
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: gmoVWF2jnW5SImRpApm5jktkAL7xF5oqt7DfsNHPSwA=
Subject key identifier: 85:7C:E9:E4:5B:8F:27:3B:3E:A0:76:67:DE:9F:36:9C:B2:E6:63:67
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 01FA
Signing time: Sun 01 Mar 2026 03:58:02 +0000
Manifest this update: Sun 01 Mar 2026 03:58:01 +0000
Manifest next update: Sun 08 Mar 2026 03:58:01 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: A81BIDCVHRvK68Eno3Bd+pXExwfmmjOJDKaT4dUUF7Y=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: IpE3dRMtn4VIH+WF4zXN3kMbPGJfB4KqDmJ+7Dw6ktA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: Mar 1 03:58:01 2026 GMT
Not After : Mar 8 03:58:01 2026 GMT
Subject: CN=69a3b94a-464c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:6c:70:35:1b:ea:92:68:a7:d9:c7:f0:62:
f4:32:4c:12:4f:db:fa:37:bd:08:f7:f1:8c:93:7a:
88:24:72:91:9b:bd:8e:94:0c:57:12:e0:a9:42:7f:
6f:86:6b:25:0e:88:9f:56:c0:3f:8a:ed:a8:a6:f6:
02:7a:1c:6f:a4:a2:cd:47:4c:42:8b:20:68:93:e6:
f2:7c:be:d4:cf:49:00:66:3a:e8:4f:18:bc:02:6f:
9f:39:e2:ef:3f:76:5c:1a:0b:72:fa:ec:21:d2:43:
e0:02:11:2d:b1:c1:91:89:cb:b0:56:e7:7a:f3:7e:
91:97:92:d3:5a:b9:fc:6f:90:f6:36:37:ab:d0:99:
9b:d3:2c:ac:84:1a:8d:87:ea:1e:7c:92:e2:69:de:
13:3a:01:75:88:7e:cc:ef:07:71:29:3f:4a:63:56:
15:cf:38:12:13:6c:e1:7c:06:20:9a:07:de:0b:b2:
fc:09:5e:32:7e:b7:97:65:b7:f1:ce:cd:21:0b:a5:
9d:0b:48:5f:dc:b9:f0:7a:23:b1:8a:56:84:31:56:
cd:8c:7e:04:b2:56:6f:64:0e:c5:0f:62:8d:78:bc:
44:bf:7e:08:34:81:99:3b:a9:be:2c:10:46:e4:a0:
ce:dd:e8:1e:34:48:25:90:3c:c2:c1:b9:63:5c:25:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:E9:E4:5B:8F:27:3B:3E:A0:76:67:DE:9F:36:9C:B2:E6:63:67
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9d:ec:4e:70:73:c7:ef:21:37:ac:99:3c:34:92:fb:76:a9:
1e:03:1e:6d:64:6a:1b:d1:7a:32:cc:5d:ae:ca:e7:c3:eb:86:
91:cb:50:59:57:b3:93:79:eb:a9:8c:2b:16:a8:f9:a6:1c:35:
0b:08:41:c2:22:48:29:6e:36:09:0b:73:b4:97:9a:35:da:f8:
8c:f1:da:5d:30:13:94:31:6c:0d:60:89:83:5b:52:a4:74:16:
05:3c:1c:2e:7f:9e:6b:7f:12:2b:fe:d5:0e:db:d2:51:28:f3:
c1:90:53:b7:6a:65:c6:7d:79:9c:fb:fc:9b:19:1c:9d:4f:e2:
a8:75:95:59:5a:0e:f0:ef:aa:21:7b:62:a2:94:92:0b:c6:2f:
10:ad:96:ed:09:90:4d:6b:70:72:b8:bd:71:75:51:19:2e:58:
4f:f8:ca:6c:9f:23:bf:03:d7:ad:df:90:fb:ab:99:d9:b1:84:
6d:a0:87:8f:4c:2b:09:73:96:25:08:ab:3f:5d:eb:d2:80:cd:
c5:61:fa:86:c1:d1:61:1e:bf:a1:7a:ab:e4:7f:55:41:28:81:
ef:60:ac:27:04:f3:a3:e2:60:eb:52:15:f3:d5:a6:a8:b5:57:
09:6b:e9:f9:60:1c:5b:90:1e:e2:49:e9:11:04:37:6d:3b:8c:
bf:25:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:22 2026 by rpki-client