
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier: qrjflt0CDRQI4OySAdjXTVLcxdPQ6L/k4IYo7XlkwPw=
Subject key identifier: 35:13:64:5C:2E:3F:D6:8E:2F:3F:85:68:51:CF:74:7C:D7:2F:41:BC
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number: 0286
Signing time: Mon 21 Sep 2026 01:56:23 +0000
Manifest this update: Mon 21 Sep 2026 01:56:23 +0000
Manifest next update: Mon 28 Sep 2026 01:56:23 +0000
Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: CRu6VltoSCimVO/GdmYxn0NmygLcd4NCAUybJTNMxL4=)
2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: Tnjt2fGEhLyDlPP5wmN279sZk46aIOs3pcrgnxrQla0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Validity
Not Before: Sep 21 01:56:23 2026 GMT
Not After : Sep 28 01:56:23 2026 GMT
Subject: CN=6ab08ec7-67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:22:b8:e8:71:8b:1b:55:08:07:4a:1b:3a:
42:7c:f7:f4:2b:66:38:66:10:57:03:1e:be:52:53:
2b:7a:3b:8b:fc:e2:69:6f:aa:2e:ed:84:1c:9a:37:
fe:bb:e2:b5:51:37:96:f6:f9:55:df:5c:3f:06:86:
76:ec:15:6e:fd:9c:93:ea:48:df:6b:6b:6e:16:0a:
1d:bc:ed:70:38:b8:59:39:8e:6a:1d:e0:f1:60:e7:
f5:ff:b2:6a:ce:19:4a:4f:84:25:f4:46:72:78:8c:
15:68:0c:c8:15:0d:ed:60:cf:4c:95:56:80:dc:ce:
85:91:7b:f7:74:8e:28:f8:c9:19:9e:f8:55:ff:59:
b0:46:72:32:22:2e:38:d9:b7:15:a0:ac:da:f3:26:
ee:c8:47:43:b9:5b:91:cb:87:2f:53:54:d7:dd:e0:
f9:ab:51:6a:b3:85:75:54:d6:06:26:bc:c1:9e:8a:
30:0b:79:f6:6d:a8:33:7f:16:75:59:88:5c:39:d9:
4b:ad:a3:4c:76:a4:af:bf:35:c0:c7:fe:56:d3:10:
25:0d:da:be:55:7c:b1:c4:b5:50:cd:c6:8d:20:35:
75:45:1d:9a:57:06:40:94:8c:59:2d:bb:54:e9:b5:
b0:cc:63:c1:28:1f:31:c9:75:50:59:4b:71:8a:ec:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:64:5C:2E:3F:D6:8E:2F:3F:85:68:51:CF:74:7C:D7:2F:41:BC
X509v3 Authority Key Identifier:
keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:82:b0:a2:76:67:67:64:39:79:48:3a:7d:35:9a:d3:6b:54:
ec:74:a9:bb:d7:19:ab:be:0c:28:ec:20:f9:5a:4d:e3:a7:e6:
fb:a8:d0:dd:01:de:36:00:34:8f:da:82:ad:1b:20:6c:bb:e5:
58:40:29:ed:9d:29:6f:56:d0:e7:07:ae:e1:b6:04:50:91:7b:
e3:54:3b:1b:b0:78:d0:e9:60:d9:0d:42:92:0b:3b:96:a1:c5:
1c:88:20:15:8d:31:83:b6:e6:5d:5e:84:c8:c1:22:e9:30:16:
d6:bd:14:87:35:81:c5:0c:c1:16:fd:8e:eb:98:cb:65:d3:68:
2f:a9:e6:0b:af:e2:a3:a4:96:11:62:a3:e2:82:96:8c:cd:eb:
7d:c2:ea:18:73:2e:93:85:eb:9e:ac:0e:dd:24:ee:c9:98:98:
83:72:37:25:aa:80:7c:ed:92:f5:28:4f:e1:33:f0:6e:0b:dd:
8e:a5:d3:ab:eb:a8:ce:f1:b6:d9:24:1a:eb:78:ec:68:85:5d:
df:cf:8a:a6:bf:d5:2c:e7:f6:88:c3:5e:57:b2:2e:36:dc:87:
36:65:a8:4d:01:49:a5:c4:4e:77:76:b9:fc:14:1d:0c:e2:4a:
c8:8a:87:9e:d9:b4:88:c6:b1:b4:c0:d3:80:eb:13:df:04:bc:
ac:56:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:32:24 2026 by rpki-client