
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier: eZLIG4f4zJOjhhh4YZlmpwO+0voRV3d1XcLPYcsTJvA=
Subject key identifier: 7B:AA:E7:4C:95:E5:53:54:00:FF:B0:86:C7:03:74:BB:62:9F:C5:9D
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0AB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number: 0A9B
Signing time: Sat 18 Apr 2026 19:25:17 +0000
Manifest this update: Sat 18 Apr 2026 19:25:16 +0000
Manifest next update: Sat 25 Apr 2026 19:25:16 +0000
Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: efp5N4hJomSWH8eDYANjua1/p5fwGZO/BFmRi6xF8g0=)
2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: 4cAcI5ocqsy1hZe8HsYZTbIwmQxRPKHWv8/zl5w8ZJQ=)
3: 0166B48CDADF11F08398647877D3641D.roa (hash: ZJV2dmhu0JE10nRhjUYBdcTdypFTIKq4KfcDe8/doJQ=)
4: 02BA60CCDADF11F08398647877D3641D.roa (hash: 1tpNHg5V2m7AJT6KzHxfBy6gB5PqDPo6eAkyeJw5XNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2745 (0xab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Apr 18 19:25:16 2026 GMT
Not After : Apr 25 19:25:16 2026 GMT
Subject: CN=69e3da9d-e7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:28:89:65:56:19:05:bd:61:64:b3:ff:e1:
1d:ee:d7:3c:eb:5d:e4:db:ae:1b:81:fa:35:54:e5:
59:88:5a:a3:6c:90:23:b5:fd:4d:b2:e7:84:ca:64:
10:90:57:20:ba:c1:91:2c:99:4a:5e:3c:31:04:90:
cf:27:78:64:35:f5:a4:c9:bf:f8:da:92:11:5c:79:
07:82:ef:3c:0d:ea:bc:8f:a8:59:27:21:78:83:e0:
55:d2:5b:de:fd:7b:c6:5d:20:eb:f5:f5:82:6d:93:
7c:1d:b0:71:da:03:4b:de:2f:c6:65:7a:f4:ae:f7:
50:94:08:a1:fb:1e:48:3a:eb:da:d0:86:63:15:c1:
33:b4:3c:f2:e4:2b:f5:17:61:f2:3c:7f:da:14:8a:
d8:79:f6:55:32:dd:63:e5:83:4d:02:36:e8:31:61:
d0:2d:2c:5e:6f:62:0d:88:be:db:99:d7:ea:01:aa:
ae:ac:47:1f:ce:5a:f1:62:8c:4c:57:57:2c:63:40:
21:87:10:b9:6b:67:77:4d:52:7e:2a:6d:d7:ab:f8:
2f:3e:f1:17:81:ab:14:ca:b3:e9:60:92:18:20:50:
72:fe:bc:ba:a9:87:72:16:ce:97:ea:f8:c2:62:d4:
38:cb:5a:46:36:1a:d7:75:6a:48:93:e7:21:60:e1:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:E7:4C:95:E5:53:54:00:FF:B0:86:C7:03:74:BB:62:9F:C5:9D
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:57:82:1e:75:e2:b3:42:a5:4b:a4:63:83:48:ac:73:2d:
3b:70:34:b5:f0:49:8c:ed:ca:95:31:3a:ee:61:4d:dd:96:5f:
8e:56:6e:e5:33:b5:ac:02:d6:f3:ff:87:50:7a:3d:73:90:ae:
71:62:15:a2:ba:bc:00:d9:a7:54:8f:26:11:55:95:aa:69:aa:
b5:05:27:5d:5e:dd:60:10:d8:65:50:38:d3:1e:57:df:f9:3d:
15:12:28:e2:e8:fc:29:6e:83:bd:bf:e5:6e:ec:7e:cb:e2:c1:
d8:7f:28:b5:bc:99:0e:67:86:7c:b2:11:42:12:68:06:ce:a3:
4b:e1:9f:32:6d:df:48:aa:7b:8a:9d:64:6c:84:0c:c4:bb:27:
df:3d:04:f0:2f:1b:ac:94:50:eb:a2:e9:04:b5:2b:41:cb:ab:
6b:86:2d:85:92:22:47:4c:2f:cd:e9:83:e2:8b:06:64:0c:8e:
fc:f2:3e:4a:f7:79:50:6a:d7:b3:2b:69:73:1d:31:45:de:dd:
23:6c:32:e6:d6:af:0b:e5:9d:23:4e:fb:2a:1e:6e:10:ff:a2:
35:46:34:5c:53:20:82:99:32:82:97:1e:c4:40:47:9f:3f:60:
10:07:f5:4b:c1:54:10:28:4c:fd:1f:8e:7d:f6:c1:58:7c:f6:
5d:ca:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:39 2026 by rpki-client