
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
File: EyhCKbHsu-6lPFvajOLpVWaDhuk.mft (raw, json)
Hash identifier: L8d5HLB68BbeC7X3Qht45A/MyeS/9kLsgJ5sdDCCfec=
Subject key identifier: 11:91:EC:8B:45:6A:53:0F:C8:5D:BE:3E:BA:A9:D2:79:98:22:E1:E2
Authority key identifier: 13:28:42:29:B1:EC:BB:EE:A5:3C:5B:DA:8C:E2:E9:55:66:83:86:E9
Certificate issuer: /CN=A91D670B/serialNumber=13284229B1ECBBEEA53C5BDA8CE2E955668386E9
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
Manifest number: 15
Signing time: Wed 13 May 2026 09:10:01 +0000
Manifest this update: Wed 13 May 2026 09:10:00 +0000
Manifest next update: Wed 20 May 2026 09:10:00 +0000
Files and hashes: 1: EyhCKbHsu-6lPFvajOLpVWaDhuk.crl (hash: bgzWhEeMFGS1/jRgymBDlv/irSIc3iAfWnsOHoTxMN0=)
2: 04787626327611F19CC2E9A9C0833773.roa (hash: JLPz9sODgtunFq+F4lGANMjXg1Ujvuresv8kXnPXB8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.crl
rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D670B, serialNumber=13284229B1ECBBEEA53C5BDA8CE2E955668386E9
Validity
Not Before: May 13 09:10:00 2026 GMT
Not After : May 20 09:10:00 2026 GMT
Subject: CN=6a043fe8-4d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:75:dc:55:6e:3e:92:de:1e:c3:d7:8e:88:
e2:2b:57:95:da:0b:34:f8:39:7f:8f:2e:dd:ea:15:
c7:a1:43:d7:62:ab:29:8b:49:c8:38:af:2a:bc:3c:
00:72:c6:ba:2d:21:e4:6b:e5:77:84:3a:b6:60:c2:
11:d6:1a:37:20:98:da:d3:08:b8:5c:0f:11:d0:fd:
bd:d6:93:8f:47:19:44:23:83:fa:10:ea:7e:98:23:
37:ea:24:61:04:fd:75:a6:9e:63:34:9c:66:5f:55:
e3:f9:95:84:24:47:62:c6:8a:00:ae:d1:ed:18:31:
6c:e5:04:a3:9d:c3:f6:88:d4:d4:9e:cd:6f:bd:2c:
69:10:60:37:b8:ff:6a:25:c7:b6:c7:c1:a7:f7:50:
3a:ed:f3:14:a2:10:3a:68:80:12:7a:87:3f:d7:d2:
80:76:95:a4:cf:93:d9:82:44:a2:af:87:d3:9f:a1:
ca:a9:df:fe:f4:f7:b0:c2:43:47:16:c8:2d:b0:01:
13:3c:da:3c:b8:db:48:9d:f7:7f:1e:11:52:dd:ec:
ec:ff:91:bd:42:54:c3:66:6f:ae:d2:69:e9:07:ef:
a9:03:5e:8d:ef:9f:36:10:de:09:23:4d:6f:1c:26:
8f:2f:61:5a:73:2b:45:71:de:f4:c6:e9:c0:ff:96:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:EC:8B:45:6A:53:0F:C8:5D:BE:3E:BA:A9:D2:79:98:22:E1:E2
X509v3 Authority Key Identifier:
keyid:13:28:42:29:B1:EC:BB:EE:A5:3C:5B:DA:8C:E2:E9:55:66:83:86:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:ed:6a:61:1d:49:70:27:7e:f6:f0:dd:1a:1e:8a:cf:8e:
