
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
File: EDhLgnxFluWuq0OYhypdFG6ggV8.mft (raw, json)
Hash identifier: pDjR4SfwXgnTZkDqPgSv89AbWISgsQ0DV0KGSKEiryM=
Subject key identifier: 1B:4C:04:94:89:8D:20:D6:45:AF:CD:BE:25:50:92:C1:ED:F7:09:98
Authority key identifier: 10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F
Certificate issuer: /CN=A91BA3E7/serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
Manifest number: 02
Signing time: Tue 28 Jul 2026 02:19:30 +0000
Manifest this update: Tue 28 Jul 2026 02:19:29 +0000
Manifest next update: Tue 04 Aug 2026 02:19:29 +0000
Files and hashes: 1: EDhLgnxFluWuq0OYhypdFG6ggV8.crl (hash: EJ6BPyAqO+DKvQ5qvqupNIPL98Y3rE6qYcmI5mTUE+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl
rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 02:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA3E7, serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
Validity
Not Before: Jul 28 02:19:29 2026 GMT
Not After : Aug 4 02:19:29 2026 GMT
Subject: CN=6a6811b1-7984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:04:99:f8:66:42:fb:d7:ec:96:3d:10:3c:
3d:00:92:8b:79:39:6e:21:71:af:92:05:eb:ff:8e:
9a:83:d1:02:26:b1:5e:8e:05:97:1e:62:9f:33:a8:
df:2f:6d:7b:5d:c7:89:5d:eb:07:50:aa:15:db:a4:
03:57:05:da:44:90:b6:14:c6:80:78:9b:0b:8d:95:
66:59:78:ca:69:f5:bc:eb:7b:b1:b1:b6:57:7f:bd:
53:e5:18:11:25:a7:8d:54:85:9d:0b:5e:81:ec:25:
24:7e:38:88:be:34:cf:ce:ab:a2:73:4e:a7:79:75:
2c:89:5b:46:60:d5:73:d3:5f:5e:24:d2:13:86:45:
fb:3e:03:76:09:0b:06:4a:74:16:c6:88:fe:b8:f1:
33:66:38:54:28:33:df:dc:d5:a4:ab:f5:2c:9f:43:
23:e6:a4:5f:25:cf:90:d5:5a:7f:66:60:a1:4c:fc:
39:39:aa:79:a5:46:14:b3:1e:0a:8a:93:b0:35:6a:
d8:7b:5a:64:fc:5f:fc:5b:40:fa:e1:a9:6a:50:9b:
aa:2d:2e:89:96:42:8f:f4:90:83:3e:21:53:a2:76:
b5:99:cd:17:16:b9:ad:ee:9f:f8:fd:2d:b9:69:c2:
39:95:d0:f9:1b:e2:ab:9b:57:9c:4c:08:44:75:c8:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:04:94:89:8D:20:D6:45:AF:CD:BE:25:50:92:C1:ED:F7:09:98
X509v3 Authority Key Identifier:
keyid:10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a2:07:21:bb:32:17:b3:02:3c:15:88:09:43:09:de:90:e4:
26:14:a3:ff:7e:ca:bc:39:33:ac:f5:7b:78:5c:cf:c4:3c:f1:
5d:d0:1b:7b:2d:7c:e1:7d:79:65:a1:fe:7a:d7:9e:ef:f1:7a:
09:6e:76:bf:72:69:36:2d:23:ff:ef:e4:77:d3:42:09:72:92:
dc:38:6c:39:4a:e7:b5:d3:b1:dd:82:8f:02:57:b2:9f:bf:7e:
a8:2e:07:81:93:d4:af:9e:cc:77:e8:af:7e:73:4b:24:e4:d3:
27:65:25:d4:08:ff:86:29:de:00:a4:8e:bb:a2:18:c0:e6:fd:
73:3b:60:d9:7f:07:1a:03:e2:cd:39:14:6f:fb:63:64:6f:52:
28:a9:4d:eb:28:eb:d8:93:ad:43:a9:cb:05:63:a4:4a:fe:44:
57:cd:5e:7a:73:f1:d3:36:1d:42:76:21:d4:31:5b:1a:08:34:
09:d4:87:2b:5e:b7:24:d4:45:10:4f:7b:5d:30:82:65:49:65:
29:c1:ea:6a:54:8b:fb:1e:89:7a:0d:01:33:20:cf:9c:a2:f4:
b1:10:f0:bb:7d:b3:96:8a:d4:a4:40:9e:99:af:88:b2:fc:8d:
a8:82:4d:75:7f:eb:b0:7d:53:1b:83:76:5d:09:76:e9:b2:90:
c8:db:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:48 2026 by rpki-client