
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier: kRZxFkTlFAChk5a72iXH6r7xn/TBqyN9ydhOci+1ses=
Subject key identifier: 25:F1:C7:3D:3E:65:C1:99:0A:25:C4:70:16:DE:D1:5A:B7:BB:DD:CC
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number: 027A
Signing time: Wed 13 May 2026 02:06:32 +0000
Manifest this update: Wed 13 May 2026 02:06:31 +0000
Manifest next update: Wed 20 May 2026 02:06:31 +0000
Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: dSV89rE3OcotbQF9HnSnzTXoaZcRRA9kuUN1UnqoLRc=)
2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Validity
Not Before: May 13 02:06:31 2026 GMT
Not After : May 20 02:06:31 2026 GMT
Subject: CN=6a03dca8-728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:db:30:a3:01:39:1f:dd:f4:07:aa:12:d0:
17:12:30:f6:b6:2a:79:9b:91:cf:cd:f3:c7:ef:87:
25:26:0e:a1:f1:5d:59:82:62:0f:ee:d7:fa:1d:6c:
7e:5d:2b:60:9f:a5:37:6d:f9:2c:87:1d:f4:99:ef:
cf:e0:a5:eb:af:70:a4:5b:ca:06:7a:46:a4:b6:75:
f3:bf:73:1a:b6:25:e8:e4:dd:79:f8:9e:5a:c5:0f:
1c:d4:88:f8:aa:17:ac:09:9b:d3:56:38:a2:0e:94:
62:46:e9:9d:d2:4d:71:e5:93:de:27:0c:3a:c8:f3:
56:f7:38:f1:74:a0:2a:41:b1:bf:68:4c:00:d4:62:
fa:fa:0f:f4:3f:d6:d4:96:e1:ea:6e:a3:b3:aa:ed:
90:29:11:66:9b:23:ad:4b:b2:d6:82:73:33:89:9a:
0e:ee:b8:24:ca:17:0c:88:80:85:95:20:71:ee:82:
58:91:97:85:91:26:6d:da:41:e8:ff:22:14:f5:1f:
d5:ad:fd:41:d9:14:89:24:3d:0e:21:35:60:29:c1:
c5:e2:53:77:a9:d3:6f:5e:b4:1e:bf:48:24:a6:9e:
b3:4b:37:21:40:b9:b5:38:92:7b:77:39:c6:57:bc:
66:6b:d0:23:5c:33:9a:db:08:d8:31:37:f3:2a:a3:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:C7:3D:3E:65:C1:99:0A:25:C4:70:16:DE:D1:5A:B7:BB:DD:CC
X509v3 Authority Key Identifier:
keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:60:01:84:a9:df:a2:b1:48:03:2c:ba:d3:ba:92:4e:e0:48:
81:82:3d:8d:43:0b:50:7c:6b:6e:8c:4e:49:5e:ed:f0:e0:4b:
6b:4a:5c:e5:df:61:47:fb:0a:6b:d0:1c:22:24:6e:56:70:65:
63:b9:34:c8:c3:44:b4:b7:9b:fe:ea:56:4c:49:da:66:c1:94:
8c:e6:61:c6:b3:58:80:49:49:c6:03:86:7a:9d:ac:de:da:1b:
bc:44:13:29:a1:64:d9:7b:80:77:28:c0:09:f7:e5:07:da:52:
10:53:98:24:5c:61:32:34:8f:0b:63:45:9b:6f:87:06:a4:64:
52:26:43:2b:b5:b0:8b:18:1e:03:10:bd:c9:b9:08:54:38:67:
67:4a:c9:18:46:f5:0b:09:f1:7f:b1:3a:d8:0b:8f:bd:d9:2a:
68:7d:3b:70:07:ea:55:65:ef:88:0b:4a:9b:f3:41:13:28:26:
62:fb:16:97:51:35:4d:ae:00:69:bb:c0:61:de:21:fe:59:52:
f4:9c:0d:f6:64:02:4b:50:83:44:ac:29:31:09:cb:03:93:25:
1f:ca:6b:18:49:71:e2:54:8c:d7:77:ac:d4:25:30:17:57:3a:
32:9e:91:e0:13:24:b6:f9:3c:e6:da:e8:2d:f6:61:2f:db:dc:
fb:f0:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:09 2026 by rpki-client