
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier: LA5Xpus+qLxGof05DkzOUAhwk2ZMDEyTde3t56d43bo=
Subject key identifier: CA:DC:EA:09:B9:96:AF:09:40:D1:AA:C0:63:C9:63:E6:29:3D:46:23
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 1202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number: 116C
Signing time: Tue 24 Mar 2026 17:10:03 +0000
Manifest this update: Tue 24 Mar 2026 17:10:02 +0000
Manifest next update: Tue 31 Mar 2026 17:10:02 +0000
Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: cUAfnsZvjdH8xUiLPesN3yEdIt1JxzwXksrCUiNbxP0=)
2: 345899BA1ACB11F18EC72DC33A3D8C67.roa (hash: JeWVqSmEgpPqe99fpviE9IltiegcfYWeYrX7sVepfPs=)
3: 89C2D34A1AC911F1A26878773A3D8C67.roa (hash: 76O4IYXPBq1PdbW3XALTc2iktdnENccp1ab6ePfbt0U=)
4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: +VAYiRJdwp7AIJFptknUoX/WQ06mNIU7bXi85wbu8IY=)
5: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: B394cI0VrI1/IQFY1x3i0QaoEW2OuwCSpXnoIJQqOZA=)
6: 08DE553CE33411F09C32B5836E6F56BC.roa (hash: gKvmWouh5PfWLPdYDfJUbla3yQOrEGgpMJTDWd4FFn0=)
7: 652F27C2268611F1B4DA1002B4833773.roa (hash: QkOdZG5FEv1Rbj8Iadwbn2v0UhPZuJkr7YpdV1fhrP8=)
8: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: 5i/UH503HWfNpIJgdTlhKUgyf9GU+TsIml7+DBFnaY4=)
9: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: Vpw51MZvJPxwx8AO4fLP73wnxskz1308n4tyJojyQJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4610 (0x1202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Mar 24 17:10:02 2026 GMT
Not After : Mar 31 17:10:02 2026 GMT
Subject: CN=69c2c56a-24f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:69:2a:cd:9e:94:cd:5f:d1:12:a3:25:d5:
73:b2:3d:dc:67:f7:bc:18:b0:75:09:87:86:f9:d3:
8e:9c:0a:c5:6e:bc:d3:fd:ed:e9:e3:ff:a5:9a:de:
91:4b:fe:98:14:b5:dc:d3:0d:87:26:1f:56:84:fa:
ee:0f:9e:44:83:c9:c2:3d:e1:57:8c:e0:27:37:4f:
a7:fd:21:dd:8a:eb:04:04:c0:89:17:dd:06:81:3a:
12:e3:ad:74:0e:22:d9:50:f4:00:29:15:fb:40:77:
a7:57:86:e8:a9:e6:c4:7d:0f:77:cc:28:5b:76:a6:
95:fa:52:fa:3c:fd:ba:85:8b:44:6a:92:9d:86:53:
31:e2:28:4b:59:01:f7:11:45:59:52:7c:e7:89:a2:
fe:59:20:50:25:f2:85:98:7d:57:17:94:94:d7:30:
5d:e4:ba:de:e0:73:a2:66:16:1c:81:77:7b:d3:12:
a7:d6:0e:be:d6:41:06:b5:af:72:40:b2:a1:93:54:
f7:06:a7:8e:31:79:2d:e0:6e:e4:05:cd:77:b2:8b:
3a:72:f5:89:7d:6b:98:fb:c1:cd:43:73:df:e7:04:
40:64:7b:ff:71:f3:09:ed:36:a6:c4:5f:4b:53:a6:
37:47:a7:3a:0a:3e:79:34:8b:42:76:ff:44:7c:18:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:EA:09:B9:96:AF:09:40:D1:AA:C0:63:C9:63:E6:29:3D:46:23
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:29:4b:ba:a2:87:90:b5:f4:7a:6f:7e:d8:cd:ad:28:4a:
20:0d:5f:5c:68:11:6c:ec:1d:a8:c6:9b:f0:e5:6b:1e:69:1e:
cf:49:9b:99:bd:11:0c:4c:56:d3:71:31:d6:93:1b:a9:84:35:
31:2d:11:c0:31:4b:aa:bb:e5:5f:7d:3d:7d:1d:62:d5:a3:b3:
f9:3b:39:92:ab:87:cd:02:4a:f6:80:43:a7:4e:15:49:39:e3:
9b:d9:d0:ed:5d:c3:1b:c9:de:6c:0c:72:74:3f:8d:f8:b3:f2:
c8:70:50:a6:75:3e:e6:1a:6c:12:2a:1f:b5:b8:bf:d4:b3:fa:
f0:fb:28:93:47:19:78:cc:4b:8c:8f:23:53:a1:2f:78:c0:3f:
2c:0c:bd:6e:16:6d:d8:1b:54:d4:a0:05:43:91:e7:ad:42:60:
90:41:10:88:41:f8:4c:91:21:45:f8:a1:6c:13:4b:bb:fd:1a:
fa:04:80:d6:85:08:f0:52:de:1a:84:3d:a8:ed:61:53:99:4b:
f0:74:5d:70:e0:ec:89:ca:28:52:01:65:eb:bd:f1:c7:10:8d:
8a:f1:d5:d9:d2:b8:44:34:84:7b:81:a0:40:5c:af:45:ba:ba:
5f:fb:cf:05:92:6d:b3:11:1e:a5:28:a1:66:b5:00:97:f2:30:
45:08:a8:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz
QzBDRUNBMzIwHhcNMjYwMzI0MTcxMDAyWhcNMjYwMzMxMTcxMDAyWjAYMRYwFAYD
VQQDEw02OWMyYzU2YS0yNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jVpKs2elM1f0RKjJdVzsj3cZ/e8GLB1CYeG+dOOnArFbrzT/e3p4/+lmt6R
S/6YFLXc0w2HJh9WhPruD55Eg8nCPeFXjOAnN0+n/SHdiusEBMCJF90GgToS4610
DiLZUPQAKRX7QHenV4boqebEfQ93zChbdqaV+lL6PP26hYtEapKdhlMx4ihLWQH3
EUVZUnzniaL+WSBQJfKFmH1XF5SU1zBd5Lre4HOiZhYcgXd70xKn1g6+1kEGta9y
QLKhk1T3BqeOMXkt4G7kBc13sos6cvWJfWuY+8HNQ3Pf5wRAZHv/cfMJ7TamxF9L
U6Y3R6c6Cj55NItCdv9EfBj7XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrc6gm5
lq8JQNGqwGPJY+YpPUYjMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4
QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp
VUdVUEQ5eWR2RlU4RE95akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUHwpS7qih5C19HpvftjNrShKIA1fXGgRbOwdqMab8OVrHmkez0mbmb0RDExW
03Ex1pMbqYQ1MS0RwDFLqrvlX309fR1i1aOz+Ts5kquHzQJK9oBDp04VSTnjm9nQ
7V3DG8nebAxydD+N+LPyyHBQpnU+5hpsEioftbi/1LP68Psok0cZeMxLjI8jU6Ev
eMA/LAy9bhZt2BtU1KAFQ5HnrUJgkEEQiEH4TJEhRfihbBNLu/0a+gSA1oUI8FLe
GoQ9qO1hU5lL8HRdcODsicooUgFl673xxxCNivHV2dK4RDSEe4GgQFyvRbq6X/vP
BZJtsxEepSihZrUAl/IwRQiolg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:18 2026 by rpki-client