
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier: 5w/baMJamRodna4OXpiviRorDOHiXmYV80Q/O0Ndw8s=
Subject key identifier: C3:7C:FE:83:71:81:87:E6:2E:88:91:6D:46:99:72:A9:74:36:0B:A3
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial: 0BB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number: 0B9F
Signing time: Tue 12 May 2026 19:09:26 +0000
Manifest this update: Tue 12 May 2026 19:09:26 +0000
Manifest next update: Tue 19 May 2026 19:09:26 +0000
Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: TDclZ5+8kK/Y8BCj4xQxy+KHOdJZw0krCr2FV6q6ZmY=)
2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993 (0xbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Validity
Not Before: May 12 19:09:26 2026 GMT
Not After : May 19 19:09:26 2026 GMT
Subject: CN=6a037ae6-37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:62:ed:92:74:1d:f5:7b:87:fd:6f:15:2d:
e8:3d:6c:02:8e:ba:27:40:fe:f0:1b:3d:af:d9:c5:
a6:3f:4c:cd:b1:ae:21:b7:7b:f1:34:a4:af:de:d9:
1b:9f:63:49:de:4a:39:d3:c3:90:c6:48:e4:2a:07:
ae:5b:ee:05:69:01:83:3b:39:62:b4:f7:9d:58:5e:
6b:37:12:af:5b:03:cb:c2:cd:28:ad:04:fd:1b:3a:
3f:c0:ad:6e:29:a2:7c:51:69:c0:37:f4:55:b5:19:
29:f5:91:bc:a5:fa:d2:ac:b1:bb:10:72:7d:5c:94:
fa:78:13:d8:d6:cb:b0:25:75:fa:29:b2:3b:6f:09:
c2:26:bf:b5:9a:11:58:52:6e:36:66:c1:04:63:01:
80:99:3d:9c:87:0f:d6:32:78:3f:dc:bc:2a:f4:ce:
75:e6:ac:aa:63:4e:80:af:37:a1:cf:57:20:98:e8:
3e:82:fe:cd:38:e9:fd:61:78:f0:72:42:f5:74:e8:
54:2e:21:28:85:0b:18:75:eb:22:97:33:79:31:06:
de:3b:ef:0d:3f:c0:6e:e1:60:39:9e:f2:fd:5e:f4:
7b:28:0c:73:be:64:e6:2b:b5:0b:94:62:a2:93:64:
9b:6b:5c:e3:e6:da:85:cb:47:9e:89:f6:26:0e:7c:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:FE:83:71:81:87:E6:2E:88:91:6D:46:99:72:A9:74:36:0B:A3
X509v3 Authority Key Identifier:
keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:ed:fa:35:15:74:2e:23:53:c9:9f:ac:fb:3e:04:da:7f:
54:ce:e0:66:8c:ed:7c:b7:86:f4:2b:f6:07:7c:91:d4:dc:94:
5e:d8:7e:f6:c0:e6:5d:a7:db:7b:f7:ea:02:7f:10:5a:c1:a0:
65:15:56:65:ec:84:39:d3:83:ea:0b:0b:de:5b:72:08:a1:9f:
33:b4:03:79:16:34:c6:e3:eb:3e:13:d8:58:f6:10:96:0e:44:
19:58:02:e3:69:bc:84:4f:f0:56:9a:02:46:d3:f9:dc:cb:9b:
e9:1a:86:30:06:a9:7c:88:8f:0e:c1:68:5d:fe:7c:ca:df:a9:
89:59:82:96:4f:9f:f7:bb:a4:45:f5:26:a6:9b:eb:97:70:ec:
d3:13:d2:71:2c:59:1d:d9:4b:9b:74:52:61:86:c8:13:93:39:
47:e3:71:a8:3d:ee:43:2f:5b:44:45:53:9f:0e:7b:ae:8c:a4:
ab:d6:05:ed:ac:2c:f8:95:11:a5:ca:fe:a5:a7:04:20:19:d2:
e2:eb:12:d6:fd:2e:61:f3:39:76:f2:29:1a:61:aa:81:ca:cc:
3e:95:95:3e:12:bc:af:0c:72:fa:80:f6:69:a1:42:8d:b5:da:
5b:a1:90:04:59:9b:92:6f:58:6b:79:c5:c6:89:29:9d:fc:92:
a6:47:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:09 2026 by rpki-client