
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier: 0k5nPL3ATfTmAe6jfnO+Z7Ss0+GkQcklXR6HXrBVfBI=
Subject key identifier: 0D:C2:19:DB:48:5A:33:80:1B:C3:B0:0B:0C:6C:3A:38:AC:4E:4F:35
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial: 09FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number: 09F4
Signing time: Thu 26 Mar 2026 19:44:33 +0000
Manifest this update: Thu 26 Mar 2026 19:44:33 +0000
Manifest next update: Thu 02 Apr 2026 19:44:33 +0000
Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: cRPr4s5C+eswDsAkdo+daiMRCIImSG1ARuSomYYFNtk=)
2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: jI6HZInKgUXWgQZHqo8Q6HEpUFhmYGG6RExCLAEtqzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556 (0x9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Validity
Not Before: Mar 26 19:44:33 2026 GMT
Not After : Apr 2 19:44:33 2026 GMT
Subject: CN=69c58ca1-efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:3f:46:91:2d:9b:4b:3c:b9:9b:ed:cf:ea:
a9:ee:08:aa:79:1c:d6:49:7e:08:29:4c:5e:f2:bd:
39:56:69:d2:74:ef:54:9d:9a:c8:ad:15:e8:da:a0:
b1:6d:bc:be:f3:e9:39:fb:a4:6e:39:5d:1c:2d:c4:
04:1a:ae:13:9d:7c:72:f5:14:96:aa:c7:6a:55:8a:
17:4c:37:77:dc:d0:a1:1f:34:7a:66:f2:c1:3f:47:
eb:71:3f:e3:7d:ad:13:6b:db:24:a9:71:d8:9d:c0:
14:87:69:a3:cf:06:a1:c9:51:80:01:84:4a:7a:c4:
8f:48:fe:8f:f6:68:78:7f:dd:b2:96:7b:de:74:c7:
a2:4e:bd:e5:d8:68:5a:19:08:ad:21:7e:46:af:bd:
48:e0:54:55:1c:0d:87:01:55:34:4b:1b:cf:b7:7e:
3b:4e:c8:73:63:ba:4e:16:76:85:0c:b4:62:35:96:
17:7f:5b:ee:dd:09:c3:67:ad:0f:c6:76:0b:cf:16:
51:b2:0e:f6:b7:6b:7c:87:e7:94:6a:a2:83:f9:19:
e8:fc:66:68:f0:42:73:a0:04:1a:35:36:6a:69:1d:
2e:16:10:56:9a:17:8a:90:16:24:d2:bd:dd:e8:f3:
5d:74:67:fa:8d:b7:ef:32:38:3f:07:1e:6a:bf:e9:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:19:DB:48:5A:33:80:1B:C3:B0:0B:0C:6C:3A:38:AC:4E:4F:35
X509v3 Authority Key Identifier:
keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:c4:a6:11:93:d1:06:81:6b:17:35:3a:d0:fb:b1:ae:05:
52:ac:80:55:b4:70:ce:8f:9d:e4:82:b5:04:9d:86:3f:7b:9b:
f0:e6:b0:2d:f2:fb:7c:a3:1b:08:dc:cc:35:7e:c3:03:97:ba:
78:4a:dd:79:08:c6:9d:b0:85:70:fc:71:11:8a:ac:c0:24:15:
78:8a:18:3f:fc:98:ba:a4:d3:f8:24:88:19:3b:4a:1e:be:c3:
f8:93:75:ac:63:cb:98:c2:cd:97:2c:dc:79:3e:87:96:64:04:
64:3c:79:a8:00:e8:00:37:a7:f8:31:f8:99:04:6b:e0:4f:59:
58:39:ee:04:5f:f6:7d:f3:e6:ef:19:7c:01:d1:9f:7a:04:04:
87:f8:b8:2b:1a:95:4a:7d:08:14:40:b8:39:88:10:8c:80:47:
df:ec:be:9a:82:53:db:79:96:29:65:db:ef:c0:3a:8e:5e:b1:
ea:42:f6:af:e6:07:cb:10:a0:a1:5b:aa:52:2c:3d:a6:46:41:
7a:91:61:27:e6:3a:c5:bc:9e:bb:58:80:3c:08:6b:07:d9:f0:
78:64:00:07:6b:3a:ab:b4:7e:c5:1f:7c:02:22:9f:e8:4d:9a:
e7:44:cd:dc:55:e0:85:28:fb:87:7c:c2:a2:0e:cf:dd:53:52:
47:84:8a:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF
MjEzMjIzNDkwHhcNMjYwMzI2MTk0NDMzWhcNMjYwNDAyMTk0NDMzWjAYMRYwFAYD
VQQDEw02OWM1OGNhMS1lZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1Y/RpEtm0s8uZvtz+qp7giqeRzWSX4IKUxe8r05VmnSdO9UnZrIrRXo2qCx
bby+8+k5+6RuOV0cLcQEGq4TnXxy9RSWqsdqVYoXTDd33NChHzR6ZvLBP0frcT/j
fa0Ta9skqXHYncAUh2mjzwahyVGAAYRKesSPSP6P9mh4f92ylnvedMeiTr3l2Gha
GQitIX5Gr71I4FRVHA2HAVU0SxvPt347TshzY7pOFnaFDLRiNZYXf1vu3QnDZ60P
xnYLzxZRsg72t2t8h+eUaqKD+Rno/GZo8EJzoAQaNTZqaR0uFhBWmheKkBYk0r3d
6PNddGf6jbfvMjg/Bx5qv+n1pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3CGdtI
WjOAG8OwCwxsOjisTk81MB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3
NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw
Tng1TXdZVkluX3JpRXlJMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiJTEphGT0QaBaxc1OtD7sa4FUqyAVbRwzo+d5IK1BJ2GP3ub8OawLfL7fKMb
CNzMNX7DA5e6eErdeQjGnbCFcPxxEYqswCQVeIoYP/yYuqTT+CSIGTtKHr7D+JN1
rGPLmMLNlyzceT6HlmQEZDx5qADoADen+DH4mQRr4E9ZWDnuBF/2ffPm7xl8AdGf
egQEh/i4KxqVSn0IFEC4OYgQjIBH3+y+moJT23mWKWXb78A6jl6x6kL2r+YHyxCg
oVuqUiw9pkZBepFhJ+Y6xbyeu1iAPAhrB9nweGQAB2s6q7R+xR98AiKf6E2a50TN
3FXghSj7h3zCog7P3VNSR4SK3g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:22 2026 by rpki-client