
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier: GDJd/SKlzIrkRI+PFYSw6frXZW+3H2vg+KYgGV7Ix2E=
Subject key identifier: 0C:48:8F:EC:B7:0D:6A:AA:FB:04:6E:42:12:CC:7C:3D:F7:26:72:FF
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number: 01B9
Signing time: Tue 03 Nov 2026 04:46:12 +0000
Manifest this update: Tue 03 Nov 2026 04:46:11 +0000
Manifest next update: Tue 10 Nov 2026 04:46:11 +0000
Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: UyiGelc+e5TKKTnnH2UgLMCxRz9XUITIS8fgArVFn8A=)
2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: q/inWwagPqsJ9K+IB7d6o4TgPPjDhue6dL8dPifXSPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 04:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Validity
Not Before: Nov 3 04:46:11 2026 GMT
Not After : Nov 10 04:46:11 2026 GMT
Subject: CN=6ae96714-6d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:14:1a:7d:c3:f0:15:a5:e4:40:10:0f:c2:
93:dc:93:d9:23:37:68:0c:cc:56:a6:0f:ff:81:e2:
5a:75:e3:43:f4:53:70:a8:9c:a4:b7:80:3f:b7:ac:
d4:44:eb:f7:a8:e8:03:f4:d1:67:80:d9:08:5b:e3:
0f:85:4f:03:d3:d5:29:12:a8:d8:f8:d3:fe:74:ba:
80:25:ae:34:82:8a:92:ca:c9:58:4c:ec:1e:df:d0:
ed:7f:b7:4c:35:ca:48:be:8b:38:be:08:54:55:2a:
34:23:50:48:8f:cc:89:14:95:d7:e5:3b:31:15:a9:
3f:64:5a:c2:61:14:01:7f:d0:9e:54:a0:1e:0e:de:
8a:30:82:d4:fd:14:de:b2:52:d5:1a:bb:91:12:c7:
87:1a:02:b0:ea:ab:a7:73:44:c8:bd:22:b6:1e:1f:
6f:d2:a1:2a:cd:6c:ee:d2:43:db:65:aa:a2:d8:1e:
51:72:c5:6e:85:c9:d2:6b:f0:a8:09:e3:7f:01:4e:
1f:71:7a:1c:2a:3e:10:05:99:fd:09:fa:0f:33:a7:
44:3c:0a:88:76:27:83:ba:5f:11:85:f8:7c:b8:cd:
ad:3a:59:9b:c1:95:29:c8:0c:6a:79:15:35:64:b4:
c1:a1:e0:62:15:20:17:05:9e:ab:aa:c5:6f:72:89:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:48:8F:EC:B7:0D:6A:AA:FB:04:6E:42:12:CC:7C:3D:F7:26:72:FF
X509v3 Authority Key Identifier:
keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:ac:bc:9a:5a:12:7a:04:e8:dd:6e:fd:f5:13:a6:a6:a9:
dc:ba:3a:eb:42:a0:90:1a:f6:a5:8e:d1:5e:87:92:b4:79:6e:
a4:f9:0e:f3:92:f5:00:08:3c:97:6f:37:1b:9d:56:fb:25:74:
64:16:35:18:63:55:28:7d:be:17:0a:40:ba:13:67:f2:a5:8b:
62:67:79:1a:ec:ce:da:3e:28:21:ea:3c:fe:74:d9:0f:0b:f5:
39:35:e3:9e:6e:da:0f:05:27:85:19:57:d1:c6:e9:37:0a:56:
64:b8:bb:c5:66:fc:73:29:c5:5a:17:a7:89:6e:08:0a:76:e4:
df:68:c1:4b:0e:bb:37:e2:b9:74:58:b3:96:d9:26:d6:cb:23:
dd:a5:c9:d6:45:9e:44:ed:c6:53:e7:8f:a3:94:fb:26:e9:45:
eb:c9:5d:bc:6c:41:3a:05:13:42:74:98:16:a6:dd:bb:34:fb:
0e:a4:fb:9f:43:8b:a6:6a:ae:4d:1f:03:c1:3b:56:b4:35:97:
40:d0:77:ee:b3:a0:77:0f:32:af:37:22:b3:d6:fb:ac:a6:17:
25:c5:92:d8:62:4f:ac:23:0f:df:1c:03:0b:85:fa:eb:11:97:
d0:27:5b:a8:23:7f:0d:15:55:0c:9b:de:e1:63:a8:d9:d9:3b:
76:d6:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:32:51 2026 by rpki-client