
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
File: ewHKzBcP5qYbIDBBheholG33KFo.mft (raw, json)
Hash identifier: xDzbLJpLTiyAIjvOZM3S7JzdocTWJHwroK3ZLHjk2Sc=
Subject key identifier: BC:36:D5:86:36:6E:49:B6:34:76:23:7D:0F:40:3C:45:7D:02:B6:88
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 108D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
Manifest number: 0D3D
Signing time: Mon 02 Mar 2026 00:53:21 +0000
Manifest this update: Mon 02 Mar 2026 00:53:20 +0000
Manifest next update: Mon 09 Mar 2026 00:53:20 +0000
Files and hashes: 1: ewHKzBcP5qYbIDBBheholG33KFo.crl (hash: cXGspqrgbd4dErpZv7OEF5VnUpg1lJMxcl9U2V15Xo0=)
2: 58DE045009B111EAB045B31EC4F9AE02.roa (hash: Pl/46HIrrVwU+EOROkgoLyHRli+DwTDUr0Rg5qWM1ss=)
3: F10FEA5C099A11EAB5891D5BC4F9AE02.roa (hash: s0CQ/C9rxkqTPFvJ1gTMruBUdh0IdPadP/+5M5sDdGM=)
4: 795DEE70073111EA993EC663C4F9AE02.roa (hash: C3vRiJAoHVjzmc261815XhqOToZimQDuuldUnLWkizM=)
5: E009A066072B11EAB6E08A52C4F9AE02.roa (hash: cRfncS26heoxKs2O9UDC7eZX0A68DThqhxbubmPZb9Q=)
6: EFDC701A099A11EAB5891D5BC4F9AE02.roa (hash: dJN9pm+xebUzbPzTeMWesSzW4O4AJ9g9s9jmnjw0Us4=)
7: 54E1D22809B111EAB045B31EC4F9AE02.roa (hash: 7pM+5xIMQmH/3L2v9CCdYRJTVeR2gJte3FbaVjmMNIk=)
8: C75AFE482A1B11F083453D57C4F9AE02.roa (hash: Dg7OIK2O0B1/J4uNMEC+ilWoKschjazE/eLZknlppW0=)
9: 5731ACF609B111EAB045B31EC4F9AE02.roa (hash: 2tCO3IzmBykfeklT65CRRja70MdCE7T687QMnD+fRXs=)
10: D2CA53BCAF8E11EAA40B786BC4F9AE02.roa (hash: lpucxewNN7kIJdFPlk7uCH6V5M0/JRxXNdxARg+TQl4=)
11: 79E6617E073111EA993EC663C4F9AE02.roa (hash: 6Vw+2a2sANnbra8NTrgQsRyzVW1ZYyYhDJataWqKbb4=)
12: 4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (hash: eF0JoYd4QG4K9nohGzvY2j58rhPoqXhqJ1BoOLPw/9o=)
13: 55F662DC09B111EAB045B31EC4F9AE02.roa (hash: /X5TChqDgnnwz76ThM1TmEeXUOxlgZkj9qaJLWnJUzo=)
14: 70CB2CA80B4D11EA9667AC1FC4F9AE02.roa (hash: +mf9FQt1sUujPj+X72wMh/E1fDW0fDZ+NCX/lr+9LUM=)
15: B3811802FED411EA83E4EC37C4F9AE02.roa (hash: uHI9zGOyPbHO2nzTM27Xm1djssKMTZcC2l9JljRs8m0=)
16: 585A89FE09B111EAB045B31EC4F9AE02.roa (hash: NK4nHkewJfxiOZkbZPksWLB6cqXrvuONsaMoYjO/m4Q=)
