
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier: nTIZedUfYEq3HbjTLAIIEkJOKqULea3z/Lkh0UYi74E=
Subject key identifier: CC:1C:E4:EE:7D:E5:70:03:88:4A:A5:6B:35:2F:00:B1:8C:54:45:AE
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number: 87
Signing time: Wed 25 Mar 2026 06:57:31 +0000
Manifest this update: Wed 25 Mar 2026 06:57:31 +0000
Manifest next update: Wed 01 Apr 2026 06:57:31 +0000
Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: HWyEiY17juYTdenBRq9wxm68Kt8jnSZE6XYcxOEI+Ec=)
2: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
3: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Mar 25 06:57:31 2026 GMT
Not After : Apr 1 06:57:31 2026 GMT
Subject: CN=69c3875b-99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:7d:54:84:86:d0:1c:92:20:70:8c:1f:e2:
29:be:bb:18:77:67:e7:9c:e4:3f:68:bb:33:0a:43:
b3:51:a7:4a:3d:90:c4:5e:37:51:6b:30:37:f6:4b:
5a:5d:97:4c:ba:3e:88:f4:56:00:94:d5:40:1d:ab:
e8:1f:6a:6a:0a:af:29:0c:81:0e:6b:8d:d4:ad:a2:
c6:1b:d4:22:a8:9b:36:70:31:7d:8c:0e:dc:8a:cc:
fd:7e:ab:ea:d5:c8:ce:73:a1:9c:96:00:ec:4a:3a:
9d:0c:0e:9c:00:1b:aa:59:3a:99:a1:0f:03:88:66:
e8:29:10:2c:5d:19:ec:c4:48:95:c4:7f:6c:22:01:
57:3a:7a:32:5f:5b:8b:d5:fd:e4:b6:54:5d:a0:99:
33:f0:30:0c:ed:cf:8b:8f:08:60:92:ff:c7:1d:c2:
77:f3:39:4b:e1:b0:e7:5f:40:37:21:24:55:27:a2:
b4:ca:c6:9a:42:0c:68:9b:20:16:62:9a:20:ad:20:
c2:5f:b9:d7:c8:53:22:b2:66:21:3f:fb:57:a0:5e:
f7:24:64:a2:f6:4d:77:e1:f2:a6:51:19:c9:e3:df:
74:ed:72:e2:9c:ca:a9:18:92:a4:97:57:f8:b5:1b:
29:85:fd:4a:4c:52:3b:68:a6:26:22:d5:b8:2e:71:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:E4:EE:7D:E5:70:03:88:4A:A5:6B:35:2F:00:B1:8C:54:45:AE
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:2c:c0:a1:50:32:f2:84:fb:86:b2:87:66:4c:79:c9:ee:
19:cc:30:78:af:db:0c:0d:6b:70:4f:10:93:ca:da:8c:eb:03:
5e:85:a3:0a:6a:57:90:56:2c:0c:65:6e:d9:9b:7b:06:ad:d2:
a5:80:5f:b9:e1:4e:57:f2:f8:b5:08:1e:f9:f4:31:16:14:77:
b3:bc:d2:24:4f:3c:f4:02:04:60:89:37:4c:09:94:08:28:f5:
29:b4:38:c7:ce:00:e8:e7:bf:9f:09:06:0f:d4:b0:9d:4c:99:
c1:89:4e:09:83:8f:15:08:06:b5:d7:5e:42:e2:4c:9f:4a:cc:
dc:5a:95:c0:ef:a3:2f:71:a7:9c:eb:24:fa:64:77:13:be:df:
62:13:eb:26:90:ae:4c:02:d9:f6:bf:50:52:5e:c5:a8:b4:81:
45:bb:8b:2a:4b:09:86:e1:07:2e:b1:39:74:94:10:1e:27:78:
b4:5c:bf:63:ef:62:cb:79:6c:78:db:eb:bd:57:fc:15:c6:68:
c1:86:49:c3:69:0d:dd:ff:0a:7b:83:62:c2:83:95:ac:a1:26:
4a:58:3a:67:78:d6:b4:fc:13:4f:0c:08:64:04:fe:6a:ae:59:
a7:76:53:3e:79:1b:d9:04:25:3f:fc:3a:ae:2e:8a:66:fd:79:
e2:e5:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:40 2026 by rpki-client