul 2026 04:17:58 +0000
Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: r/kyFljarBesVa7s5TK6bwsXAgOnOTk2LJ5rV6svTEo=)
2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Validity
Not Before: Jul 23 04:17:58 2026 GMT
Not After : Jul 30 04:17:58 2026 GMT
Subject: CN=6a6195f7-7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:b7:4f:06:21:a3:e4:ba:a7:16:26:3c:f6:
91:15:56:cd:0e:86:b4:3b:c7:f6:e7:f5:60:da:d1:
d7:fc:95:0d:f0:a6:51:fc:63:25:2a:b9:0f:99:0b:
1c:d6:ef:2c:e6:a4:4d:60:01:6b:af:bc:4f:d4:89:
74:e9:d2:10:02:fd:aa:11:15:9c:ff:08:5f:71:89:
36:d7:7b:d7:91:e6:1c:d9:0f:05:34:62:c9:6a:21:
9a:6b:01:65:27:bf:c0:15:9e:6c:59:3d:14:6f:e7:
46:45:c8:66:9b:a7:89:55:6d:d8:d3:ff:90:4e:4d:
52:35:19:82:f7:7c:26:07:2d:8b:e5:f5:1c:81:a3:
68:a7:14:03:fa:68:3b:d2:86:cc:c2:d6:9a:a8:ed:
bf:ad:e1:3c:aa:88:05:b8:f7:3b:1d:8e:45:fb:df:
6d:8c:48:86:e1:c2:30:64:af:7e:b5:aa:9c:cb:60:
11:fd:b0:78:c7:d9:1a:93:6e:70:a0:21:a4:dd:44:
5c:85:9d:c9:00:4a:59:35:9d:6f:dc:21:a5:13:1b:
c9:bb:22:71:78:26:84:35:35:18:0e:54:fa:e8:c2:
e0:9f:aa:79:c3:38:e0:ec:ec:6d:5b:68:9c:51:c1:
7f:41:c6:18:06:e0:32:b2:ca:a9:d6:e3:bb:c4:71:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:C0:49:5F:AA:3F:3A:14:9E:D9:B7:7E:0F:38:71:59:40:CF:E1
X509v3 Authority Key Identifier:
keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:87:98:60:fe:13:77:68:f3:89:65:83:ba:07:a8:58:21:
19:a9:ab:28:7f:0b:5d:82:ba:c6:e2:12:79:e7:a1:de:01:b3:
dd:47:e3:f4:80:ab:cc:f2:df:36:99:8d:ca:e5:78:59:83:5f:
55:8e:fe:cd:f7:59:f4:d0:b2:9d:18:a4:44:28:3b:8d:c3:05:
00:74:82:c1:ed:6f:91:ea:16:e3:b5:c8:fc:cd:78:9c:a5:2f:
55:70:ba:63:eb:4d:d0:af:c1:c8:09:44:31:87:5d:0d:2e:0a:
09:b1:79:d3:bc:49:8f:9f:35:91:56:49:58:92:e8:fa:c2:2c:
e8:3a:ea:d6:ef:98:a5:63:eb:6e:fe:1b:71:e2:95:19:d5:28:
73:08:1f:8d:f8:73:11:b9:0e:4a:fd:54:4a:be:a6:8a:23:3f:
f9:16:5b:d5:c9:77:a1:f3:a1:32:84:f1:bc:68:0f:3e:cd:20:
29:a6:4d:56:23:35:b4:9e:ec:4e:76:e2:aa:18:ef:32:40:70:
44:8c:37:c1:d1:86:0e:a8:5a:47:76:ab:3d:af:5e:a7:15:95:
36:31:ff:1d:67:88:88:41:65:51:26:7d:34:49:e8:c4:4d:84:
a0:52:e4:2a:cc:a6:09:fd:98:aa:0b:75:16:9a:34:94:a4:f5:
22:73:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:09 2026 by rpki-client