
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier: 9+JYRwZxPn6yaF6iZw8w3FvzvggUbpxREVLvjnxaiFI=
Subject key identifier: A5:D8:14:F0:44:2A:91:F0:C9:28:52:34:F6:0A:67:EB:84:DF:05:6B
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number: B3
Signing time: Mon 11 May 2026 07:14:33 +0000
Manifest this update: Mon 11 May 2026 07:14:32 +0000
Manifest next update: Mon 18 May 2026 07:14:32 +0000
Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: F3kn1jIAVD5pc3P6/IK/xGvhBkxu8YPdmiTRyTTDQ3E=)
2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: /Q9gpxY9Rv8Y6XwClcVbAHo67QEBLFEE8ponSdmbbqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Validity
Not Before: May 11 07:14:32 2026 GMT
Not After : May 18 07:14:32 2026 GMT
Subject: CN=6a0181d9-5dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5a:6a:aa:a5:c3:72:f4:eb:7c:97:97:69:02:
59:f0:31:25:f8:41:ce:82:c0:ee:d3:03:50:f9:c9:
e4:3c:61:45:9f:59:b9:02:08:c3:52:f3:2f:be:ce:
b5:59:bb:39:ad:94:9b:00:5a:43:4c:f1:ef:0e:22:
3c:38:60:d2:ce:85:68:aa:1d:38:90:d7:5f:a2:20:
63:47:f7:e8:44:d3:22:f4:90:7a:8c:2e:84:9d:04:
41:cf:fe:81:59:93:11:9e:0b:06:8e:d6:c4:98:71:
19:4b:67:77:bf:bf:84:1c:cf:96:28:df:70:77:87:
6d:c9:8e:ea:11:5b:e2:b5:82:f9:ef:a9:65:ed:31:
a9:b6:ec:e7:96:88:85:9b:3c:99:5f:12:77:e7:cd:
c8:6d:d0:bd:70:ff:4a:45:bc:9a:65:bb:bb:2e:5e:
c1:35:29:bc:b8:5e:dd:a9:f2:c5:9e:91:c7:1b:a5:
a0:af:59:40:85:ee:24:bb:83:1c:cd:d7:6c:14:a7:
d7:8b:a6:16:d0:08:67:af:32:90:ed:5f:53:30:f2:
c5:66:17:02:b6:77:48:85:ac:38:51:8b:96:48:77:
6f:61:f4:1d:c8:43:40:01:eb:a3:6a:64:d9:2f:4c:
fd:1f:3c:4e:0c:ae:37:0c:be:a9:65:2e:e5:0a:92:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:14:F0:44:2A:91:F0:C9:28:52:34:F6:0A:67:EB:84:DF:05:6B
X509v3 Authority Key Identifier:
keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:97:a6:5b:c8:5a:9f:12:af:eb:2e:2a:bd:b5:c7:e3:72:33:
d1:cb:a5:07:b9:b8:ad:09:4c:14:69:be:cb:dc:18:7a:68:bd:
0b:c3:11:23:e1:b9:9b:22:d2:62:70:a0:f3:91:59:8d:47:a9:
31:12:8b:e6:5a:1a:20:31:09:f1:b6:fd:05:0d:5d:11:e2:5a:
a1:fe:d8:53:3f:32:23:0b:30:a3:91:4e:6b:72:37:39:f3:4d:
5d:86:7c:3c:a3:37:1e:bc:d3:c1:a8:87:47:36:ab:01:bf:a6:
d4:0b:9e:50:fe:45:80:9e:2d:80:55:1a:72:94:8e:34:ed:72:
36:d7:00:a6:7f:63:a2:0a:42:ac:13:7b:0b:13:54:68:b5:89:
83:9c:6c:a5:04:14:e5:c9:3d:23:6d:98:11:ca:0f:9d:76:19:
49:02:2f:a2:24:67:8b:cb:93:3f:49:8e:3e:06:5f:4c:8c:b1:
97:a9:4b:e2:cd:83:f0:7d:0b:54:76:82:27:5e:5c:a2:1f:1b:
f8:d5:cd:3a:75:cb:9a:a6:84:61:e3:bd:35:5a:44:a9:14:34:
94:e1:70:c9:75:05:27:30:1b:8c:8e:75:20:20:8a:70:26:f8:
bb:81:74:99:7c:25:f1:c3:fc:cd:57:3f:04:93:0b:b8:b8:c5:
e0:9f:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:55 2026 by rpki-client