
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier: TXX5vVA9rnNwv0cg6kiCKwkAT3UqSG3uucjgCTqJ7Vg=
Subject key identifier: DF:51:A7:C6:94:16:5A:00:2A:ED:01:98:74:25:10:9A:99:D3:8D:0A
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number: 016E
Signing time: Sun 01 Mar 2026 05:46:22 +0000
Manifest this update: Sun 01 Mar 2026 05:46:21 +0000
Manifest next update: Sun 08 Mar 2026 05:46:21 +0000
Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: JUpOSmqNDCBRZMuqZT8LQiSi/nhX6Zhp2ud8n0gZXhA=)
2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: J5vtQMTwpL/xmHDO4Uy4YqCD/INA3rpqnN+ZrH/2hAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Validity
Not Before: Mar 1 05:46:21 2026 GMT
Not After : Mar 8 05:46:21 2026 GMT
Subject: CN=69a3d2ad-790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:f5:2e:a8:60:42:7e:81:c4:a8:00:b7:1a:
e0:f8:27:df:65:a8:65:de:6f:01:34:07:ef:7f:aa:
71:d3:3f:93:6d:c3:83:79:0b:c6:78:c0:ee:0c:eb:
2d:80:ae:90:7a:e8:b8:fc:6d:43:06:a9:72:3f:25:
2d:f1:2d:3c:fd:9f:c9:af:6e:b4:6e:bf:77:b9:02:
56:e4:12:45:83:8d:01:a5:8b:58:83:f3:d7:ff:c4:
c0:c2:59:d6:22:d8:96:6a:be:b1:52:d3:d1:80:05:
89:ea:98:64:36:af:37:f3:d0:ae:22:a7:ce:92:4e:
c0:c1:5c:c0:69:21:29:d0:3c:f2:3f:cf:7d:45:84:
95:95:43:02:23:29:e6:ee:97:01:8e:f8:71:35:2b:
83:67:9f:4b:53:c2:1b:00:67:3f:b5:9f:55:43:39:
e5:84:18:96:90:4b:27:61:fa:65:b3:94:3c:68:ac:
01:86:80:51:f0:2c:02:1b:91:7d:9f:cc:70:4b:10:
94:22:67:2b:11:49:61:2d:94:18:fb:24:24:7d:7b:
d8:1b:9c:71:91:1e:9d:14:50:e0:62:21:fd:ed:f1:
d1:85:8d:0c:d8:73:09:97:9e:0a:9b:c1:9c:b3:ce:
74:f7:3d:6a:f4:18:a1:8f:7a:15:8e:3e:0b:fe:60:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:A7:C6:94:16:5A:00:2A:ED:01:98:74:25:10:9A:99:D3:8D:0A
X509v3 Authority Key Identifier:
keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:52:79:48:18:e1:96:5b:7c:f6:0d:a9:37:25:3f:5e:7f:69:
61:f0:b6:6c:74:73:77:cc:97:dd:d3:d0:93:83:c0:84:3a:4e:
a2:e0:a6:36:31:43:6d:35:07:f5:68:a6:31:69:d0:22:e7:f3:
99:4f:c2:27:15:37:ff:21:6e:c8:cb:47:91:e6:e5:28:ab:4d:
d5:91:62:63:9e:70:37:42:92:7b:24:23:a2:a8:6c:14:a0:70:
9b:56:20:53:e0:6b:29:b0:4e:23:63:35:47:f6:b2:bb:58:d7:
c6:9f:62:a8:f0:33:dd:11:51:93:68:07:e8:3e:e5:71:a8:d4:
6d:65:b1:86:1e:1a:76:1f:32:24:13:cc:f8:11:ef:27:c5:08:
75:e9:d6:44:ea:fd:91:0e:82:de:02:73:ac:40:f5:b8:fe:08:
fc:32:05:1c:ea:bd:b3:75:1a:13:f8:7e:14:9c:d8:13:a5:56:
ad:d2:d4:a3:74:32:60:f6:28:78:32:ed:af:61:d9:4c:ba:5f:
e5:ca:81:5f:93:43:b7:4e:c6:6f:29:dd:04:b7:f6:f5:40:05:
5c:20:4d:66:1c:03:36:87:d6:30:95:32:64:0c:39:19:d7:29:
7f:63:4d:fa:de:58:8e:c1:7e:79:e6:05:64:ca:08:9f:d7:bb:
96:be:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:18 2026 by rpki-client