17: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (hash: aFRmztuj8cPb22eut8QJL2JFpj9jMiS0Ik0Vjx3aKmM=)
18: 537DDF3A09B111EAB045B31EC4F9AE02.roa (hash: uvtnzYWMOZmNgT9qWZTLmh1qcon+poPvQt4vFLki1wE=)
19: 42C9FE0C77ED11EBBFBAF568C4F9AE02.roa (hash: FuSNDD+xnlKKj3JZ4a4xS6pO5oxAeYpmSs5sAAlMl3E=)
20: F0735BD8099A11EAB5891D5BC4F9AE02.roa (hash: M7I5wkcI9LfVTSOcMYFzaXyDtw1SuGef81NONNoPC2Y=)
21: 7FC0AC6009AE11EAA7CED313C4F9AE02.roa (hash: DtUshq7iqHXjOiCuKFYQexoo2RSEWe4GvVRIHOI5HuE=)
22: 92C1DA72F96911EA96156C10C4F9AE02.roa (hash: XcEC4UamhbeEfBfXjP2DV9c14PXzHZR3UbVLMLv2Wa0=)
23: F2D46CA0099A11EAB5891D5BC4F9AE02.roa (hash: tM/8wKwCYKHzTQHhY5c4HLuk8Fofp8Cd0e5x0lp9bMQ=)
24: 0DD6A56C073011EAAD272760C4F9AE02.roa (hash: f+lLYGQEN8osY8ooPb5Bgmm8ejpWpX2XaZRdb6CLdP0=)
25: 57D0ACB609B111EAB045B31EC4F9AE02.roa (hash: Fp+j8pdE88i7ME3SdprWlQHZjyMsx3KaiJfa4xejq70=)
26: 48366FBA072D11EAAE8E1D56C4F9AE02.roa (hash: 9y1zYxxYoZLrK7sQW4B+AwqcLsRYjRByP5rStGwcIr4=)
27: D22EBE84AF8E11EAA40B786BC4F9AE02.roa (hash: jewPkLrfHWQk5dXXQQhbC+QVgMU/GNRiWbpcfjFbUBg=)
28: 7AA2CD46073111EA993EC663C4F9AE02.roa (hash: tCTs5ncqmUJ3VhPQ2BCL2n6jkjNzWwibi+jAtFI06RI=)
29: F49547A8099A11EAB5891D5BC4F9AE02.roa (hash: FwkCmp2beowPe6caHQOxk4i7wdy0xiqBzaLxV9ho/Es=)
30: 48DF5EAE072D11EAAE8E1D56C4F9AE02.roa (hash: uDqm3L7PWOoMT9DgXvFu/cONDlLls1Go8u33h3SJSJg=)
31: A874B08E072E11EA8A64DC59C4F9AE02.roa (hash: t8rYm6FWtongWV5WJcVbP9HX3QgrvXOGZehWo4GIqYc=)
32: 543B65D209B111EAB045B31EC4F9AE02.roa (hash: EBMevLZvPcET748auuC70/ue0IyL17mcY95ozRXZb+Q=)
33: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (hash: ZUWUzv3pNGqNZ2gvpekDdpG2hN3vAuAOislKaKMAEwo=)
34: F3DDF814099A11EAB5891D5BC4F9AE02.roa (hash: s6AhJxxW5LLE9RhBQX/8oAxdL1RLL4Y6gJy96ga5JKE=)
35: 55703D7E09B111EAB045B31EC4F9AE02.roa (hash: CQ9/lZAba2EyvJYfZZ78mtTjNRBKZPzIuPorFG6iHag=)
36: F254F0CE099A11EAB5891D5BC4F9AE02.roa (hash: 6ACsZdPKFUc487F0EzvxsAgZQ7NZE8zAut6tK0G1eoc=)
37: 52BF1CA809B111EAB045B31EC4F9AE02.roa (hash: sIFzi05CsaIpI6IXbPoMavOg8v+lG8SCiHW5mc9xYYo=)
38: F34CE5D6099A11EAB5891D5BC4F9AE02.roa (hash: ZfI5EOU5Zhf/woJDSxDFP8Ge3TtC+aJ9/83Dv40gmB4=)
