
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: Yf7ETGwKtp0uLAJC3Eij0V+5u4YVCa2d/kFW1whA0hk=
Subject key identifier: 17:E2:0E:45:02:B6:A2:00:7E:DF:19:2C:8A:20:40:3A:49:81:65:F6
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0AF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0AEB
Signing time: Wed 22 Jul 2026 19:46:40 +0000
Manifest this update: Wed 22 Jul 2026 19:46:39 +0000
Manifest next update: Wed 29 Jul 2026 19:46:39 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: nGRN1GFr4ubEBWC6Ck7UYZIzRPHDaw0GlA1RAUnwaRk=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Jul 22 19:46:39 2026 GMT
Not After : Jul 29 19:46:39 2026 GMT
Subject: CN=6a611e1f-bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:63:55:62:b4:a2:a7:02:c4:3d:97:cc:fc:
2b:e6:47:05:df:84:7f:a1:6b:4e:39:b4:ae:99:07:
e3:2f:63:b1:b4:d8:4a:53:3e:de:74:39:09:b1:35:
05:32:57:65:b2:ea:3a:8f:12:8e:d0:30:43:d0:24:
62:39:dd:cf:78:38:02:e3:37:08:40:55:be:6a:0d:
e5:06:bf:62:db:5c:b7:54:0e:56:16:68:c4:e6:eb:
1f:aa:e8:4a:09:f6:a8:d7:d8:82:6d:01:92:21:d5:
25:de:4d:ba:21:02:c8:41:4c:e6:a0:65:be:8e:4b:
19:7c:d9:02:2a:9b:e0:0d:75:4f:1d:c2:83:51:01:
1a:76:c0:8c:68:1d:24:ed:61:9d:84:21:b4:df:12:
cd:5d:b7:67:ba:a3:5f:d1:c9:a5:4d:a0:f0:0b:a5:
53:10:57:33:04:92:94:24:97:07:0d:44:ce:ba:66:
8e:c5:2b:ae:41:d8:14:79:e1:da:67:da:c8:48:43:
06:02:d7:14:b1:70:63:2b:ff:e2:49:b3:d1:88:24:
a7:4d:d8:e7:a9:1f:32:28:5d:6b:40:5a:c8:6c:67:
71:fd:b0:f4:f0:43:d6:3a:3f:cc:ad:d1:21:5a:80:
38:16:2f:1d:a6:45:10:17:96:b2:55:aa:53:3a:c2:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:0E:45:02:B6:A2:00:7E:DF:19:2C:8A:20:40:3A:49:81:65:F6
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:ec:71:12:1e:2f:ab:2e:20:b0:6d:a6:b4:4c:45:42:ce:
83:0a:d7:db:28:27:a1:31:dc:d2:67:b5:36:57:1b:49:10:57:
d4:35:9f:f6:c4:53:d9:27:95:b0:ba:c3:77:f5:e8:6e:4c:ee:
53:59:cc:99:f1:a7:0b:18:fa:3c:6b:02:1d:e5:49:48:65:b1:
f4:9a:98:3a:99:b7:e7:13:ac:29:86:72:41:7d:64:dd:ec:af:
21:3d:82:a9:20:ee:3a:06:a4:c5:dc:74:09:cb:1e:1f:94:7e:
2a:84:4c:b3:e7:41:f5:4e:8d:25:5d:cb:0c:24:a1:0f:2b:38:
d8:10:c1:6e:39:8d:77:8f:e8:01:97:74:88:70:99:1e:93:4b:
36:1d:49:46:76:22:08:4b:66:5a:6a:a9:d0:02:83:0f:f0:49:
0f:db:3b:ac:0f:33:f4:ae:48:63:67:4a:04:5e:af:4b:f2:ce:
d0:6d:d8:de:01:af:1c:fd:7f:53:d8:69:58:0b:6d:a1:55:2b:
d7:33:2b:52:34:dc:e3:84:33:87:1c:6a:7d:ca:11:05:4a:0a:
47:fc:ad:2f:32:46:0f:c8:d5:8d:a4:68:7e:8d:93:2d:48:c8:
c2:fe:2a:b7:6b:79:e8:9d:bb:ca:f5:bd:45:d9:00:d5:f6:2f:
28:2e:6a:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3
ODNFOEFDQkYwHhcNMjYwNzIyMTk0NjM5WhcNMjYwNzI5MTk0NjM5WjAYMRYwFAYD
VQQDEw02YTYxMWUxZi1iZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL1jVWK0oqcCxD2XzPwr5kcF34R/oWtOObSumQfjL2OxtNhKUz7edDkJsTUF
Mldlsuo6jxKO0DBD0CRiOd3PeDgC4zcIQFW+ag3lBr9i21y3VA5WFmjE5usfquhK
Cfao19iCbQGSIdUl3k26IQLIQUzmoGW+jksZfNkCKpvgDXVPHcKDUQEadsCMaB0k
7WGdhCG03xLNXbdnuqNf0cmlTaDwC6VTEFczBJKUJJcHDUTOumaOxSuuQdgUeeHa
Z9rISEMGAtcUsXBjK//iSbPRiCSnTdjnqR8yKF1rQFrIbGdx/bD08EPWOj/MrdEh
WoA4Fi8dpkUQF5ayVapTOsLBjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfiDkUC
tqIAft8ZLIogQDpJgWX2MB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz
RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx
MmFXWGhwcktreDU0UG9yTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAajscRIeL6suILBtprRMRULOgwrX2ygnoTHc0me1NlcbSRBX1DWf9sRT2SeV
sLrDd/XobkzuU1nMmfGnCxj6PGsCHeVJSGWx9JqYOpm35xOsKYZyQX1k3eyvIT2C
qSDuOgakxdx0CcseH5R+KoRMs+dB9U6NJV3LDCShDys42BDBbjmNd4/oAZd0iHCZ
HpNLNh1JRnYiCEtmWmqp0AKDD/BJD9s7rA8z9K5IY2dKBF6vS/LO0G3Y3gGvHP1/
U9hpWAttoVUr1zMrUjTc44QzhxxqfcoRBUoKR/ytLzJGD8jVjaRofo2TLUjIwv4q
t2t56J27yvW9RdkA1fYvKC5qqA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:54 2026 by rpki-client