
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: VQm3lFsKbeo+aEUvRS+3rsA+T5Hklw8fcUAu/kd/Qao=
Subject key identifier: F8:8B:99:54:79:95:B5:4E:F6:6F:EB:A3:CA:1C:ED:E9:43:0C:C1:EF
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 0249
Signing time: Wed 29 Jul 2026 03:30:51 +0000
Manifest this update: Wed 29 Jul 2026 03:30:51 +0000
Manifest next update: Wed 05 Aug 2026 03:30:51 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: al7dCPH0uvQlIAeRkblOeZx1azksK0kdAVk9DUDp/yc=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: Jul 29 03:30:51 2026 GMT
Not After : Aug 5 03:30:51 2026 GMT
Subject: CN=6a6973eb-bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:ed:7a:96:99:ad:26:ad:0c:12:08:3b:19:
f0:67:96:c0:86:05:48:2f:d9:18:50:44:f1:ed:b3:
f4:6a:7f:a9:48:5d:35:f4:53:8e:95:6f:6b:0d:5d:
bd:ce:8c:fe:d3:2b:2e:89:37:1b:d0:47:8a:ed:f1:
57:dd:64:8e:28:20:e9:e8:84:8d:cc:6c:f9:b6:24:
99:e8:3e:0a:1e:e2:9f:1a:c7:7e:57:bf:c9:06:27:
c8:de:f6:f1:bd:b8:4e:17:63:33:12:00:69:79:e4:
35:07:3d:50:4d:d1:4a:10:b8:18:93:19:b5:64:c7:
0f:eb:89:79:f4:58:ec:78:92:4d:f8:52:d2:0a:5c:
a2:76:17:47:37:03:0a:ad:05:f6:2f:0d:4c:ff:e7:
d8:1e:ac:09:3e:ea:e6:8d:d8:17:a2:53:73:68:9d:
20:41:3a:60:a0:da:6f:57:60:f3:aa:f0:30:ce:c0:
92:96:77:ac:29:dd:b7:c9:58:bf:82:83:ba:6f:82:
df:80:f5:11:db:0e:69:24:33:30:28:f7:11:8e:c1:
b2:76:23:e9:36:de:ef:ab:db:2c:e6:6e:bf:f1:dc:
06:7e:7d:8c:12:4a:38:d8:61:9a:07:a8:d3:6e:60:
ac:80:01:23:0f:9b:35:d1:c0:90:51:6d:a5:6e:8f:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:99:54:79:95:B5:4E:F6:6F:EB:A3:CA:1C:ED:E9:43:0C:C1:EF
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:a2:6f:65:70:34:44:ce:bb:dc:83:e6:96:72:3a:20:b9:
4a:b2:b2:ec:ad:60:0b:1a:7f:40:2a:3b:32:03:76:59:a1:b7:
57:8d:7a:f3:51:e8:69:7c:82:93:6f:fb:cc:9d:08:96:b6:48:
ae:d7:66:67:64:a9:65:f4:15:cc:8f:0e:67:19:39:4c:f8:04:
1e:5f:19:da:33:a9:a3:e3:e2:28:f3:32:51:75:75:0c:79:3f:
bb:2f:5d:dd:61:9f:f0:24:39:85:24:f0:71:07:c5:56:b7:f3:
e9:60:d9:11:4a:c8:f5:93:aa:e9:02:ce:bd:15:5e:c4:56:9f:
fe:87:52:3f:af:0a:37:5c:1d:7a:0a:53:9b:e0:aa:3e:fe:00:
f9:68:ae:1f:63:f7:ab:e3:44:06:85:b5:7a:19:eb:7d:b6:9c:
03:63:23:be:72:6e:b1:43:f7:3b:1b:6a:33:4c:4f:e4:3b:81:
5e:c6:fd:8e:ea:45:c3:50:2b:42:c7:d0:d5:b9:11:81:83:5e:
0e:ad:02:71:92:8b:a4:c7:1a:f6:b7:21:17:05:07:91:0f:45:
4e:e6:d8:4f:1f:73:07:d6:54:3a:9e:85:f6:65:8a:19:d6:32:
d4:b6:4d:1f:f1:33:d0:17:33:69:49:5d:6d:5b:59:38:3c:bc:
64:1c:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:05 2026 by rpki-client