cf:bd:70:a8:4d:4d:a2:78:50:a9:4f:eb:5b:29:a7:9c:ed:30:
3f:56:e4:61:cc:44:80:00:39:2d:ff:2c:39:c2:f2:58:51:33:
ac:0a:99:a9:c4:9c:c0:30:6c:1d:d2:cd:f1:33:c2:82:74:43:
cb:10:3d:1f:1d:46:1a:f4:f4:65:b9:7a:dd:4d:b9:1a:0d:92:
1e:40:43:4c:f5:8b:f1:e5:df:0b:a7:ba:91:c3:22:71:81:1c:
9b:a6:f8:a4:e4:5f:73:8f:d7:7d:93:c5:f4:1c:d8:66:dd:1a:
38:91:62:71:0e:a0:22:a7:cd:48:cd:71:fb:1f:18:ed:7e:7b:
02:53:6f:d0:e6:d5:c6:f9:22:d9:6b:28:30:7a:83:0e:99:e1:
a6:97:33:a2:f2:25:17:ca:aa:31:19:23:15:da:b2:59:3a:38:
f4:57:64:29:35:e2:84:dc:86:91:47:eb:3e:c4:a6:82:ae:07:
5c:83:5c:22:60:0c:de:bb:e8:ad:4c:69:a7:8c:6f:1c:cb:d1:
53:49:69:98:00:7e:c3:63:57:26:62:05:58:a6:84:45:ef:ea:
2e:80:16:d9:fb:ba:d6:9d:00:dd:dd:19:57:48:0f:6a:2f:0c:
4a:9b:83:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjcwQjExMC8GA1UEBRMoMTMyODQyMjlCMUVDQkJFRUE1M0M1QkRBOENFMkU5NTU2
NjgzODZFOTAeFw0yNjA1MTMwOTEwMDBaFw0yNjA1MjAwOTEwMDBaMBgxFjAUBgNV
BAMTDTZhMDQzZmU4LTRkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKtHXcVW4+kt4ew9eOiOIrV5XaCzT4OX+PLt3qFcehQ9diqymLScg4ryq8PABy
xrotIeRr5XeEOrZgwhHWGjcgmNrTCLhcDxHQ/b3Wk49HGUQjg/oQ6n6YIzfqJGEE
/XWmnmM0nGZfVeP5lYQkR2LGigCu0e0YMWzlBKOdw/aI1NSezW+9LGkQYDe4/2ol
x7bHwaf3UDrt8xSiEDpogBJ6hz/X0oB2laTPk9mCRKKvh9Ofocqp3/7097DCQ0cW
yC2wARM82jy420id938eEVLd7Oz/kb1CVMNmb67SaekH76kDXo3vnzYQ3gkjTW8c
Jo8vYVpzK0Vx3vTG6cD/li0zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEZHsi0Vq
Uw/IXb4+uqnSeZgi4eIwHwYDVR0jBBgwFoAUEyhCKbHsu+6lPFvajOLpVWaDhukw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2NzBCLzA1QzE3OEMyMzI3
NDExRjE4RTgwMDBERUJGODMzNzczL0V5aENLYkhzdS02bFBGdmFqT0xwVldhRGh1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRXloQ0tiSHN1LTZsUEZ2YWpPTHBWV2FEaHVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
NzBCLzA1QzE3OEMyMzI3NDExRjE4RTgwMDBERUJGODMzNzczL0V5aENLYkhzdS02
bFBGdmFqT0xwVldhRGh1ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAMxO1qYR1JcCd+9vDdGh6Kz47PvXCoTU2ieFCpT+tbKaec7TA/VuRhzESAADkt
/yw5wvJYUTOsCpmpxJzAMGwd0s3xM8KCdEPLED0fHUYa9PRluXrdTbkaDZIeQENM
9Yvx5d8Lp7qRwyJxgRybpvik5F9zj9d9k8X0HNhm3Ro4kWJxDqAip81IzXH7Hxjt
fnsCU2/Q5tXG+SLZaygweoMOmeGmlzOi8iUXyqoxGSMV2rJZOjj0V2QpNeKE3IaR
R+s+xKaCrgdcg1wiYAzeu+itTGmnjG8cy9FTSWmYAH7DY1cmYgVYpoRF7+ougBbZ
+7rWnQDd3RlXSA9qLwxKm4MX
-----END CERTIFICATE-----
Generated at Wed May 13 13:26:56 2026 by rpki-client