
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
File: EJuU59mz5nnpnGKnotSXoX05lxg.mft (raw, json)
Hash identifier: 4MxnKwRr9OXnlHt//TIOVpcAeF6uPMTYcikE+RlkBAo=
Subject key identifier: 83:DC:DF:01:39:93:BB:53:6F:1B:56:4C:1A:CA:98:3F:1B:CD:53:E8
Authority key identifier: 10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
Certificate issuer: /CN=A91AA1F9/serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
Manifest number: 40
Signing time: Sat 17 Oct 2026 09:13:49 +0000
Manifest this update: Sat 17 Oct 2026 09:13:48 +0000
Manifest next update: Sat 24 Oct 2026 09:13:48 +0000
Files and hashes: 1: EJuU59mz5nnpnGKnotSXoX05lxg.crl (hash: TnBx2cJ2pg7FP2cE6yafvk1fun+bZ2UeOd2YjJzQl8E=)
2: 4A12ECDA687B11F1991CF7FE6647A888.roa (hash: DUotnWkAe6FNoAWorklQvryeqsRSLpu4L9xS7rYPygY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Validity
Not Before: Oct 17 09:13:48 2026 GMT
Not After : Oct 24 09:13:48 2026 GMT
Subject: CN=6ad33c4c-05b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:be:01:cb:2f:9c:e0:bc:fc:99:c0:fa:8b:
9d:41:3f:b1:55:ef:b9:0b:d5:37:74:90:ee:00:63:
a3:64:b8:3a:20:e7:db:dd:e2:1a:33:45:f0:31:70:
b1:40:47:d6:d9:9c:31:69:c8:89:5a:fb:5e:85:c4:
ac:8f:bb:9b:dc:bc:3f:83:d8:d3:2b:5a:40:9e:7a:
68:61:8a:1d:31:e1:08:e0:31:74:d6:26:c0:1f:8c:
cc:ee:0d:84:56:83:bf:db:c2:85:a4:33:1e:7a:ca:
b2:74:d5:c1:87:c3:1e:4d:5b:41:d7:a9:02:f2:a8:
52:3b:3a:e7:78:a4:3f:27:7f:f5:a1:4e:cb:6e:6b:
86:89:b9:80:be:91:8d:a3:5a:c8:a8:1e:91:69:7d:
a9:30:80:86:c1:66:04:18:aa:08:a4:7f:10:63:c6:
30:b5:b8:9a:bf:31:aa:0e:c4:c5:96:36:ce:0c:3a:
e0:b3:63:66:db:dd:56:bc:33:49:2d:b6:19:f8:92:
85:41:72:27:78:d1:67:37:94:39:e8:8b:a1:53:11:
6d:58:16:39:c5:3c:ae:ba:2c:ac:84:ee:8e:14:83:
e6:91:5d:e5:ee:fb:d0:86:58:44:e8:36:35:28:45:
4c:d2:44:88:5d:9c:1e:19:13:eb:71:fe:14:25:66:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:DF:01:39:93:BB:53:6F:1B:56:4C:1A:CA:98:3F:1B:CD:53:E8
X509v3 Authority Key Identifier:
keyid:10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:b9:80:a5:89:b2:16:17:72:f1:b3:dd:a2:20:f6:28:a9:
5c:45:84:3f:42:ca:47:fb:bc:81:74:8e:aa:de:af:5a:2b:a0:
e2:83:94:32:35:fa:4c:9e:a2:aa:6c:41:1e:d2:52:2e:fc:52:
c8:83:a5:f0:f7:58:d2:2e:90:97:f0:e4:c9:dd:00:f3:ba:c8:
3d:dc:77:76:96:d9:94:27:e4:c6:96:3a:36:24:d9:97:97:f9:
df:26:ce:c1:95:eb:04:3a:26:76:e8:78:8a:b9:f4:25:e2:45:
b3:f2:0d:f3:91:f7:57:4d:f2:79:ff:99:9b:ce:1b:8c:7c:13:
a1:8b:bb:15:d9:67:c8:41:62:7a:40:29:2f:48:b3:b7:99:2f:
41:26:3d:38:96:1c:f5:88:a5:19:fb:ad:7f:78:2b:39:96:77:
3a:66:55:6e:6a:76:87:69:d5:cd:74:11:62:62:13:60:9c:4d:
39:1a:5c:c4:be:ac:63:f1:9a:8b:c9:3f:03:a9:e0:1a:2e:ac:
5d:2d:4d:ef:9c:fe:61:d2:9c:44:18:99:cc:f2:61:1b:fd:80:
85:f9:2b:d9:21:34:c5:54:3f:f7:38:90:75:dc:61:a2:d5:d9:
e6:29:24:10:2a:67:b2:e6:0f:76:65:9d:bd:10:05:c2:50:0b:
59:8a:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:45:18 2026 by rpki-client