
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier: fMeW2XVTQUb+GRERK691QD5SKRuK21ctLlutfE/NlMg=
Subject key identifier: FC:13:0D:81:A9:7C:D1:E0:92:D5:4F:E4:5B:D2:33:5A:A1:F8:98:E8
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number: A6
Signing time: Wed 15 Apr 2026 06:49:50 +0000
Manifest this update: Wed 15 Apr 2026 06:49:49 +0000
Manifest next update: Wed 22 Apr 2026 06:49:49 +0000
Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: BAWEnACVsFyz868hv3Nker8G8JdEkKX9y8SBVVAywm8=)
2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: /Q9gpxY9Rv8Y6XwClcVbAHo67QEBLFEE8ponSdmbbqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Validity
Not Before: Apr 15 06:49:49 2026 GMT
Not After : Apr 22 06:49:49 2026 GMT
Subject: CN=69df350e-7f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:d9:d7:2b:93:99:47:8a:01:79:e7:9a:20:
de:99:81:f1:52:cf:02:02:5a:fc:f2:31:b0:fe:d6:
13:99:81:d3:b6:f3:f4:d2:7f:1c:29:89:88:80:e0:
7f:85:e3:d0:47:61:81:fd:82:5c:61:f3:97:ce:b1:
a4:a2:aa:3c:71:e1:98:91:40:29:89:e7:c9:9d:c6:
1c:95:bd:11:89:d9:d5:db:9f:70:2e:8e:96:7b:1f:
dd:04:ce:a2:d3:b7:92:d4:6c:8f:97:14:8e:d4:a9:
26:d9:d1:f8:ea:16:b8:ab:35:f1:76:6c:61:6c:95:
f4:ae:4e:e0:ce:b0:93:06:ff:ab:f2:f4:04:ac:d8:
8b:b1:28:7d:f1:8c:34:d2:f5:a1:7e:bf:a7:df:95:
16:bd:31:aa:c9:92:18:90:bc:44:c6:c1:c9:16:11:
38:b9:32:93:72:c9:06:a6:a3:76:7a:54:a9:ec:bd:
95:21:00:4c:66:5e:22:93:28:95:c1:46:6e:54:21:
93:4f:ea:48:00:eb:c0:64:04:57:56:0d:9f:7a:42:
99:64:ae:68:4e:3f:df:46:8b:24:ea:db:51:0c:1b:
12:8c:d9:eb:70:af:1d:9a:2e:51:23:dc:02:32:d3:
3e:79:e0:6c:1f:b4:4c:29:ab:7b:58:c5:6b:9f:85:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:0D:81:A9:7C:D1:E0:92:D5:4F:E4:5B:D2:33:5A:A1:F8:98:E8
X509v3 Authority Key Identifier:
keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a2:2b:30:0c:32:11:15:11:d7:fa:e2:97:b2:a9:39:86:0f:
e0:3b:ca:aa:15:0b:fb:71:64:f0:70:52:47:9e:b8:33:a6:80:
b3:6c:81:02:23:18:69:44:a3:56:d8:72:d5:ce:b7:25:fd:bb:
c7:92:d8:7d:7f:60:98:25:32:d0:4e:21:31:4f:cd:ed:cf:31:
e2:db:ae:48:e9:0d:63:4f:60:c3:8f:69:25:0b:e7:e1:4d:64:
41:86:e8:63:2f:dd:0a:90:96:8f:37:e7:60:be:aa:3b:c0:4b:
46:21:b0:ac:e1:c8:7d:44:f7:bf:4e:ff:83:d6:2f:85:4f:69:
ae:ac:f9:be:3f:7d:8b:60:39:63:45:49:1e:da:fc:8a:af:aa:
42:95:42:82:ff:b9:77:dd:84:81:22:5c:1a:a8:ab:0b:10:fc:
99:51:e9:58:ba:8f:56:e5:fc:04:a4:49:9d:21:02:53:93:ed:
b5:a0:65:59:57:e5:1a:19:85:70:6d:6c:1e:65:4f:7e:81:b4:
f6:fc:30:9d:0b:f7:3b:dc:a6:d9:49:a8:43:65:bb:76:99:66:
5e:36:8b:f9:36:5a:0f:b6:ee:42:d8:2b:33:28:c6:10:8f:ac:
77:4f:d1:23:61:97:d8:fe:92:1f:84:df:79:00:2c:65:dc:fd:
28:fe:3d:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMzcxMTAvBgNVBAUTKDEwN0RFMjZEMTdFMzFBMDQ4OTA2RUNBQjU5ODM0RkZF
QjE0ODExMEYwHhcNMjYwNDE1MDY0OTQ5WhcNMjYwNDIyMDY0OTQ5WjAYMRYwFAYD
VQQDEw02OWRmMzUwZS03ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUHZ1yuTmUeKAXnnmiDemYHxUs8CAlr88jGw/tYTmYHTtvP00n8cKYmIgOB/
hePQR2GB/YJcYfOXzrGkoqo8ceGYkUApiefJncYclb0RidnV259wLo6Wex/dBM6i
07eS1GyPlxSO1Kkm2dH46ha4qzXxdmxhbJX0rk7gzrCTBv+r8vQErNiLsSh98Yw0
0vWhfr+n35UWvTGqyZIYkLxExsHJFhE4uTKTcskGpqN2elSp7L2VIQBMZl4ikyiV
wUZuVCGTT+pIAOvAZARXVg2fekKZZK5oTj/fRosk6ttRDBsSjNnrcK8dmi5RI9wC
MtM+eeBsH7RMKat7WMVrn4WVJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwTDYGp
fNHgktVP5FvSM1qh+JjoMB8GA1UdIwQYMBaAFBB94m0X4xoEiQbsq1mDT/6xSBEP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzNy8zNENEMDhDRTND
QTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9FSDNpYlJmakdnU0pCdXlyV1lOUF9yRklF
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIzNy8zNENEMDhDRTNDQTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9FSDNpYlJmakdn
U0pCdXlyV1lOUF9yRklFUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPqIrMAwyERUR1/ril7KpOYYP4DvKqhUL+3Fk8HBSR564M6aAs2yBAiMYaUSj
Vthy1c63Jf27x5LYfX9gmCUy0E4hMU/N7c8x4tuuSOkNY09gw49pJQvn4U1kQYbo
Yy/dCpCWjzfnYL6qO8BLRiGwrOHIfUT3v07/g9YvhU9prqz5vj99i2A5Y0VJHtr8
iq+qQpVCgv+5d92EgSJcGqirCxD8mVHpWLqPVuX8BKRJnSECU5PttaBlWVflGhmF
cG1sHmVPfoG09vwwnQv3O9ym2UmoQ2W7dplmXjaL+TZaD7buQtgrMyjGEI+sd0/R
I2GX2P6SH4TfeQAsZdz9KP49XQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:13 2026 by rpki-client