
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: 4lNNwe4y383BBNss6gOgqrgt1VQ8Sms5gN/5K6ApxQY=
Subject key identifier: 19:7F:F7:67:C7:3E:2C:81:37:20:08:7A:1E:D8:C2:79:7A:2B:3E:90
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0AB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0AAC
Signing time: Tue 24 Mar 2026 19:18:31 +0000
Manifest this update: Tue 24 Mar 2026 19:18:30 +0000
Manifest next update: Tue 31 Mar 2026 19:18:30 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: 9WxcWTw3O4cqNW2EOTtj1LTga06UtNR7RBl3c8f+oxQ=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: vwpk66j6u7gHZndjLm88aLBptA1qs1JYs9XWsnQwXWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Mar 24 19:18:30 2026 GMT
Not After : Mar 31 19:18:30 2026 GMT
Subject: CN=69c2e387-7f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:0c:91:90:0c:f4:d0:0a:32:4a:b5:0a:96:
b3:d3:46:ec:23:99:d1:c5:d7:f3:06:3e:45:a0:f3:
f8:23:f1:dd:b5:a1:8d:d8:78:76:3e:eb:97:47:d2:
6f:8d:f8:84:b1:9a:37:7c:f6:33:72:62:79:7e:73:
77:50:3b:e5:02:4c:0a:ef:85:93:61:fc:f7:1d:ee:
61:f8:3d:eb:15:ff:b2:0d:2f:dc:ed:b9:5e:b7:30:
73:98:d3:c8:e9:e6:b7:cd:6b:db:df:dc:1e:6d:b8:
6e:ca:ed:c1:73:5a:9f:f4:0e:d9:90:eb:7e:99:1f:
60:dc:3e:71:50:e7:3f:d8:e0:d1:da:56:02:e9:2e:
a9:04:39:c3:bc:42:03:62:74:17:32:87:e9:d6:2f:
77:51:4f:e7:45:88:e7:3b:3c:5a:5e:10:70:07:28:
fc:e8:83:a1:8b:a4:bf:5b:b8:3a:36:45:40:f4:8a:
84:f2:0f:f6:c7:6e:fb:18:f2:cc:37:13:b9:7b:81:
d7:8f:ec:44:22:6d:10:58:17:c1:7c:8a:6a:b5:3f:
9b:f2:84:5f:6d:5a:3f:67:f2:af:da:71:04:2d:33:
6a:32:68:96:2a:1e:d9:34:4d:35:84:3c:8e:15:57:
cb:b3:04:39:db:26:35:f5:88:51:ad:f1:35:fc:00:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7F:F7:67:C7:3E:2C:81:37:20:08:7A:1E:D8:C2:79:7A:2B:3E:90
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:7b:f6:97:f8:73:03:0d:b7:80:c4:e9:a1:31:16:a7:e1:
5f:2f:07:98:d2:26:44:4d:fc:22:39:94:3f:2d:1a:16:5e:8f:
bb:a3:38:0d:4b:0f:25:84:c2:0b:a9:3f:9c:d6:2b:5a:91:af:
0a:c2:f7:69:8d:27:26:ca:18:7c:cf:d8:32:b7:11:9e:dc:07:
c0:7c:12:c6:1f:7a:7c:16:89:d8:7c:95:2b:a9:a3:a9:65:83:
74:39:eb:95:c7:69:f4:7a:2d:38:9f:09:2d:00:b7:b2:21:09:
0a:0f:e2:6a:73:09:e1:e3:43:40:55:5f:b8:91:11:07:8d:7f:
db:90:0e:e3:11:04:b2:76:d2:85:60:6c:e8:ec:15:98:8a:d3:
46:1d:d5:8f:41:80:2a:4c:00:24:74:d8:9e:1a:1d:af:8d:ca:
cf:03:9e:b0:f1:71:02:35:cf:81:b1:26:f6:de:78:fb:fe:7a:
ea:cf:43:15:2f:77:26:11:cf:cc:5d:a4:23:c3:cf:0e:7f:34:
ac:7a:88:30:7a:8d:32:9e:ac:61:c3:5e:a2:48:2d:64:57:99:
1d:4b:4a:be:64:ce:e0:0e:4a:88:4d:fc:b7:ea:ff:85:2a:7e:
ae:33:ca:9f:cf:8d:6e:71:d0:13:61:a7:a4:d3:f2:4e:0b:0a:
2f:87:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:29 2026 by rpki-client