
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier: M69Qb9+RX+c3JCDgqMhNuogkcqDKijFIjdnKXprPPY0=
Subject key identifier: FD:5A:AC:52:34:4D:5F:B1:BA:9B:11:B3:E0:9E:CB:BE:69:30:CB:C3
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number: D9
Signing time: Thu 23 Jul 2026 08:25:33 +0000
Manifest this update: Thu 23 Jul 2026 08:25:33 +0000
Manifest next update: Thu 30 Jul 2026 08:25:33 +0000
Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: +F/+2LrEQBoXRD6fBt8if+9T+wc4xvyVnH3LvO8EeD8=)
2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: aexPRYUaQzk9f+YqOAXFWvuLsqoY2jUyeBbMfFjAm6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Validity
Not Before: Jul 23 08:25:33 2026 GMT
Not After : Jul 30 08:25:33 2026 GMT
Subject: CN=6a61cffd-13ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:af:78:5e:3d:52:fc:c5:f9:d3:e7:7a:b9:
15:eb:9c:ef:39:56:86:05:34:f8:26:54:d6:cc:76:
63:95:68:3d:6a:b3:43:48:78:83:c5:8e:d3:09:b5:
0a:30:cd:0b:08:5c:d2:fd:e2:60:0c:4d:8b:f3:8b:
dd:55:e6:95:ac:a5:e1:15:81:86:9f:8c:34:a5:d7:
25:cd:2f:d9:fe:b8:87:65:5b:07:ee:f9:19:95:21:
70:c1:54:eb:f8:6b:1e:f3:87:8d:48:f9:a7:57:f1:
b0:70:3d:97:ed:ba:d3:30:82:68:41:57:e8:97:0b:
23:a3:a2:ca:c2:f4:88:4e:49:7d:aa:b8:52:b3:11:
d1:32:68:94:c0:3b:fe:e5:5e:76:d2:9c:a3:15:b9:
0a:66:5e:ad:7a:71:75:67:44:b5:c8:5a:97:9a:f9:
49:86:8f:9a:31:20:9a:09:f7:13:63:66:95:ab:82:
8e:be:9b:c7:43:2e:2b:6d:c0:7e:db:51:2c:28:d6:
33:3b:52:4f:1f:59:69:b7:14:c8:88:2b:51:31:92:
ca:fb:5f:88:f8:dc:13:c2:38:fa:28:28:f3:6d:a0:
78:48:10:b7:26:89:db:d0:d0:df:d4:4d:2c:57:ed:
47:fb:8f:d5:0e:6c:d7:9b:ae:ce:72:e5:b3:a7:a0:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:AC:52:34:4D:5F:B1:BA:9B:11:B3:E0:9E:CB:BE:69:30:CB:C3
X509v3 Authority Key Identifier:
keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:97:9b:00:14:ef:7b:e1:b4:6a:fd:83:ce:91:b8:be:7a:99:
e2:63:e8:b7:48:75:ca:4d:78:ef:ff:24:bb:0c:b4:8f:0d:cd:
f0:67:fa:35:76:6e:d2:bb:bd:ab:7b:27:e1:21:13:fa:0e:ba:
f1:f3:28:e7:a2:75:68:ab:d1:ad:d4:33:35:f6:da:70:bf:82:
b9:a9:dc:13:3e:f5:33:90:bd:ac:dc:ea:63:fd:23:9d:62:14:
56:90:25:4d:5b:32:ca:00:3c:fe:e7:8e:d5:47:4d:06:9a:33:
94:a4:c1:cb:76:14:dd:de:17:63:47:a5:dd:d5:cd:94:d0:8d:
fb:cd:02:19:8d:fe:d4:33:1f:a0:ac:4c:22:fa:5d:24:7d:b8:
ab:49:07:b7:e9:18:5a:bd:26:07:ce:d2:ed:ea:59:e9:56:4b:
49:93:3f:1a:31:4b:c0:87:6e:a9:70:e6:b0:9c:02:36:76:ba:
e8:48:1d:63:d1:e4:b2:96:40:b1:fe:89:36:d2:b4:93:eb:e2:
37:4a:ac:c2:5b:3a:15:cd:73:d2:83:7a:8e:42:1d:d3:8e:80:
07:8e:04:7f:e7:e2:54:5c:d8:3d:12:96:f0:be:b7:d4:90:23:
89:a1:d2:f2:30:e3:a7:97:73:f4:93:1a:49:92:be:3e:0c:78:
a4:a2:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:55 2026 by rpki-client