
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
File: eee1l4EY_5x6llKfbFkJ49qSQMM.mft (raw, json)
Hash identifier: XB2j7gZtdqy7Tw2niRojWYRXvpxlrdWyT0aqRTdzu/w=
Subject key identifier: 1E:AE:02:12:B2:A2:16:F6:74:3B:11:1B:C5:4D:E8:47:EB:4E:1E:DE
Authority key identifier: 79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3
Certificate issuer: /CN=A91E20C2/serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
Manifest number: 0C
Signing time: Mon 11 May 2026 09:18:36 +0000
Manifest this update: Mon 11 May 2026 09:18:36 +0000
Manifest next update: Mon 18 May 2026 09:18:36 +0000
Files and hashes: 1: eee1l4EY_5x6llKfbFkJ49qSQMM.crl (hash: dBA42PJ+UF6W7Rr+dxyjfOyI2D8hnBoo8Fy8IpJOQl8=)
2: 5487474E3E2B11F1962E9E0BB7833773.roa (hash: OmLUQ43QETaka1wexlDbKxhUGMOUSSWYIcjZLWyxezg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl
rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E20C2, serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
Validity
Not Before: May 11 09:18:36 2026 GMT
Not After : May 18 09:18:36 2026 GMT
Subject: CN=6a019eec-b881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:1f:52:78:51:e4:f4:6f:43:13:f2:16:60:
46:73:b9:32:69:be:bf:0f:10:c2:3c:20:6f:c4:bd:
4f:45:10:ae:34:c1:c3:3b:35:50:d6:74:d2:f1:53:
1c:84:71:77:19:95:ce:49:69:d3:cd:6c:d1:d9:59:
e8:14:10:9c:00:b0:c6:e6:0c:3a:63:00:26:0f:8a:
c6:75:64:97:0c:80:9c:e6:81:b8:77:5b:e9:d2:4f:
ec:40:59:bc:3d:7e:28:9d:e7:db:1b:1f:96:8c:17:
6d:5b:8d:d0:76:2e:78:06:9b:06:62:23:fb:0f:82:
38:a2:49:8d:1b:f9:2d:c8:5b:0a:f1:65:52:dd:7e:
a7:03:d8:14:39:62:8c:a4:cd:1b:4c:19:7a:e2:6c:
98:7d:89:12:c5:4c:9c:a5:3b:73:86:99:02:eb:3a:
20:2e:11:8f:24:83:de:03:cc:89:e1:83:be:64:b9:
43:8d:4c:c3:ec:fb:d5:74:6d:f7:26:80:74:0d:89:
4c:20:f3:13:59:b5:d3:70:b9:0c:49:43:41:6a:fd:
c3:7f:00:48:d6:3c:1f:e1:fe:cf:12:0c:48:0b:16:
0c:58:60:b1:33:7a:8a:82:05:31:be:8c:94:ae:34:
66:c3:09:5a:25:59:58:22:80:93:57:61:ad:10:39:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:02:12:B2:A2:16:F6:74:3B:11:1B:C5:4D:E8:47:EB:4E:1E:DE
X509v3 Authority Key Identifier:
keyid:79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b1:24:0b:99:d6:2f:05:e2:62:88:b4:67:98:f5:60:ce:d7:
90:24:a9:06:66:6d:93:98:1f:3f:0a:a1:1c:45:5f:01:71:af:
cf:6f:8a:45:ab:fa:6e:c7:f9:b9:ad:a2:37:2c:76:8c:39:74:
06:c3:ce:85:6f:0d:4b:60:61:a5:70:4a:92:5a:71:d4:76:8b:
11:03:20:56:0a:fc:f4:ad:9b:a6:65:cc:4e:22:5b:6a:df:ee:
a5:47:52:db:7f:c0:7a:fb:c8:57:14:c9:f8:72:4a:bf:29:86:
b3:53:b3:9b:6b:ae:c9:1f:c0:a8:2a:d5:8d:ae:8b:8f:45:8b:
a4:1e:89:aa:0d:7e:52:6c:83:42:4d:00:a9:f9:73:87:a7:01:
3d:de:be:dc:08:d8:1f:5d:cf:9e:17:b9:f7:5a:82:94:92:61:
4a:a8:05:d2:f1:86:6e:fd:5d:56:7f:35:51:88:e7:d1:cd:53:
31:ab:e2:b9:a2:39:b8:22:a3:aa:c0:5e:da:d1:59:07:59:7c:
ed:54:ad:57:b9:cb:b8:16:0b:a6:3f:6a:da:5b:5e:09:eb:58:
88:ca:f7:9e:4f:91:a3:0a:81:5b:b9:f0:ea:f9:b7:c5:e4:83:
10:c4:94:3c:4a:b8:56:29:bb:3e:58:59:5e:0f:f7:ec:84:c2:
9d:78:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:40 2026 by rpki-client