
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier: ZYWofGZnMqnyAGvqbVjOIDJAmd8SgWMkqwpoautl6qg=
Subject key identifier: 01:FC:60:75:0B:09:73:22:71:33:C8:67:FC:91:AC:AF:F5:3A:16:97
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial: 070F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number: 06FF
Signing time: Tue 24 Mar 2026 21:41:43 +0000
Manifest this update: Tue 24 Mar 2026 21:41:43 +0000
Manifest next update: Tue 31 Mar 2026 21:41:43 +0000
Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: PfHh/K9uJbKGPJj/7RZ6vujBN0Tv4Y1OMz2DYMB6sxw=)
2: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: pkrDM++jJmRWRRPlGhOoS7tmYdWnk1WVhEsoieFqvrQ=)
3: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: K8TnfaIsOICTY567FCqDzVnaqT1APmkcKZFRRplgeZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Validity
Not Before: Mar 24 21:41:43 2026 GMT
Not After : Mar 31 21:41:43 2026 GMT
Subject: CN=69c30517-93e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:71:3b:c3:26:a3:05:84:b8:a3:e2:15:b0:
fb:ba:de:73:c3:b1:8f:ea:81:b3:1e:5d:b6:97:09:
d8:27:e3:ae:e9:6f:f0:4a:85:3c:d4:01:31:14:f0:
d7:47:88:e9:4e:fc:64:a7:6b:d6:f7:be:c5:d5:89:
d4:77:52:6d:d0:1c:2b:92:d4:d7:cf:b2:78:cd:f6:
60:e6:35:1b:30:8e:16:af:82:07:5a:9b:8d:39:d2:
2c:f3:9f:b1:d3:e8:04:9d:0f:4b:a2:fe:67:1a:c8:
74:74:d1:da:ff:ae:23:92:32:24:26:9c:68:e3:85:
11:01:ee:e1:20:a0:df:4b:bb:44:46:7e:63:1c:8c:
d1:fc:c4:bf:de:eb:eb:27:4b:8f:81:dd:b1:f5:98:
53:60:21:35:c1:b4:23:ea:55:28:be:95:43:98:64:
df:c4:02:8d:6b:b9:92:69:a8:86:44:b2:b0:ab:92:
7b:24:a1:09:30:98:24:63:46:0e:37:8a:9d:55:a7:
73:b9:ca:02:23:80:77:0e:ee:55:79:bb:3c:7b:24:
cd:f7:8e:aa:36:ac:e6:1c:9d:0a:57:39:d2:22:da:
0e:aa:54:2f:e6:42:99:08:85:36:27:10:58:43:c9:
96:a9:05:0a:8e:e7:95:dd:1c:9a:29:da:ac:02:5e:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:60:75:0B:09:73:22:71:33:C8:67:FC:91:AC:AF:F5:3A:16:97
X509v3 Authority Key Identifier:
keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:27:a3:bf:ee:fa:d1:bc:a5:86:3a:bc:f0:53:cf:d0:c9:
28:95:e1:9f:eb:27:31:72:9f:df:1a:8f:38:70:02:ae:a0:82:
9c:be:d8:af:34:82:76:7c:cb:23:1b:6c:fc:59:db:a8:5d:05:
1b:84:69:a5:d6:e2:04:95:39:eb:b7:9b:b2:76:a0:57:f4:2c:
83:7d:ce:26:ac:35:b3:5b:0c:04:28:93:16:50:fd:82:6d:2e:
ac:24:a3:8a:0c:be:20:0c:75:31:d1:85:62:b2:20:72:bf:e4:
62:37:a8:e3:9f:81:a0:18:5f:12:41:fd:3f:ec:50:16:86:38:
46:3e:9b:ef:36:f0:c1:4d:c6:e5:b3:37:d5:26:88:8f:9d:25:
30:44:91:94:71:96:d9:92:6a:dd:fe:b6:11:73:17:10:15:4e:
6b:89:17:07:78:7f:1b:44:13:77:21:48:7f:20:24:e5:48:d5:
77:d5:45:b5:49:a2:57:ef:41:f2:73:1d:03:a9:4c:68:a1:86:
b1:a3:25:fe:5d:01:2b:f2:2c:71:1a:85:a1:d5:8d:88:c8:5c:
36:d4:13:34:80:cf:b2:50:1d:3d:cf:1a:be:95:56:ef:ec:04:
20:af:12:b2:33:c1:fa:32:cc:0a:2b:67:06:90:c3:b3:8e:bd:
94:fe:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:49 2026 by rpki-client