
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier: fY1PUJfJOobH9xN0jknwKOWPuj9lxozAlo0FlpMzNY4=
Subject key identifier: 29:F0:61:C0:C5:B8:77:A6:16:6B:F0:8F:50:AA:A1:90:86:6F:14:12
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number: 01A2
Signing time: Sat 19 Sep 2026 04:15:20 +0000
Manifest this update: Sat 19 Sep 2026 04:15:20 +0000
Manifest next update: Sat 26 Sep 2026 04:15:20 +0000
Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: aW5u5lk3ln5d3lIIBg+PEd1rV6HlmyIKFQAvD0Td+BY=)
2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: q/inWwagPqsJ9K+IB7d6o4TgPPjDhue6dL8dPifXSPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Validity
Not Before: Sep 19 04:15:20 2026 GMT
Not After : Sep 26 04:15:20 2026 GMT
Subject: CN=6aae0c58-ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:0b:e8:51:fd:0a:11:03:1e:b8:0f:3e:88:
64:0e:e7:ea:b0:b3:b6:c7:e4:f2:30:46:ac:cb:9a:
c3:a0:90:39:7e:7f:7d:96:5d:23:6f:25:42:2a:8c:
9d:3e:ab:bd:42:5d:71:52:ad:5a:a2:8a:b0:dd:17:
54:30:2f:35:c1:f0:86:6e:5e:b2:1a:66:b7:96:9c:
75:a0:6c:c1:99:49:62:bc:c6:b1:eb:c5:07:19:cb:
b6:f2:4b:29:be:9f:af:91:be:1a:a4:1e:cc:66:ce:
98:c5:37:a1:95:08:59:f1:8d:ce:88:31:0d:25:f9:
51:74:fc:5d:bb:a0:2d:4a:e7:64:73:cd:21:30:4b:
1c:dc:d6:e8:dd:d9:b7:f3:ef:9a:22:6a:eb:bd:29:
59:9f:76:b0:18:bd:1f:aa:51:42:db:1a:cd:6a:eb:
b3:b0:2e:ca:6b:b8:32:71:1c:22:01:ec:88:94:53:
4a:b6:15:29:0b:a5:d7:0c:2c:2a:32:1b:f3:66:fe:
48:5f:54:d6:df:6c:96:28:d3:2a:58:80:9f:f8:16:
02:e4:4e:2d:62:37:33:32:db:35:0e:d7:52:37:27:
3d:bf:e9:2b:be:08:d4:87:72:16:91:08:e8:b5:31:
6e:50:d9:1d:ec:f8:af:1f:27:67:8d:f2:60:1e:51:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:61:C0:C5:B8:77:A6:16:6B:F0:8F:50:AA:A1:90:86:6F:14:12
X509v3 Authority Key Identifier:
keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:11:b1:9e:a2:e6:72:db:ca:95:b4:ad:59:93:d4:67:e9:87:
dd:31:1a:3e:3a:9a:54:e2:85:0b:4c:ea:02:9d:7e:55:f8:bb:
98:66:b7:f7:ee:1e:6f:d4:0d:2b:58:3d:4f:4f:ac:55:93:97:
4d:3b:97:23:b2:0b:5d:9f:09:b2:c6:ba:90:3f:96:d2:24:ff:
cb:7b:d7:96:06:6e:96:f8:07:f1:79:6d:9d:b2:a8:92:9d:15:
7d:a3:f4:18:1e:51:32:e3:0b:c7:eb:e7:b2:9b:c4:ce:b8:46:
14:24:fc:1a:17:c8:af:f6:07:0c:ae:38:38:ff:f1:39:5a:71:
dd:b6:1d:3f:d8:16:74:29:18:c7:b5:bf:33:d0:ce:0c:22:bb:
c3:8d:21:39:b2:db:cd:83:35:a2:ed:3f:ac:13:ac:7d:07:1a:
3a:26:76:37:f1:fe:c5:f6:3d:16:23:dd:23:01:7e:e5:98:cf:
95:ab:d6:02:55:59:f3:fc:40:9d:7f:1b:38:3b:0b:9c:78:d9:
95:5d:0f:24:7b:8c:5e:dc:66:4a:a4:a9:67:82:57:b2:4c:1a:
88:6d:3d:ab:22:7d:f8:b2:d7:4c:83:c7:13:40:29:58:59:49:
9c:b2:b7:68:3a:4c:7d:ee:90:d3:ee:20:0d:ad:ca:a8:8d:0a:
b9:a1:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:08 2026 by rpki-client