
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier: +i9YPcpAfmpLgMpUAS5ioZp884X4+0kVnpGI5iaGL0k=
Subject key identifier: 9D:13:CC:55:BE:39:F0:68:50:AD:24:51:7E:AD:1B:CB:6A:BB:B6:6A
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial: 0D58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number: 0D44
Signing time: Wed 22 Jul 2026 18:18:39 +0000
Manifest this update: Wed 22 Jul 2026 18:18:38 +0000
Manifest next update: Wed 29 Jul 2026 18:18:38 +0000
Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: nx1VJ+K1hBpINO7fFaa/hmpTEVf+lxUZejhX4X80pHo=)
2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Validity
Not Before: Jul 22 18:18:38 2026 GMT
Not After : Jul 29 18:18:38 2026 GMT
Subject: CN=6a61097f-d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:d5:8b:5f:79:34:c5:3a:dc:1e:34:0b:81:
ce:78:af:61:c0:63:9c:03:a5:fc:53:f8:f5:31:ae:
e5:87:30:88:2b:61:04:34:45:d8:d4:dc:3d:fb:a4:
67:20:0e:f3:5b:6f:c7:d4:5a:3c:39:05:ba:69:dd:
a4:bd:cd:17:98:c2:31:57:c4:05:54:f5:b9:ff:92:
93:9f:34:81:ca:45:a5:74:f9:a6:1a:f3:b2:5f:6e:
95:c1:4d:98:4c:21:88:e4:b1:f4:31:ae:4b:e9:f0:
a1:ae:f1:ef:7b:74:54:88:6e:72:6b:1f:68:c8:6b:
57:d3:e2:2f:21:c0:47:1e:8c:46:27:ec:d8:4f:bf:
83:24:f2:20:33:49:2f:9f:08:ab:f9:11:d3:f3:35:
2e:44:cf:e8:05:8b:e9:0a:3d:31:49:73:e0:ca:db:
7f:17:96:b3:00:cd:17:9d:00:7c:b9:10:ba:f1:a0:
68:e5:4d:ad:bd:35:dc:1c:ee:81:05:31:fa:d8:f5:
73:9f:26:c6:79:e8:ee:01:aa:19:db:97:f8:d3:9b:
3c:57:56:db:37:cf:11:2c:cf:74:0e:d7:ff:b3:a2:
6f:23:2c:0e:94:01:1b:af:bc:a7:83:1e:fe:5b:a3:
ee:fa:53:27:81:05:83:7c:ac:56:84:26:00:ee:70:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:CC:55:BE:39:F0:68:50:AD:24:51:7E:AD:1B:CB:6A:BB:B6:6A
X509v3 Authority Key Identifier:
keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:29:8e:bc:83:75:3f:16:a8:a1:c9:41:f2:2f:80:b8:f4:a8:
fd:fd:ac:80:8d:4e:4f:2c:e7:6d:07:fc:6e:ad:c1:c4:81:62:
41:37:05:da:87:b5:ce:c9:0c:a5:64:74:f7:90:55:f6:5e:5a:
f3:7e:b3:2b:27:2c:e2:24:46:15:27:92:3d:66:97:37:06:e5:
02:64:6b:de:a9:10:e0:c8:1e:e2:4d:11:ba:80:38:ca:d4:04:
78:00:ce:95:76:8a:28:2d:9e:21:d1:4f:4e:05:a8:38:3f:94:
13:9c:b1:27:70:89:94:c2:2d:d2:57:1e:7b:ff:41:c9:03:c7:
2f:8c:49:10:ab:1c:a8:c9:9c:ce:21:5a:8e:45:aa:b1:12:9a:
9e:4c:9b:8d:60:6c:81:4a:dd:29:ae:8a:68:98:8d:c1:6f:8d:
ec:1f:a8:f4:f4:d5:13:9b:07:08:05:b0:e8:ba:eb:f3:3a:30:
d1:e7:40:f4:74:a3:ca:46:b4:6a:ef:5c:65:f9:dc:50:f9:5e:
32:a5:b3:d4:54:47:01:0d:fe:7a:7e:62:44:30:8b:cb:29:5d:
99:e5:53:fe:b2:c1:eb:dc:38:c0:c9:d1:9b:dc:c2:58:30:91:
a8:b3:be:9a:0e:09:6a:8c:da:25:69:2b:cc:4c:cd:23:68:55:
cd:8b:e7:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB
MzkzMkNCODMwHhcNMjYwNzIyMTgxODM4WhcNMjYwNzI5MTgxODM4WjAYMRYwFAYD
VQQDEw02YTYxMDk3Zi1kMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodrVi195NMU63B40C4HOeK9hwGOcA6X8U/j1Ma7lhzCIK2EENEXY1Nw9+6Rn
IA7zW2/H1Fo8OQW6ad2kvc0XmMIxV8QFVPW5/5KTnzSBykWldPmmGvOyX26VwU2Y
TCGI5LH0Ma5L6fChrvHve3RUiG5yax9oyGtX0+IvIcBHHoxGJ+zYT7+DJPIgM0kv
nwir+RHT8zUuRM/oBYvpCj0xSXPgytt/F5azAM0XnQB8uRC68aBo5U2tvTXcHO6B
BTH62PVznybGeejuAaoZ25f405s8V1bbN88RLM90Dtf/s6JvIywOlAEbr7yngx7+
W6Pu+lMngQWDfKxWhCYA7nDR5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0TzFW+
OfBoUK0kUX6tG8tqu7ZqMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG
RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2
OWN4Tk83dldXTjZqa3l5NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiimOvIN1PxaooclB8i+AuPSo/f2sgI1OTyznbQf8bq3BxIFiQTcF2oe1zskM
pWR095BV9l5a836zKycs4iRGFSeSPWaXNwblAmRr3qkQ4Mge4k0RuoA4ytQEeADO
lXaKKC2eIdFPTgWoOD+UE5yxJ3CJlMIt0lcee/9ByQPHL4xJEKscqMmcziFajkWq
sRKankybjWBsgUrdKa6KaJiNwW+N7B+o9PTVE5sHCAWw6Lrr8zow0edA9HSjyka0
au9cZfncUPleMqWz1FRHAQ3+en5iRDCLyyldmeVT/rLB69w4wMnRm9zCWDCRqLO+
mg4JaozaJWkrzEzNI2hVzYvnXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:56 2026 by rpki-client