
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File: emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier: tRtUygqIzzxXnQYQne7BVdfwT7qGNldDwbPHGF092Xc=
Subject key identifier: BC:EA:0B:C3:AA:CD:E8:8D:D5:63:1B:4C:8E:97:86:92:A6:DF:88:1A
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number: 03CC
Signing time: Wed 13 May 2026 00:44:32 +0000
Manifest this update: Wed 13 May 2026 00:44:31 +0000
Manifest next update: Wed 20 May 2026 00:44:31 +0000
Files and hashes: 1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: IkwIdR3Ex/KoJcPlqTAygZJICzdw/RwzVYWJzcd9YQs=)
2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: 74deX67hI2qBziGNrnniX4uG01hCP465g7YKK+iDObQ=)
3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: pgc094l2IccUiGHfBhpbDLm4Mx/YARY92WWKRNYIHII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Validity
Not Before: May 13 00:44:31 2026 GMT
Not After : May 20 00:44:31 2026 GMT
Subject: CN=6a03c970-a7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:f7:14:e1:46:97:22:47:ff:ff:e1:18:86:
67:0b:d9:65:51:98:a7:01:f6:f2:8c:97:b8:bc:4a:
02:db:4a:97:ec:8b:91:71:4a:65:14:e9:e6:8d:96:
ad:bd:da:e5:ee:29:e7:2a:b0:6c:d7:5a:85:8c:e0:
4a:ad:86:53:16:97:ca:7c:25:0f:04:90:53:3e:32:
6e:f9:a9:57:13:ee:e3:75:4a:17:33:20:e4:fb:54:
39:91:6b:a7:7a:9c:6b:27:e7:99:83:ae:b1:0c:f9:
c8:07:72:4d:aa:79:68:e5:f5:eb:5d:34:12:42:81:
fa:45:e1:67:7d:3b:21:be:30:9f:4f:99:4c:04:e4:
c5:65:df:c4:38:0d:78:a2:57:77:f4:7f:2a:f6:6a:
15:c3:50:56:96:cf:ee:9f:d8:21:45:3f:8d:34:b5:
8f:1f:2e:a5:64:4b:20:52:70:66:32:3a:cc:28:8e:
1c:b9:3a:c1:f6:37:f6:9a:74:d6:b1:a9:f0:e1:db:
e2:3f:35:85:23:f1:de:89:ba:27:46:2b:31:66:21:
c9:ca:11:76:8c:2b:69:bb:30:71:26:cf:a8:87:db:
90:ce:57:44:15:e5:32:ba:73:49:f8:6d:8a:d7:53:
f6:02:67:f6:ec:1e:42:8f:01:5e:b9:9b:70:f5:1d:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:0B:C3:AA:CD:E8:8D:D5:63:1B:4C:8E:97:86:92:A6:DF:88:1A
X509v3 Authority Key Identifier:
keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:5c:e7:17:a3:c0:ad:5d:f8:82:71:e4:0f:21:6d:a7:15:
5a:0f:27:59:9c:d8:78:68:58:ee:f8:e4:7a:11:e1:0b:b7:ae:
4d:6b:ef:09:f3:12:98:03:d5:c3:d6:2c:5f:39:92:22:c6:f6:
1c:49:06:84:99:44:83:66:6a:72:dc:6d:5a:e2:4b:d2:32:fd:
71:d4:85:ea:85:7a:5d:14:e7:2e:32:00:16:e6:ff:67:38:7e:
92:80:dd:81:ef:a1:ae:d5:db:e6:68:8a:3a:f5:3d:9c:28:0f:
99:9e:55:78:25:9f:fd:63:ae:2f:e5:04:9a:62:e0:38:76:ec:
1b:90:0d:c6:f3:d9:85:c0:4f:ae:b7:a1:a3:cd:ba:f0:c0:8e:
ec:cc:38:2b:d3:34:e5:3a:bd:87:6c:2b:e1:fa:26:ce:7b:6d:
17:85:ed:8f:5d:7c:24:0e:4b:1a:c9:76:45:c8:a0:3b:75:6b:
6c:22:e4:50:75:f4:89:1d:bf:58:64:0b:3e:39:b2:2d:83:dd:
f7:ac:07:a2:1c:74:b0:ec:2a:8e:a6:6e:71:d0:12:5e:59:de:
ef:1c:0d:7f:6e:54:27:0f:2e:72:fc:3f:55:b8:14:c9:ca:4e:
be:c8:02:82:f8:e7:41:19:84:82:5f:f7:1c:5b:23:49:ec:58:
f9:a2:92:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5MzUxMTAvBgNVBAUTKDdBNjBDMDRCODdENkM2Q0IyNTFGMTUyOTdFRTI1QUQy
REE1MDVFMEUwHhcNMjYwNTEzMDA0NDMxWhcNMjYwNTIwMDA0NDMxWjAYMRYwFAYD
VQQDEw02YTAzYzk3MC1hN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNj3FOFGlyJH///hGIZnC9llUZinAfbyjJe4vEoC20qX7IuRcUplFOnmjZat
vdrl7innKrBs11qFjOBKrYZTFpfKfCUPBJBTPjJu+alXE+7jdUoXMyDk+1Q5kWun
epxrJ+eZg66xDPnIB3JNqnlo5fXrXTQSQoH6ReFnfTshvjCfT5lMBOTFZd/EOA14
old39H8q9moVw1BWls/un9ghRT+NNLWPHy6lZEsgUnBmMjrMKI4cuTrB9jf2mnTW
sanw4dviPzWFI/HeibonRisxZiHJyhF2jCtpuzBxJs+oh9uQzldEFeUyunNJ+G2K
11P2Amf27B5CjwFeuZtw9R2rCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzqC8Oq
zeiN1WMbTI6XhpKm34gaMB8GA1UdIwQYMBaAFHpgwEuH1sbLJR8VKX7iWtLaUF4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDkzNS8zMUIzRDE2MEQw
NDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hzc2xIeFVwZnVKYTB0cFFY
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtREFTNGZXeHNzbEh4VXBmdUphMHRwUVhnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDkzNS8zMUIzRDE2MEQwNDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hz
c2xIeFVwZnVKYTB0cFFYZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACNNc5xejwK1d+IJx5A8hbacVWg8nWZzYeGhY7vjkehHhC7euTWvvCfMSmAPV
w9YsXzmSIsb2HEkGhJlEg2ZqctxtWuJL0jL9cdSF6oV6XRTnLjIAFub/Zzh+koDd
ge+hrtXb5miKOvU9nCgPmZ5VeCWf/WOuL+UEmmLgOHbsG5ANxvPZhcBPrreho826
8MCO7Mw4K9M05Tq9h2wr4fomznttF4Xtj118JA5LGsl2RcigO3VrbCLkUHX0iR2/
WGQLPjmyLYPd96wHohx0sOwqjqZucdASXlne7xwNf25UJw8ucvw/VbgUycpOvsgC
gvjnQRmEgl/3HFsjSexY+aKSQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:15:55 2026 by rpki-client