
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
File: EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json)
Hash identifier: NHf9qG/woQN8fJGiPrSfL8oKNN/DEMon26Q4GVLSKgI=
Subject key identifier: D9:F8:68:F3:6D:B6:1E:4D:39:D4:F6:BA:F2:BA:23:7B:A5:CF:9D:9F
Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Certificate issuer: /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Certificate serial: 05D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
Manifest number: 05D1
Signing time: Sun 20 Sep 2026 22:52:48 +0000
Manifest this update: Sun 20 Sep 2026 22:52:48 +0000
Manifest next update: Sun 27 Sep 2026 22:52:48 +0000
Files and hashes: 1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: t8vPlhSZOQ/G42eK7GsPz5OrAYbHBFOpgMFEqbrgEK0=)
2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Zuyj9zAGIINdxlHDSWvSI2XPToLQDCxQYFNlcnC7prI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Validity
Not Before: Sep 20 22:52:48 2026 GMT
Not After : Sep 27 22:52:48 2026 GMT
Subject: CN=6ab063c0-0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:fb:04:0e:e9:6f:2d:f0:34:ef:33:36:a3:
35:6a:81:6f:80:51:e2:af:c1:14:ed:9e:38:b2:d7:
ca:bc:b8:4f:29:e9:bb:35:ca:1c:84:66:d8:84:df:
cf:44:cb:40:54:75:73:76:b3:7b:98:96:a8:6f:53:
08:41:64:e3:af:69:c6:0f:7e:46:87:ae:63:83:56:
3e:98:90:5b:58:a7:c2:38:4a:f7:df:35:b1:e8:04:
b7:78:b0:66:01:2e:49:f4:82:e2:86:a4:10:1c:c8:
bd:d7:11:c9:94:5d:45:2f:7f:4f:82:cf:21:37:a9:
6a:ba:8a:31:2f:a5:25:94:d1:75:20:8c:e8:c9:22:
ff:b4:b3:b1:c5:51:6e:d8:91:3b:03:d3:cd:2d:af:
33:7e:e4:6e:ba:d5:53:17:2a:3a:aa:ee:9e:7f:46:
92:2f:7b:3f:11:29:75:1a:fd:a9:6e:26:97:2b:13:
68:8a:89:d2:c5:d8:36:6c:3e:f6:f0:be:27:dd:58:
d7:6d:dd:0a:7a:36:43:55:0b:a1:41:0a:1c:8b:d5:
d7:87:4e:8a:54:e3:ee:94:0d:47:b3:39:eb:3f:e2:
3a:90:97:e2:48:60:0b:3a:96:f8:0b:ba:02:81:f3:
65:7b:7f:08:de:d4:42:64:cb:60:52:af:63:64:0f:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:68:F3:6D:B6:1E:4D:39:D4:F6:BA:F2:BA:23:7B:A5:CF:9D:9F
X509v3 Authority Key Identifier:
keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:43:52:78:5e:ff:a6:e5:29:ce:5c:42:d8:b3:c7:8f:02:74:
ba:0f:3b:71:d7:62:4b:49:48:56:09:92:59:91:79:01:98:aa:
9e:0a:e9:f9:70:e2:f2:83:a4:26:16:7e:4f:21:19:9a:10:74:
d6:03:43:20:78:20:db:43:92:7b:6a:c5:8d:3f:eb:ae:f9:da:
71:33:d1:fd:0a:9e:64:cb:98:bb:b4:f4:9d:79:5c:38:2d:d4:
9f:eb:54:bb:e2:99:32:49:f0:03:ae:25:e0:47:ad:c6:5c:bf:
52:62:c9:89:5a:84:67:53:a8:75:b1:cf:73:33:b1:ae:41:a4:
2d:a0:00:c5:4f:fa:f8:00:96:7c:fe:9b:61:4b:72:18:3d:14:
36:0c:63:ef:a6:28:76:9f:9b:c7:78:f2:e2:bb:03:f1:a8:4f:
13:a8:3f:d2:a9:23:0b:a8:e0:8e:4c:70:50:31:63:14:5e:1a:
77:2c:d9:f8:4a:f3:fa:45:63:b1:01:7c:36:8e:da:9f:d1:fc:
47:cc:df:f7:19:8e:bb:9d:9a:8d:7a:2d:af:8d:8a:4d:e9:d6:
d4:52:1a:23:ff:c3:5b:dc:95:7f:45:3e:a2:31:44:0e:a8:1a:
5e:f1:bb:17:69:2d:aa:af:ee:57:37:57:78:79:7c:f3:44:0d:
e0:df:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:19 2026 by rpki-client