
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json)
Hash identifier: Iq+MeyRvaBZBV8CzTIlVJiwfG+8mRs9+RvW9vSDb4zY=
Subject key identifier: B9:A2:02:C8:ED:A0:54:38:F5:C2:F7:46:25:07:4B:C8:0E:AF:B1:3B
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
Manifest number: 01DE
Signing time: Fri 17 Apr 2026 03:15:07 +0000
Manifest this update: Fri 17 Apr 2026 03:15:07 +0000
Manifest next update: Fri 24 Apr 2026 03:15:07 +0000
Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: fhOgPs2OdnC8RI9r3mXq0ws8gZTCIQN1bxcC6UGjGYE=)
2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Validity
Not Before: Apr 17 03:15:07 2026 GMT
Not After : Apr 24 03:15:07 2026 GMT
Subject: CN=69e1a5bb-ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:c0:96:bf:4b:b8:4d:45:5d:3f:9a:74:52:
99:90:46:30:20:3e:0c:d9:a3:42:2a:35:27:ec:55:
a3:8c:99:78:c2:11:38:d2:5e:ea:be:f3:97:de:a0:
57:9b:b7:2b:c1:17:fc:d1:2a:4a:be:08:10:c6:dd:
78:8f:e0:c4:d5:91:e6:13:49:26:e7:bd:c8:4d:7a:
25:2a:f4:01:e0:91:17:ad:18:f9:8a:72:6c:54:c1:
a1:07:05:e8:e2:88:b7:f5:5f:bc:40:af:4f:ad:e9:
f3:2b:92:6f:40:b7:d9:c3:1d:37:6b:54:17:1f:03:
d1:bb:66:d5:a9:32:c6:ae:3a:4b:82:2c:0e:4a:a9:
93:17:3b:9a:13:44:fd:d4:b6:1b:e3:7c:c7:ea:27:
51:b3:b1:90:a2:6b:69:e7:83:ec:c5:a4:61:08:3e:
03:55:21:91:36:cc:95:30:93:33:f5:a7:9d:78:e6:
88:7d:cd:bb:22:d2:2b:a9:0c:7c:bb:f7:ce:0c:a2:
dc:6f:9c:59:1a:f3:21:b0:8f:8c:15:ea:2c:a9:9b:
df:2a:bb:ca:7b:41:72:6e:90:50:80:d9:fc:15:9d:
6d:d9:cb:aa:24:41:d9:48:c8:64:77:4b:7f:c1:75:
33:29:b4:65:59:ac:14:1b:23:99:42:c1:61:4c:7e:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:02:C8:ED:A0:54:38:F5:C2:F7:46:25:07:4B:C8:0E:AF:B1:3B
X509v3 Authority Key Identifier:
keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a9:61:63:11:0c:32:8a:31:e1:91:4e:ce:a6:df:ce:1e:d1:
29:66:5e:90:48:9a:8d:b4:ce:eb:ff:3d:57:bb:6b:40:40:12:
c5:15:77:71:1d:31:c9:e5:fe:97:c8:82:c1:21:44:50:16:7f:
1e:87:8f:a7:fd:ed:10:b0:d5:39:fc:c7:b1:0b:1a:18:cf:14:
9d:6a:df:a9:00:6e:9a:f0:df:a1:ad:99:0c:cc:17:cc:3f:d2:
b0:4d:92:84:9b:82:8f:e5:87:2f:a9:bf:32:b2:43:be:d9:13:
0b:a5:82:e8:a9:e4:f3:01:d8:f7:71:f1:d9:15:88:77:a8:08:
41:45:90:23:a7:1d:1c:76:01:71:67:ee:71:06:4e:19:31:65:
dc:f2:f3:94:58:40:40:19:cc:5e:b6:80:c9:ef:43:1a:b7:cf:
a0:5c:87:e6:f9:51:d3:78:2e:ef:7b:ee:3d:97:94:dc:0f:d1:
56:22:79:1f:45:c9:cb:9b:dc:76:64:40:14:83:89:ef:28:2f:
0d:f2:8a:2a:8b:0b:92:5a:78:bf:f8:dc:6a:0e:7b:5f:0f:72:
fb:98:21:31:9e:ca:ed:f4:44:d8:50:39:86:1f:0a:5f:ef:70:
5f:b5:6a:ab:d4:c8:88:36:99:4c:a8:fc:c5:d8:b1:12:d1:f2:
e7:39:fb:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3
QUNGMjgwMkQwHhcNMjYwNDE3MDMxNTA3WhcNMjYwNDI0MDMxNTA3WjAYMRYwFAYD
VQQDEw02OWUxYTViYi1hZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vvAlr9LuE1FXT+adFKZkEYwID4M2aNCKjUn7FWjjJl4whE40l7qvvOX3qBX
m7crwRf80SpKvggQxt14j+DE1ZHmE0km573ITXolKvQB4JEXrRj5inJsVMGhBwXo
4oi39V+8QK9PrenzK5JvQLfZwx03a1QXHwPRu2bVqTLGrjpLgiwOSqmTFzuaE0T9
1LYb43zH6idRs7GQomtp54PsxaRhCD4DVSGRNsyVMJMz9aedeOaIfc27ItIrqQx8
u/fODKLcb5xZGvMhsI+MFeosqZvfKrvKe0FybpBQgNn8FZ1t2cuqJEHZSMhkd0t/
wXUzKbRlWawUGyOZQsFhTH6UTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmiAsjt
oFQ49cL3RiUHS8gOr7E7MB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2
OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS
UjEtNnF5T1FFVnQ2enlnQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtalhYxEMMoox4ZFOzqbfzh7RKWZekEiajbTO6/89V7trQEASxRV3cR0xyeX+
l8iCwSFEUBZ/HoePp/3tELDVOfzHsQsaGM8UnWrfqQBumvDfoa2ZDMwXzD/SsE2S
hJuCj+WHL6m/MrJDvtkTC6WC6Knk8wHY93Hx2RWId6gIQUWQI6cdHHYBcWfucQZO
GTFl3PLzlFhAQBnMXraAye9DGrfPoFyH5vlR03gu73vuPZeU3A/RViJ5H0XJy5vc
dmRAFIOJ7ygvDfKKKosLklp4v/jcag57Xw9y+5ghMZ7K7fRE2FA5hh8KX+9wX7Vq
q9TIiDaZTKj8xdixEtHy5zn7IA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:29 2026 by rpki-client