
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier: 8nWsvSSN7PmxpfwsXpmuYju+RXWyHSiUp+3KQ0i/LlY=
Subject key identifier: C4:76:3C:B6:0D:EA:EC:E2:15:96:6E:3C:87:6E:8A:9B:57:18:52:65
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number: 02AD
Signing time: Sat 13 Jun 2026 01:28:10 +0000
Manifest this update: Sat 13 Jun 2026 01:28:10 +0000
Manifest next update: Sat 20 Jun 2026 01:28:10 +0000
Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: GcSuT1Hln+54GFLYZUSmQ3VsG3HRxCb2pqpQSx6AcyA=)
2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: 7oAXnZAUBtQjX3ZHXMNMC7v8KvbechSNV9axONzAjso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Validity
Not Before: Jun 13 01:28:10 2026 GMT
Not After : Jun 20 01:28:10 2026 GMT
Subject: CN=6a2cb22a-b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:8e:11:93:e3:81:49:12:75:6d:eb:65:7e:
bb:dc:28:55:04:e8:4b:83:b6:98:13:3b:ca:0e:00:
8d:d0:b1:38:6e:cb:0b:c5:2a:49:b4:03:1e:ae:7e:
bf:60:4d:23:f2:23:0a:0b:c2:e0:24:b5:a8:5a:15:
3e:0c:9d:62:d1:03:dd:80:97:ec:79:8d:dc:70:10:
70:8d:14:3c:a6:b8:07:54:61:50:14:19:f5:9b:03:
6d:ca:0f:c1:bf:bb:10:12:ef:7a:88:7e:19:c1:0c:
8f:52:e0:6e:39:d2:71:ac:a2:b4:0b:3b:ef:14:db:
45:e8:cd:b8:ec:d0:54:2a:60:8f:7a:9b:da:72:26:
43:7d:28:9c:4a:a3:c9:fb:38:6c:71:cb:16:53:b9:
d3:ba:a3:3e:6b:0b:cd:a6:06:6e:06:45:a3:e9:50:
a7:c5:07:9f:94:5e:e8:6d:ef:41:c8:b9:9d:f1:3c:
93:b2:15:ee:f9:f6:d2:b8:30:9f:04:11:17:c9:44:
ae:69:a1:9c:17:f9:ab:31:53:0a:6b:04:52:57:25:
d6:ca:1f:4a:19:2f:24:40:7b:0b:86:b4:d5:17:c4:
43:64:c2:28:62:18:f0:38:55:3c:c1:77:9c:05:79:
5f:c7:15:93:37:95:5f:0b:93:bc:15:1e:d1:fc:14:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:3C:B6:0D:EA:EC:E2:15:96:6E:3C:87:6E:8A:9B:57:18:52:65
X509v3 Authority Key Identifier:
keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:96:87:97:83:22:68:73:10:f0:f9:5e:6f:aa:f2:fc:64:57:
21:a7:a5:d9:d0:4d:5b:40:2f:fb:3d:23:51:dd:39:ca:6f:46:
11:16:b7:3f:ee:e5:ef:1b:52:7a:2a:a9:f6:8b:e5:0b:e3:74:
a6:d7:5b:ad:68:88:d8:e0:07:51:de:73:40:9b:79:8f:0c:34:
ed:b5:ac:84:a1:a1:1e:06:b4:b9:85:ac:21:4f:96:3d:0d:a8:
9d:43:83:d4:42:89:c4:b4:c8:0c:ee:5b:38:fa:2d:c7:81:97:
d5:1a:b6:e0:b6:db:0c:4e:e9:08:3c:65:ed:39:cf:42:36:a4:
45:40:d7:ab:30:ba:cb:b2:85:69:78:3b:3c:65:2f:96:09:a9:
5b:69:14:e4:89:7a:72:46:bf:03:42:61:76:42:8f:8b:b9:8f:
4f:39:bb:b3:17:25:b5:18:6b:0c:31:1d:e6:e0:dc:49:4e:c5:
c7:94:d6:e8:7c:08:24:9f:36:95:8b:24:c6:f2:f6:00:eb:85:
ff:c5:99:66:87:ef:43:fc:e2:a5:f8:b2:4b:14:a5:c0:82:65:
02:ca:36:e5:cc:2b:12:e1:67:90:ba:92:b4:2e:92:f3:f5:8d:
c9:c9:af:44:6a:dd:19:8b:12:a3:3c:d4:da:54:35:68:74:c2:
c0:29:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:44 2026 by rpki-client