
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier: Nezlu1du50I9raIBWxZ3PNAayIXsSfJY4jFIX1MAkHw=
Subject key identifier: 6E:5C:19:B0:1A:27:23:73:EE:EA:08:F5:FC:B6:26:DB:8E:F6:0A:B2
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number: 0261
Signing time: Wed 25 Mar 2026 01:40:29 +0000
Manifest this update: Wed 25 Mar 2026 01:40:28 +0000
Manifest next update: Wed 01 Apr 2026 01:40:28 +0000
Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: o5jSB3z9fNZlk7d2CQl8HWlUOftRctivUjoHQZ9BneI=)
2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Validity
Not Before: Mar 25 01:40:28 2026 GMT
Not After : Apr 1 01:40:28 2026 GMT
Subject: CN=69c33d0d-8344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:e3:4f:d7:8a:4c:c2:31:07:6d:a0:e3:a2:
ba:80:6b:9f:5e:0d:c2:fd:a2:4c:ad:0d:78:ba:6e:
ce:c6:d3:ae:46:50:2e:a7:85:a6:80:d1:24:bd:bd:
bc:01:bb:b2:dc:4a:0f:68:b1:60:e9:53:de:72:8d:
19:f4:9a:57:48:a6:28:44:43:39:9c:65:58:50:0b:
70:1a:f6:0f:88:23:79:6f:af:39:9f:23:c2:64:c5:
03:91:53:bd:7e:08:0d:32:cf:96:08:19:b3:7d:7f:
14:63:16:1b:be:31:a0:34:32:a5:1b:84:fa:9c:68:
31:33:ce:a0:a1:71:6e:f0:dc:cd:ed:9e:75:e4:4f:
8f:db:2f:4c:a4:f7:3d:ca:67:d4:6c:80:34:2b:f6:
3f:95:f1:ea:4d:74:f3:35:6d:89:b0:17:80:4c:da:
22:84:db:d5:d8:ce:99:40:61:35:53:89:20:46:46:
e8:cd:2f:cc:64:eb:8e:8e:e3:41:52:be:9a:34:ab:
b1:6f:c2:ed:f0:92:43:e2:0d:48:8c:57:9d:48:3e:
81:22:e1:ec:d3:2a:18:4e:de:99:34:7f:24:c6:6f:
d1:3d:34:c4:e8:b1:69:37:c8:8f:85:37:27:da:9d:
d4:95:10:94:d0:62:25:a4:d0:41:12:fb:7d:c1:6b:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:19:B0:1A:27:23:73:EE:EA:08:F5:FC:B6:26:DB:8E:F6:0A:B2
X509v3 Authority Key Identifier:
keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:c7:a7:92:18:2a:c4:ff:33:bd:91:03:9a:da:67:19:19:
6e:a7:84:90:e5:60:5e:87:e6:37:fc:32:d6:81:82:49:cd:dc:
49:d4:c1:33:41:68:05:cc:b6:6e:db:48:05:3b:a3:34:d0:92:
68:6e:82:3e:28:4c:8e:fe:c9:7f:3c:ab:3c:c9:14:7d:9f:ad:
a7:c1:50:14:f8:6d:05:23:fe:ca:84:82:85:37:af:30:c8:a6:
03:16:33:00:d7:8d:5b:7d:78:4f:da:3f:ed:c8:a5:d9:4f:2f:
7e:e8:d9:9f:3f:a6:7b:18:72:dc:f1:20:f8:65:7e:dc:14:17:
df:de:58:9d:20:c9:dc:38:4b:b7:4c:be:70:ef:28:b9:2d:6e:
ee:79:cb:82:56:cc:72:15:a2:d4:cc:e2:be:cd:69:a6:9c:5f:
a0:bb:17:cd:db:bd:83:cc:19:59:31:01:0a:dc:6e:30:21:e2:
fe:24:d6:8c:db:b3:ab:98:39:60:90:9d:74:2a:02:f2:e3:b9:
4e:ec:f4:42:75:a5:cd:b5:90:c2:b0:93:3b:97:e6:4b:eb:94:
83:2c:4a:7f:e4:89:15:00:4c:af:bc:22:3a:dc:ea:f9:ee:43:
2b:3c:cb:17:88:a6:1a:0a:0a:66:54:75:c9:84:c7:56:bd:ea:
a9:9d:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:02 2026 by rpki-client