
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File: emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier: DFzK3hHisbv5DusEc6n621apq8jGkZsop6ob5MVKJWE=
Subject key identifier: 20:20:37:72:BA:46:70:D3:81:9E:B3:19:97:70:F4:D0:45:42:5F:E8
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number: 03A3
Signing time: Sun 01 Mar 2026 01:34:38 +0000
Manifest this update: Sun 01 Mar 2026 01:34:38 +0000
Manifest next update: Sun 08 Mar 2026 01:34:38 +0000
Files and hashes: 1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: GCaY41qX99PRUpNZ5Om7SEQkcbKRu6KZ3mB9146XO3c=)
2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Validity
Not Before: Mar 1 01:34:38 2026 GMT
Not After : Mar 8 01:34:38 2026 GMT
Subject: CN=69a397ae-505c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:0d:9d:5c:a4:37:74:38:70:f8:83:33:41:
15:e7:bc:fd:5c:ef:9a:70:62:c9:75:c7:c3:4b:c7:
18:54:f6:d5:38:aa:11:6b:ab:ed:82:74:ba:aa:45:
a5:b2:9e:de:aa:2a:31:76:9c:52:65:42:46:3d:6b:
36:72:c2:62:99:d6:1e:ce:a3:bc:31:ce:fd:23:09:
de:ed:81:ac:9d:9b:56:32:d0:c8:a0:d6:3c:de:62:
fc:20:44:8d:58:0e:1c:a2:30:14:33:b6:19:8d:d4:
ec:49:d1:ea:28:4a:c9:a2:d8:07:3f:63:a8:52:58:
be:01:65:ef:9f:39:a5:2a:29:55:23:04:7d:78:26:
ee:f0:9c:ee:99:9f:7b:e4:19:60:a1:47:1d:8f:d4:
b9:66:fe:a1:43:d0:bd:e1:29:98:dc:54:fd:4d:7e:
d3:41:b7:36:23:b3:4e:ed:95:5e:09:d5:59:59:65:
dc:00:c5:f0:89:23:d6:5f:be:d0:5f:56:ce:41:a2:
3d:a6:9a:0a:ed:f1:42:24:4d:51:00:dd:c6:e7:b0:
e6:d4:99:f2:a7:94:1e:ed:05:28:20:ad:45:27:62:
35:b4:a4:d9:5b:5b:64:d8:fb:29:5c:26:c3:83:c9:
f8:12:7e:ca:c0:b9:91:66:2b:3d:19:32:fd:d2:ac:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:37:72:BA:46:70:D3:81:9E:B3:19:97:70:F4:D0:45:42:5F:E8
X509v3 Authority Key Identifier:
keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:1c:8c:5c:d9:6c:8e:5f:c2:3e:a1:2f:41:e9:af:a2:ad:
2a:44:c8:23:b9:b6:c6:e3:7a:a5:0f:23:46:f8:4c:69:ac:14:
a8:b7:9a:4f:a3:0e:91:8b:56:6e:83:42:3e:38:55:42:64:94:
38:b4:d6:28:d4:28:88:70:9c:62:0c:a7:78:48:a6:7f:ca:d4:
6b:fe:35:64:91:5e:c1:6a:af:86:14:c8:b2:6c:6f:13:b0:75:
97:1d:1e:c5:94:5b:60:24:d9:46:60:a2:ec:fd:8a:60:7a:9d:
ab:22:1d:8e:65:37:41:4d:91:b3:a0:f2:8b:64:37:2e:88:95:
83:32:d5:c2:55:e7:d7:11:9a:56:a4:ac:1b:41:51:c1:54:c5:
ed:36:5c:1a:49:88:1e:fd:49:a7:5d:57:a5:45:95:82:3d:bc:
6d:bf:e8:6f:4b:0b:91:ba:cf:fa:48:72:00:b4:bc:f4:83:90:
08:af:65:3f:66:b8:da:f6:e7:68:47:92:67:76:18:55:f6:93:
0d:1f:29:c2:3b:61:89:78:75:ac:99:ac:31:5a:74:4f:36:d4:
82:ab:f1:93:f7:5a:3d:e5:37:dc:7f:36:28:81:3f:ec:dd:8b:
85:2d:f8:ca:33:c8:18:f8:5c:db:be:9d:70:4f:f8:76:99:71:
50:46:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:25 2026 by rpki-client