
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
File: EbEncUrFQIyE8NdlOMlegnXa2Fo.mft (raw, json)
Hash identifier: kJrTI78+IK2QmuE/dIQ/9Mt+gv5w84xYKVtRkj8Wm2A=
Subject key identifier: FF:B3:18:83:3F:DB:6B:D2:07:94:F7:AB:14:CD:A1:E1:A5:D7:A5:25
Authority key identifier: 11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
Certificate issuer: /CN=A91B4E1D/serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
Manifest number: 05
Signing time: Mon 21 Sep 2026 09:15:46 +0000
Manifest this update: Mon 21 Sep 2026 09:15:46 +0000
Manifest next update: Mon 28 Sep 2026 09:15:46 +0000
Files and hashes: 1: EbEncUrFQIyE8NdlOMlegnXa2Fo.crl (hash: apyU9cNQkVGH9N6UtZivfO+5Gyv3mfv3YGRx2cOJn2M=)
2: BC271E52B31911F183412A046611F970.roa (hash: vbiJolfMPvVJDBUNL2V3IBTDoWz3FM/eSssSUTrnDrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl
rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E1D, serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
Validity
Not Before: Sep 21 09:15:46 2026 GMT
Not After : Sep 28 09:15:46 2026 GMT
Subject: CN=6ab0f5c2-80b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:05:23:d7:a1:08:0d:63:45:5c:4e:43:5b:
51:47:60:2d:6b:8a:c9:0c:12:53:42:a3:b5:50:bd:
43:81:48:4b:37:80:58:30:bf:db:84:4b:39:04:2d:
d1:6a:de:16:9d:3e:11:d8:f0:1d:46:1e:93:5b:e6:
0e:57:c8:2c:30:9c:d7:76:f0:f9:3c:75:3a:00:16:
33:59:35:45:2b:cd:e9:54:11:d1:04:10:a1:dc:94:
b8:f8:1e:dd:8c:1a:8d:24:bc:aa:98:1f:31:62:75:
a9:d6:8b:a3:f1:c1:6b:bc:8a:8d:c5:39:dc:b1:54:
9f:76:d5:c6:6e:14:9e:66:93:f7:22:03:fa:65:c5:
a0:e2:00:09:2a:70:a1:8f:03:42:ab:d0:49:2d:65:
74:7c:33:98:33:bb:2e:79:a3:c9:47:75:97:49:e2:
63:7d:69:63:c5:98:c7:c8:e2:ea:af:56:88:5b:9b:
99:6c:78:d6:48:2c:67:74:07:bb:9e:91:e1:1c:6c:
b9:84:6a:f8:b6:f7:1b:08:e0:d1:ee:e9:34:ef:0f:
3a:6f:a1:ec:f7:7e:a8:4a:ad:d4:64:12:67:a0:6b:
18:dd:14:4f:d0:0c:89:17:f5:25:9c:ec:71:fd:f2:
e8:9b:8f:68:83:e5:c2:ed:a3:33:64:b7:b9:35:d9:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:18:83:3F:DB:6B:D2:07:94:F7:AB:14:CD:A1:E1:A5:D7:A5:25
X509v3 Authority Key Identifier:
keyid:11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:1e:58:46:d2:9d:ff:b4:ea:2a:4b:1a:e6:e9:2e:d0:cd:
2e:4e:f9:ed:29:12:ef:fc:bf:de:d6:e6:36:d7:16:35:64:cf:
69:51:3c:b6:84:51:c7:2b:a1:c1:fc:da:c0:79:26:18:1f:8f:
d5:da:38:0e:13:de:89:9a:c8:f1:49:41:ae:e5:5f:b2:25:9d:
3d:37:96:fa:8b:81:19:9e:8e:61:34:93:65:fd:0d:d2:6e:01:
3a:13:c1:2c:ec:1d:c7:84:d7:17:34:c2:b6:e3:11:e5:1e:55:
4e:86:7f:13:f8:cb:fe:55:70:0f:e6:c2:75:e0:52:49:2e:13:
e1:0a:ee:ec:50:4c:53:ce:d7:de:24:70:1d:e7:76:b5:f7:09:
30:30:14:86:4e:ff:c9:4d:66:88:fb:11:d7:2b:fa:1f:e8:97:
fc:9f:d1:0b:db:8e:8b:9b:35:59:82:bb:d2:c0:03:27:10:68:
a7:69:6b:5b:78:51:ea:95:40:bc:e1:fc:7f:44:03:89:64:42:
85:e4:8c:c2:50:df:16:76:5c:a5:f9:73:db:38:d5:64:95:a6:
c8:41:7f:86:45:28:27:87:3d:9b:d9:f4:af:23:1e:6a:14:3f:
25:f5:53:6b:e2:2c:c3:b7:11:c6:d4:70:ea:fd:a7:6b:9d:13:
35:c2:f5:b3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NEUxRDExMC8GA1UEBRMoMTFCMTI3NzE0QUM1NDA4Qzg0RjBENzY1MzhDOTVFODI3
NURBRDg1QTAeFw0yNjA5MjEwOTE1NDZaFw0yNjA5MjgwOTE1NDZaMBgxFjAUBgNV
BAMTDTZhYjBmNWMyLTgwYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfEAUj16EIDWNFXE5DW1FHYC1riskMElNCo7VQvUOBSEs3gFgwv9uESzkELdFq
3hadPhHY8B1GHpNb5g5XyCwwnNd28Pk8dToAFjNZNUUrzelUEdEEEKHclLj4Ht2M
Go0kvKqYHzFidanWi6PxwWu8io3FOdyxVJ921cZuFJ5mk/ciA/plxaDiAAkqcKGP
A0Kr0EktZXR8M5gzuy55o8lHdZdJ4mN9aWPFmMfI4uqvVohbm5lseNZILGd0B7ue
keEcbLmEavi29xsI4NHu6TTvDzpvoez3fqhKrdRkEmegaxjdFE/QDIkX9SWc7HH9
8uibj2iD5cLtozNkt7k12WUdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/7MYgz/b
a9IHlPerFM2h4aXXpSUwHwYDVR0jBBgwFoAUEbEncUrFQIyE8NdlOMlegnXa2Fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzczQjkxRkNDQjIx
RTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5RThOZGxPTWxlZ25YYTJG
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRWJFbmNVckZRSXlFOE5kbE9NbGVnblhhMkZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0
RTFELzczQjkxRkNDQjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5
RThOZGxPTWxlZ25YYTJGby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3vh5YRtKd/7TqKksa5uku0M0uTvntKRLv/L/e1uY21xY1ZM9pUTy2hFHHK6HB
/NrAeSYYH4/V2jgOE96JmsjxSUGu5V+yJZ09N5b6i4EZno5hNJNl/Q3SbgE6E8Es
7B3HhNcXNMK24xHlHlVOhn8T+Mv+VXAP5sJ14FJJLhPhCu7sUExTztfeJHAd53a1
9wkwMBSGTv/JTWaI+xHXK/of6Jf8n9EL246LmzVZgrvSwAMnEGinaWtbeFHqlUC8
4fx/RAOJZEKF5IzCUN8Wdlyl+XPbONVklabIQX+GRSgnhz2b2fSvIx5qFD8l9VNr
4izDtxHG1HDq/adrnRM1wvWz
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:43 2026 by rpki-client