
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File: eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier: NpKMY7cb4s8ICi25hS0GpS3yM7RjGDPZDl7FH4zZUHI=
Subject key identifier: E6:5D:3A:74:CE:03:79:F4:48:17:D5:87:9E:85:85:4B:DE:16:1E:72
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer: /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial: 067F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number: 0668
Signing time: Sun 20 Sep 2026 22:30:59 +0000
Manifest this update: Sun 20 Sep 2026 22:30:59 +0000
Manifest next update: Sun 27 Sep 2026 22:30:59 +0000
Files and hashes: 1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: jnkKGO01zDNw43iYFc5LmvTyfteR1j4N5BLVSRUzfdM=)
2: 0A816CBA49DA11F09907E971C4F9AE02.roa (hash: yqTmXisx0OJdHsQMjT38VE/WSwPBITWKMsPdafbLD/c=)
3: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (hash: 0/laoLHIL/zDE6DfvUg8AUNMtCOl036HObAE+/SZXEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Validity
Not Before: Sep 20 22:30:59 2026 GMT
Not After : Sep 27 22:30:59 2026 GMT
Subject: CN=6ab05ea3-82c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:6f:73:b9:fc:72:d2:d4:e2:a5:12:3d:29:
96:df:bd:32:85:51:bf:b5:bd:1b:08:ae:48:cb:e4:
1f:65:fc:d6:4f:35:11:29:fe:56:5a:95:de:56:66:
97:09:e3:6f:f6:d9:e2:fb:ba:2d:3f:22:c9:d3:46:
58:6c:7b:d6:d4:de:35:20:06:1a:0d:c6:2a:05:7d:
af:8c:78:e2:86:df:2a:b8:14:18:f5:41:36:96:02:
3b:63:01:0b:a7:55:e2:f1:58:c9:43:51:d7:69:b4:
0a:db:a9:ed:3e:7a:71:62:a3:6e:83:9d:ff:bd:e2:
e2:5a:bd:1e:f9:00:0c:0f:33:82:a1:ce:67:af:09:
7f:96:0b:b8:dd:b5:ff:a3:29:f6:12:11:64:6a:64:
ae:d0:2a:39:65:c5:d6:c8:be:de:42:2b:b2:b4:8d:
22:1c:55:d4:1a:5a:41:7e:8d:51:be:90:fa:d9:b0:
ae:e2:d1:e4:ad:0b:91:04:0b:7b:20:3b:8d:3b:d2:
b5:49:75:d7:75:9f:34:ca:13:da:b8:24:21:75:b4:
44:fd:4b:3a:8e:e5:2b:45:10:b4:c7:00:29:26:58:
61:31:55:84:7b:75:9a:29:98:8c:2f:d5:d7:27:2d:
90:46:87:89:90:8e:ce:bb:ba:57:e2:49:d0:64:96:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:3A:74:CE:03:79:F4:48:17:D5:87:9E:85:85:4B:DE:16:1E:72
X509v3 Authority Key Identifier:
keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:40:7c:79:32:6e:64:59:cd:64:31:10:52:22:27:3e:a0:
8f:a2:4a:a1:43:5b:64:3d:9b:2c:ae:12:27:d7:34:f1:75:15:
00:6f:60:3a:61:28:4f:5d:e6:cf:61:ab:48:7e:97:dd:e5:d2:
d4:a7:25:3c:38:8b:f9:23:26:14:ba:e3:41:b7:93:a7:10:37:
fb:79:f7:a6:a7:84:6d:d5:c8:84:62:db:94:22:50:13:6c:af:
0c:0e:c0:94:6a:21:33:5d:93:88:7b:45:4a:f0:0c:c7:5f:20:
75:78:d6:fa:6b:2a:24:ce:35:42:71:b9:93:99:1f:4d:c3:4b:
3a:fb:31:90:1f:81:bb:d3:16:58:88:4a:91:65:e4:b3:b9:54:
83:2e:f3:c0:45:c3:b5:2e:7d:35:6f:8c:7f:52:f0:b7:ae:4f:
f7:8e:0e:af:42:c7:c6:79:6b:22:39:59:52:e0:07:6a:da:b6:
3a:01:f3:ea:42:7f:6b:6e:ae:af:a2:4d:b0:de:93:19:89:a0:
d1:a3:df:7f:9d:3b:72:62:0e:b7:a1:21:df:3a:2f:67:78:6e:
ae:af:a3:19:b4:49:5f:9c:0a:87:a0:46:d3:cd:e9:0a:96:ff:
6e:4c:b7:f0:db:13:36:1e:7a:7f:a3:78:8b:8a:58:e4:be:67:
cd:73:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:49:08 2026 by rpki-client