39: 5690B49A09B111EAB045B31EC4F9AE02.roa (hash: QcvRnDCbbV++veiXQaKg6IVTJYncSOCCJhyCSUH9yo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4237 (0x108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Mar 2 00:53:20 2026 GMT
Not After : Mar 9 00:53:20 2026 GMT
Subject: CN=69a4df81-b0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:ee:06:01:c0:be:ec:8d:45:16:f1:8b:d9:
bb:3b:ad:07:d2:f0:39:4c:93:f2:b3:17:78:ba:82:
f1:f4:a8:7d:e2:3e:9a:25:9d:c6:37:c1:d8:9d:ab:
01:6d:62:da:7f:e1:f7:1e:0d:68:27:97:9b:f5:59:
e4:36:f2:71:a3:b3:a2:a6:4e:6b:19:06:f9:70:ca:
91:70:1a:b7:fc:d2:55:a7:e6:3a:d0:95:f5:0e:56:
1b:42:e6:67:e1:98:56:92:ac:78:5f:d3:21:c7:8a:
43:12:f7:35:4a:f7:54:98:ff:7d:42:8f:d7:4c:72:
1b:e5:86:b9:c2:3c:e5:fd:da:e5:0e:e9:46:86:20:
14:18:78:65:34:c4:cf:b7:48:ee:9e:b8:20:55:a1:
c8:72:a5:03:38:40:90:8c:5d:8c:2e:46:32:38:57:
f0:36:a1:03:5a:40:97:01:2d:e0:b3:8f:a2:d0:ba:
e7:a9:8f:bb:86:89:80:54:49:26:53:3c:50:cc:ba:
2e:c0:dc:69:90:10:83:59:b3:7b:bb:0b:ae:3d:57:
d5:0c:85:e1:d8:8d:bd:96:bb:7c:f9:ea:6e:d1:8b:
88:f1:42:e9:a6:06:bb:bb:a9:3a:09:72:45:c2:3f:
30:45:1d:74:cf:94:c7:22:c2:58:dc:87:90:41:d9:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:D5:86:36:6E:49:B6:34:76:23:7D:0F:40:3C:45:7D:02:B6:88
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:a4:81:05:6e:e3:55:5a:44:aa:c7:98:19:76:1d:b8:56:
2a:ca:93:38:90:5d:fe:25:d3:6e:8a:be:bc:9c:4d:ed:0e:37:
cc:35:13:c8:4f:ac:85:d6:c8:32:62:4a:c0:ea:f9:f6:a1:73:
69:f4:26:06:c9:29:e9:8d:57:cc:15:62:5d:f1:95:44:3c:cd:
7f:16:4d:92:7b:12:67:1d:77:f9:98:ca:b1:aa:aa:7a:9c:c5:
bd:11:43:13:37:4a:e0:3f:cf:7f:3b:3e:0e:c1:b1:e5:4f:e7:
dc:b5:30:49:66:7f:b7:f3:9f:e3:ad:42:0a:17:95:bc:1c:57:
f3:65:a6:63:04:5b:82:44:88:d1:1e:af:87:de:8d:18:2f:76:
04:bf:f9:18:4c:84:7b:af:bd:03:d9:42:90:e5:44:31:50:df:
74:56:a4:e7:69:bb:39:0c:e9:9f:6a:37:52:d3:60:ce:e7:64:
00:c1:cd:a8:4f:f3:b3:3d:b5:78:44:b2:fa:6a:4b:69:c6:b8:
7a:a1:95:a7:e3:be:b7:da:15:a6:07:89:fc:c0:9c:d9:1f:c7:
50:3e:ad:26:f2:c3:64:6b:e1:89:8a:90:a1:f0:6e:ed:a8:af:
e7:7d:54:21:79:b2:bb:67:6c:63:16:11:d6:43:4e:47:ab:23:
69:bc:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:43 2026 by rpki-client