
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier: 4AQVf3jumNclbxVeN7EC6nmuZUokhLa31WFeU9s0dgU=
Subject key identifier: F8:12:E3:A0:80:C2:4F:47:22:CB:C9:9C:80:F0:A2:DB:02:F7:FC:32
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number: DF
Signing time: Wed 13 May 2026 06:55:47 +0000
Manifest this update: Wed 13 May 2026 06:55:46 +0000
Manifest next update: Wed 20 May 2026 06:55:46 +0000
Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: MqtgGTRG9a3UaPffXTzAMg5yRHldNs2SA0bKZ+sfyE0=)
2: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: wISzL57CKfWjmFG51rfgbb3uCs7qMuabttb3dl/m4bU=)
3: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: 1J7nQsHlQuAiAvo5aIiZqNyCzq3jV+3T1c+Q4mzMQvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Validity
Not Before: May 13 06:55:46 2026 GMT
Not After : May 20 06:55:46 2026 GMT
Subject: CN=6a042073-31b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:1f:61:8d:e1:79:47:a9:fb:d9:29:d4:a4:
dc:4c:dc:70:7d:0e:9c:5e:01:b7:be:6a:81:8b:cf:
ed:69:84:c6:68:41:86:32:82:2a:16:c5:32:4e:36:
7b:b0:7e:f2:2b:5d:1f:3e:07:ef:73:14:fa:9e:91:
3d:37:d4:28:94:60:ad:b0:d1:a6:d0:94:0b:af:c7:
6c:1d:49:cc:12:a6:1e:4c:db:f1:b3:07:81:4e:ff:
d7:0d:17:31:09:50:0c:50:b0:a4:c6:ad:21:a8:42:
cd:18:ce:6e:b6:27:9c:2d:11:b2:22:cb:84:36:26:
20:e0:dc:95:40:aa:50:aa:0a:ae:4e:92:6b:ce:87:
5c:29:02:79:23:85:d7:32:77:ec:3a:7d:5e:a7:8e:
ee:4b:6d:77:13:e0:64:28:dd:dc:d9:6b:89:44:d1:
39:27:d4:04:27:a7:50:70:d6:27:37:16:53:83:3f:
fb:14:86:88:1f:bf:12:5a:fd:0d:13:20:4b:ca:91:
a0:88:13:04:35:e8:b3:f6:98:2b:e2:f0:22:91:0f:
57:d2:e4:98:3b:14:4b:54:49:13:cf:6d:42:a5:39:
17:04:f6:b7:1e:78:95:2c:cf:30:f6:a2:16:6a:f6:
14:24:fc:42:25:8a:15:bd:a4:d1:1e:ba:ca:7e:bf:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:E3:A0:80:C2:4F:47:22:CB:C9:9C:80:F0:A2:DB:02:F7:FC:32
X509v3 Authority Key Identifier:
keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:b8:ca:80:55:c0:18:e0:ce:0c:19:b7:aa:b8:20:0b:c7:
11:8a:ca:79:fe:4b:20:a9:81:16:f4:6a:55:6b:90:2d:dd:b4:
90:e0:f6:7c:be:6e:26:78:64:d7:58:4e:03:dd:55:99:05:a6:
9d:ac:6d:87:db:31:78:c2:fd:25:69:aa:45:e3:ed:3a:f9:4d:
1f:b9:e5:24:f2:47:b7:d2:d9:0e:19:4d:7f:d5:db:e7:68:a0:
13:6f:17:7d:eb:ba:5c:05:08:16:73:77:e4:a6:5c:e5:33:d4:
4d:21:9f:c8:d6:48:c0:0b:a9:57:9e:65:6d:b5:d7:c8:51:c5:
c5:60:0d:3e:ef:d8:37:93:c0:6c:97:db:ec:5d:4b:15:c2:90:
d8:d6:aa:b8:e1:5c:30:95:8c:51:dc:83:d6:1f:6f:46:85:97:
69:67:e4:e7:4f:9d:2a:3f:18:f6:5c:de:d0:b7:1d:30:92:50:
2c:07:45:3a:39:97:da:68:3e:99:e1:4f:63:d4:ef:64:e5:85:
3c:98:52:44:d6:96:50:a7:33:80:42:b4:06:56:8c:e7:a0:e7:
75:dd:d2:9b:da:f0:61:4e:fb:50:80:dc:9d:f0:38:08:c6:94:
df:dc:e3:27:cc:fa:68:27:39:69:87:46:45:a7:58:8c:cf:17:
e6:79:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:34 2026 by rpki-client