
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
File: EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft (raw, json)
Hash identifier: mxvP1sjn3q1uFfmuQplUXVMOlOZs0XmQAm9jBTeXlPs=
Subject key identifier: 4A:71:8D:B1:4D:7B:2A:65:68:CE:66:56:7B:A8:BA:7C:60:F8:A7:5C
Authority key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
Certificate issuer: /CN=A91A0807/serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
Manifest number: 32
Signing time: Sun 01 Mar 2026 10:05:01 +0000
Manifest this update: Sun 01 Mar 2026 10:05:00 +0000
Manifest next update: Sun 08 Mar 2026 10:05:00 +0000
Files and hashes: 1: EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl (hash: vxOzagifV29VGDZBSp8T7VnaGUtqhNEZNFkSpflRSs4=)
2: 507C7202CCBE11F0AAAC3C24C4F9AE02.roa (hash: 32SWwd/uA3kg1otVJJYx1D2OTVjSQSkyd9lnzIXFPaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Validity
Not Before: Mar 1 10:05:00 2026 GMT
Not After : Mar 8 10:05:00 2026 GMT
Subject: CN=69a40f4d-e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:4a:d3:cd:09:32:98:20:b7:df:7e:89:91:
c0:38:9f:ef:de:e3:a8:48:b6:36:c7:9d:00:d2:63:
2d:b3:4f:84:43:f5:be:81:b2:1d:46:cb:96:43:3a:
e2:42:7a:81:a6:2e:87:12:31:92:36:f1:e7:d8:2a:
38:73:c6:88:0d:0a:d5:45:14:73:83:e1:0e:91:a8:
f7:a6:d1:9e:39:ee:0e:49:0b:b3:fa:24:e1:67:f6:
36:e9:51:4d:f1:44:2f:b9:d2:d8:40:83:13:98:c6:
c2:eb:ef:bf:39:33:b9:7a:fc:80:57:c5:0e:40:fc:
e1:87:9e:98:06:3e:3f:21:9b:fa:ea:b9:23:75:20:
81:a1:af:78:03:0b:9e:ab:54:fd:4c:8c:5b:db:05:
83:d1:ab:f8:a2:46:30:38:29:ae:a6:0b:43:42:14:
d8:cf:8e:da:69:be:a5:4b:a3:64:9b:5e:5e:74:67:
9b:4b:bb:4e:1b:34:b1:7a:d3:a6:f0:59:ea:7a:77:
fc:76:cc:64:54:13:1d:85:1d:3a:21:d2:e2:2a:4e:
cf:96:21:ab:18:da:e4:f0:70:85:40:19:cf:45:65:
a9:6f:9f:c0:12:98:ef:29:8e:de:d5:b7:b0:b0:da:
da:40:70:e8:48:e9:7c:6e:ca:03:68:e9:73:39:47:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:8D:B1:4D:7B:2A:65:68:CE:66:56:7B:A8:BA:7C:60:F8:A7:5C
X509v3 Authority Key Identifier:
keyid:11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:da:80:5c:e2:7c:65:f4:b0:c6:b4:60:fd:8c:ab:ff:b8:61:
28:fb:23:8e:30:97:8f:ae:e4:88:c6:69:4a:9b:8f:69:08:89:
d6:88:f5:83:fc:7a:a2:80:e1:fa:b7:11:29:98:3c:b9:cc:03:
84:9e:ae:48:df:c6:46:3b:39:2b:a3:b4:b4:d7:4d:8e:40:70:
01:42:63:8d:d0:7f:13:b2:ee:30:9a:d8:39:01:62:70:ef:66:
16:4a:6d:82:9d:b9:a5:f7:d2:ae:bc:4b:c7:e1:33:8e:e5:02:
c7:ef:ae:cc:55:0d:b6:eb:9f:bd:ed:9d:82:c5:9a:fd:e1:ef:
a8:e1:78:10:b7:7d:77:0e:16:5c:63:c4:57:0c:2a:36:37:d9:
6e:34:50:75:32:d8:06:40:68:4e:34:70:9c:35:8f:58:b6:3a:
44:dd:62:45:08:05:78:ea:99:d5:d2:26:df:b6:3b:ce:d5:e9:
80:13:d3:50:b9:52:2c:2c:27:01:4e:64:c6:42:52:2d:54:89:
2e:6b:93:70:e3:1e:39:33:cd:cd:66:54:28:a7:65:d0:4f:22:
92:a9:ed:14:a9:e6:2b:3b:b6:8c:a9:3f:2a:03:75:1b:54:06:
bf:80:d4:0f:9c:c0:75:f4:45:fe:54:67:cb:f8:0d:d1:07:15:
1a:35:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:49 2026 by rpki-client