
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: Yfssys+DndwsaLB8pu84X/LwcfPi64cqxsFucmYFVpU=
Subject key identifier: 2E:02:45:D3:82:EB:5A:49:D8:7D:C5:59:09:FE:1F:79:C2:3C:13:2A
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0B16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0B0B
Signing time: Tue 22 Sep 2026 19:11:04 +0000
Manifest this update: Tue 22 Sep 2026 19:11:03 +0000
Manifest next update: Tue 29 Sep 2026 19:11:03 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: geUJtpXkYUXVNDqukQL3JsN3LB9/rHDr6MQ+2fsrKZI=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Sep 22 19:11:03 2026 GMT
Not After : Sep 29 19:11:03 2026 GMT
Subject: CN=6ab2d2c8-5eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:0c:2a:96:fc:b5:a3:f2:bc:ac:6a:e9:59:
26:6a:05:1b:94:ac:14:de:42:97:53:0a:36:a6:f6:
72:de:38:b3:57:bd:3f:8d:3d:f0:26:7a:2e:ca:f7:
f1:4b:9b:ad:8f:ba:c9:01:b2:c7:ab:63:d9:4f:8b:
df:12:34:1e:04:c1:c2:7a:e8:19:62:04:2d:aa:7a:
fa:88:cb:a2:76:b4:aa:db:70:56:f9:b2:eb:7b:de:
de:e3:c9:c6:c8:81:39:23:fe:ff:c8:9a:e1:52:db:
15:7b:18:e8:99:8b:8a:46:cc:39:c1:43:4e:c7:3d:
d5:0b:64:c7:a4:69:8c:fa:8a:a5:3e:c2:df:7c:02:
62:87:29:37:4d:76:5d:b1:c5:76:23:8e:9e:d7:0e:
17:ca:09:ba:75:65:4e:3b:3f:66:c8:a9:a5:3f:78:
05:24:24:fd:d8:f9:06:00:b8:e1:93:66:89:61:6d:
27:ca:ad:b9:2c:00:32:01:28:ef:40:a1:4d:59:09:
14:fe:61:ba:e4:4d:ae:97:d0:de:07:ff:4d:4d:ab:
7e:63:38:54:49:33:25:6b:e9:88:94:ad:14:2d:10:
92:04:3b:4b:fb:c5:27:67:50:e0:4f:c2:d2:32:77:
f1:1e:a5:04:42:1a:6a:ce:af:33:40:dc:08:3c:2c:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:45:D3:82:EB:5A:49:D8:7D:C5:59:09:FE:1F:79:C2:3C:13:2A
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:93:50:2e:b4:8a:19:62:2e:a8:41:a6:e6:34:59:aa:8f:fc:
3c:65:fc:79:af:6d:ca:fd:51:6a:24:c5:3f:f5:19:16:ee:3d:
3f:3f:57:34:44:87:01:75:40:7a:d4:d9:10:75:e7:a7:bf:44:
84:d2:46:0f:d5:ac:17:a3:6d:96:32:10:3b:1f:9a:e3:46:7a:
83:a3:1b:cc:2e:a8:9d:b5:3a:5f:61:3e:a6:43:f5:16:0b:2a:
1b:15:02:a2:de:d9:99:ba:81:f9:3f:99:2d:b5:b9:44:d9:d9:
9a:65:44:67:3f:23:67:40:ab:d4:03:f0:33:4d:fc:9d:41:85:
d1:ae:95:55:ed:9d:72:31:e1:d2:84:9f:18:56:c0:5e:cf:98:
50:c6:4c:a8:c0:95:0a:db:aa:71:d3:b7:43:c2:1c:b5:63:a5:
15:0d:d4:4c:0c:b4:1d:d5:7a:45:0a:d8:58:79:29:c2:f8:1c:
14:a5:79:5a:34:64:a2:72:1f:26:36:f0:0a:e6:cb:96:1f:7e:
45:3b:fe:f6:8d:a1:dd:92:c9:fc:9d:9d:46:a0:ee:f2:31:11:
09:85:dd:a7:e4:73:57:46:d7:15:a0:f6:65:e9:6f:2e:e1:86:
86:e7:5d:59:c8:ed:83:6e:03:73:71:06:91:89:f3:47:75:08:
a7:28:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:11:35 2026 by rpki-client