
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier: ZqH2ZbOCowlzPkpImUoNciyYab/8WdnF4H4R+R9b07M=
Subject key identifier: EF:31:48:53:EE:0C:9B:91:BE:8E:4F:A6:35:EE:7E:B7:8E:E5:73:A9
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial: 0A17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number: 0A0E
Signing time: Tue 12 May 2026 19:51:58 +0000
Manifest this update: Tue 12 May 2026 19:51:58 +0000
Manifest next update: Tue 19 May 2026 19:51:58 +0000
Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: JSOkoK5gNGoEUKUf1tTiOPAtUKlTZSkNRHvsqop6YWY=)
2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Validity
Not Before: May 12 19:51:58 2026 GMT
Not After : May 19 19:51:58 2026 GMT
Subject: CN=6a0384de-21be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:dd:76:08:25:4c:0a:55:8a:e3:ba:38:bc:
6f:fc:ed:5a:c3:56:59:24:ea:8e:26:5d:bb:d5:45:
6c:53:eb:96:5b:48:3d:20:44:09:63:e5:b5:05:b7:
44:06:7b:7a:55:d2:78:9a:72:5b:4b:80:d6:96:95:
4b:78:0e:60:d6:fe:b8:32:0b:87:40:f6:1e:e5:12:
d7:81:89:b6:b8:26:2c:4a:28:fb:21:3f:45:26:90:
22:07:7a:17:06:3d:bf:84:d8:8b:98:cb:8b:97:c6:
f9:ce:4f:b1:f9:6c:a4:99:6b:1c:c6:31:7c:01:ee:
27:88:8f:40:38:21:44:41:fb:68:34:63:44:11:35:
ea:6c:dd:e1:20:3f:f3:25:32:96:9f:a9:58:30:76:
d4:d8:bb:31:41:d7:31:41:e4:60:55:8f:17:80:bc:
86:dc:7d:34:99:bb:9d:7e:a6:f9:e9:1a:8b:1c:7f:
e1:b6:c3:bc:ba:9f:62:4a:c1:c0:b0:52:29:27:9f:
27:ab:96:9b:46:7a:9e:04:3a:d2:00:26:95:c4:b0:
19:e7:57:ed:16:4f:35:c6:c7:1c:53:31:11:64:96:
52:02:a2:d7:c1:1b:12:f1:17:3a:7e:56:ef:d4:09:
70:80:9e:a1:ad:51:e2:89:c0:74:b5:fd:3c:f5:c5:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:48:53:EE:0C:9B:91:BE:8E:4F:A6:35:EE:7E:B7:8E:E5:73:A9
X509v3 Authority Key Identifier:
keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:68:e2:43:16:29:8a:1d:7a:9d:7f:1b:b1:a2:e6:fd:7c:fa:
79:83:34:25:05:68:63:9d:48:4d:e0:89:32:cd:db:70:7f:84:
4f:2d:84:bf:4b:c2:ee:b7:4a:91:2c:30:5a:9f:d3:b3:68:0a:
3f:90:8f:16:71:28:98:a5:79:d4:41:27:2a:96:2e:e1:c5:d8:
82:bb:a6:e4:ad:6d:3d:89:90:ad:c2:ae:6f:b4:43:67:d4:34:
71:df:f0:b6:63:16:3e:85:6b:81:6d:44:db:d9:2b:f9:11:ee:
47:b6:6c:2e:ba:35:05:99:d3:7b:0c:8d:c1:76:08:bf:92:43:
b2:90:f8:93:a7:02:f2:32:35:2f:66:8d:22:f2:98:e7:fd:34:
d3:4a:eb:28:90:b4:ca:38:67:31:13:72:7f:53:b3:08:f6:dc:
f0:84:3f:78:28:0c:62:9e:be:88:02:f5:85:63:fb:47:8e:35:
b4:06:22:61:b4:46:1f:d4:b5:c3:75:58:8f:69:15:34:79:56:
18:46:37:72:34:27:ec:db:a9:2a:ba:f0:fb:0d:e9:69:16:36:
10:d3:73:08:32:ba:d5:12:f5:61:6c:62:bb:7b:84:01:30:37:
90:86:ab:67:3c:de:b9:7b:b6:ab:08:e8:a2:28:ea:30:32:a9:
44:47:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:27 2026 by rpki-client