
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
File: EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft (raw, json)
Hash identifier: /rE5fwmeyqWjr9BUCH9Uhz6YGijhD3qCVmKJi+mUWqs=
Subject key identifier: 33:56:1C:29:E2:0B:20:E3:DE:F9:EF:9F:56:DD:4F:3E:85:E9:3A:47
Authority key identifier: 11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
Certificate issuer: /CN=A91DDB11/serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
Manifest number: 0E
Signing time: Thu 23 Jul 2026 10:54:07 +0000
Manifest this update: Thu 23 Jul 2026 10:54:06 +0000
Manifest next update: Thu 30 Jul 2026 10:54:06 +0000
Files and hashes: 1: EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl (hash: Oqf5vgCneqAXOrlng32IaBI/MbiJECe3mC9SB7lAmKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0
Validity
Not Before: Jul 23 10:54:06 2026 GMT
Not After : Jul 30 10:54:06 2026 GMT
Subject: CN=6a61f2ce-ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:9f:a8:14:77:f2:0d:0a:2a:03:45:46:62:
0e:26:a8:a6:d8:bc:59:9d:d8:71:11:3b:33:1e:d9:
b7:44:eb:d1:a5:3f:8a:0b:a1:e0:eb:f1:e6:61:5e:
33:d4:58:17:a5:b2:dd:0f:c1:12:50:97:8a:90:b2:
16:b0:72:90:39:03:de:57:db:33:fb:10:35:2b:8c:
28:ce:65:88:7b:34:dc:b6:a6:11:6f:8e:0f:53:79:
1d:a6:74:82:62:c7:c9:00:1b:b7:cc:72:da:cb:cd:
33:43:35:80:f0:5c:b9:59:22:69:52:8c:1f:f1:e8:
71:30:6b:a4:00:d7:88:b1:a7:c4:5b:05:8e:be:b2:
a7:ee:d6:5f:7a:67:1d:68:65:30:b4:77:4c:b8:2a:
e0:40:28:00:0e:74:71:f4:ce:97:c7:f4:c8:e1:f1:
6e:c6:f3:1e:e5:d5:b4:76:3a:d8:09:b6:7b:d0:46:
f5:67:d8:2d:6b:b8:5f:85:6b:7c:14:ad:40:a0:41:
71:42:07:62:8a:72:9d:3d:6b:dc:e1:8b:16:7f:b6:
05:ea:1a:07:84:ba:7e:7d:ce:8b:de:58:57:2a:d8:
e1:28:b2:14:99:bf:b3:c8:15:c2:42:c2:3e:52:31:
7f:91:ae:30:7c:b3:02:e4:37:47:96:01:02:b0:67:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:1C:29:E2:0B:20:E3:DE:F9:EF:9F:56:DD:4F:3E:85:E9:3A:47
X509v3 Authority Key Identifier:
keyid:11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:88:91:66:24:af:0d:17:e1:37:9c:9f:d7:35:b3:12:58:5f:
ec:c7:4b:5c:9f:08:42:bf:70:7a:72:99:2d:8e:34:39:39:24:
18:87:58:b8:c9:0a:9c:74:f9:c7:0a:d3:8e:36:06:96:4f:a2:
dc:d5:39:ca:15:db:f3:ed:1a:da:52:e3:7b:16:b6:96:03:00:
99:79:d2:80:28:1d:a5:cb:7d:63:86:8b:a2:a6:b2:53:08:69:
39:78:cc:bd:95:99:ce:88:b1:58:b2:f7:93:25:24:b9:8d:4e:
91:dc:93:7f:14:eb:14:82:b5:aa:17:07:d2:ce:0c:6e:01:02:
31:b3:6e:6f:0b:e6:b4:43:64:12:f4:67:13:e7:66:85:29:4f:
43:b4:5f:86:3a:29:5e:e2:22:90:f6:45:c0:2a:9b:e7:fd:eb:
89:ab:c5:8f:ae:f6:39:0e:f5:49:64:6c:40:8e:cf:c9:09:d9:
1e:cc:62:c7:d2:19:3c:ac:bb:37:06:83:3d:f7:1c:47:18:17:
4d:40:c2:56:7a:c8:bd:4f:58:a5:c9:ab:a4:27:64:3f:96:06:
cd:36:37:37:8d:b8:bd:b1:20:73:b7:40:9e:83:7f:89:4d:56:
c6:d7:b4:92:e1:35:36:65:7e:3d:04:98:e3:0a:03:00:ad:08:
af:59:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:51 2026 by rpki-client