
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier: KGmwLrir+vSovmivo3zshOSTOGnyqhoWaS/z1aR3mQw=
Subject key identifier: 66:A5:46:40:16:08:71:85:FF:A6:C2:FD:32:94:3D:8B:A3:20:C8:72
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 04:38:09 +0000
Manifest this update: Wed 25 Mar 2026 04:38:08 +0000
Manifest next update: Wed 01 Apr 2026 04:38:08 +0000
Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: Zgzve/lnT2oC4EayN/b/e+863uBnJM/MabnLP+CxNa0=)
2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: wpEukBumTxmT4e2pU7Nv0zr8HBN5v6g/VuuPyeiJSDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Validity
Not Before: Mar 25 04:38:08 2026 GMT
Not After : Apr 1 04:38:08 2026 GMT
Subject: CN=69c366b1-e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:d8:98:83:fa:86:08:70:fb:fb:f8:59:59:
b5:45:d9:75:89:b4:9a:e3:90:b9:b1:14:5a:da:61:
88:6d:54:48:b8:a3:fa:9f:70:11:fa:d0:65:e8:a4:
17:ae:61:55:32:c9:ac:b9:4e:63:5b:da:7b:7a:fe:
9f:04:cf:a0:4e:d9:25:8e:78:ab:0a:7e:7f:a6:0d:
85:64:f3:a4:08:f8:52:29:48:a0:66:7f:94:43:c1:
74:6f:b1:b2:ed:8f:d9:86:8b:41:40:dc:38:9f:13:
7a:ba:5c:a7:8b:d1:6c:f8:27:a8:65:45:3c:7b:e3:
70:b2:09:df:b5:ee:4f:80:b2:ba:e9:c7:48:46:8e:
93:a0:76:4d:f1:16:cc:a0:56:64:e6:b8:95:69:1f:
c7:92:3d:ae:ec:14:55:ae:75:9b:a8:07:b1:ab:e5:
20:44:d7:aa:ac:53:2c:c4:c5:c9:eb:54:6d:26:b3:
8d:68:10:5e:a3:2a:90:da:88:ca:c5:75:25:b6:f5:
2f:a2:c4:22:fd:2d:89:cc:24:f3:10:87:e1:11:31:
1a:ff:9e:f4:17:75:2d:16:95:e5:81:4d:6d:ca:66:
39:76:79:af:ca:a4:be:77:af:08:1f:f4:b9:70:57:
12:79:30:19:31:52:8b:31:42:97:2e:fa:8d:71:56:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:46:40:16:08:71:85:FF:A6:C2:FD:32:94:3D:8B:A3:20:C8:72
X509v3 Authority Key Identifier:
keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:2f:51:91:d9:4a:4f:92:93:0a:14:7d:06:eb:a4:ea:81:
33:a1:be:86:0f:3d:2e:92:84:ee:dd:9d:d5:1c:da:37:42:6a:
52:c3:64:ee:30:90:6d:1f:12:b1:8b:3e:9c:13:ca:1d:a7:aa:
24:6d:60:ff:d1:a4:db:54:3d:1d:87:2b:56:7b:0c:8f:e4:ad:
86:a7:1b:f6:9e:c9:e0:a2:99:27:fc:86:b0:d5:08:06:35:0b:
e7:92:78:c3:4f:58:33:1b:94:fe:7c:63:0f:29:9e:05:c0:45:
ef:7a:16:ea:63:8d:07:bb:8c:21:4d:49:60:ac:50:c2:ba:c3:
64:64:a5:7c:2d:b4:9f:7a:90:36:1e:f0:f3:55:92:7b:ea:56:
19:e3:5c:4d:3e:aa:05:5c:17:fc:58:ad:d7:b9:7c:92:46:ef:
6f:60:1e:f4:15:a7:eb:23:af:91:99:1e:9e:4f:58:c2:0d:24:
43:69:6c:e3:9e:c4:f7:f7:cf:35:c9:05:d3:09:1e:7f:44:f4:
99:5b:7a:50:ed:5f:f1:86:eb:c7:98:0b:b9:7f:90:ae:2f:95:
81:af:b8:47:76:ee:b7:22:2b:57:08:59:10:a0:2c:c9:ae:41:
69:98:24:0c:42:e3:d9:a2:f3:64:7c:36:6e:ca:98:5e:2b:4f:
e5:40:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:27 2026 by rpki-client