
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json)
Hash identifier: woao/5xRxUueZJTv91jDNt95VBPlwRu8540Ap3XuC4A=
Subject key identifier: DA:79:E8:B1:38:43:DF:4A:94:BE:A6:3F:7E:73:C8:AE:87:2F:8F:FD
Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
Manifest number: 0107
Signing time: Wed 15 Apr 2026 05:39:49 +0000
Manifest this update: Wed 15 Apr 2026 05:39:49 +0000
Manifest next update: Wed 22 Apr 2026 05:39:49 +0000
Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: DhBg0eRO+USBGCrFT+DsOwJpQipvRrK8/lzCCWxehQM=)
2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: pLovfOrhsSDToSpDuMZH/wCfyLBbh6arUaNSLjztFog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Validity
Not Before: Apr 15 05:39:49 2026 GMT
Not After : Apr 22 05:39:49 2026 GMT
Subject: CN=69df24a5-5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:71:7f:df:0d:50:29:52:98:5b:a3:0a:51:
ed:6b:37:d3:c3:19:d1:92:87:5c:72:c6:d4:5b:18:
51:9a:10:2e:3b:af:93:5b:d5:8b:16:d7:9c:3b:e2:
7b:d0:36:7d:c1:8e:50:ee:33:8d:33:c6:a8:6a:12:
e5:d5:6e:50:af:97:30:3f:69:c3:02:31:65:74:cb:
95:fb:66:fa:2c:90:23:80:75:78:3e:c2:66:7f:09:
21:8c:69:c7:31:c0:cf:50:18:7e:03:02:d9:7b:9d:
66:56:34:7c:f4:b8:e7:0f:a5:82:cf:fa:cd:6e:3b:
c6:4d:bb:d1:71:a7:4e:07:67:1e:ad:25:03:98:84:
0c:db:48:fc:47:cc:36:8a:42:41:9b:32:dd:c7:42:
43:dc:e0:d5:39:88:2a:20:e6:34:e5:1c:b3:d0:d2:
ee:bb:ac:2c:b6:02:de:9b:44:92:cc:cd:d5:ed:36:
3f:3b:58:70:81:73:3e:c2:62:4a:bf:71:7c:d2:fc:
c3:49:a6:e7:4e:9a:64:2f:2b:e6:05:03:72:7c:e4:
3d:be:86:f8:40:00:c0:e6:4d:8d:03:5e:0c:94:b6:
b9:9c:e9:55:ba:a0:d7:b7:8a:a9:7b:56:67:f1:04:
2e:7d:b7:c6:e9:96:18:1e:7d:f5:d3:27:36:93:17:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:E8:B1:38:43:DF:4A:94:BE:A6:3F:7E:73:C8:AE:87:2F:8F:FD
X509v3 Authority Key Identifier:
keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:01:20:6a:22:8e:ef:ee:a2:ec:7e:47:9a:ee:ba:27:b0:76:
08:b6:d7:c0:e7:4f:3d:1c:ad:a1:aa:cc:2c:50:81:e3:34:08:
74:87:6d:21:f8:2e:fd:9d:6c:56:c1:2b:00:da:55:c3:44:7a:
80:ef:1f:c4:de:ce:da:1a:38:c9:e5:72:91:9e:35:d1:db:42:
3e:7c:f3:84:2e:b9:65:f9:a5:d3:8e:db:b4:92:5f:73:22:11:
48:7c:6c:ba:38:db:ce:46:0b:08:d5:a6:12:a8:b9:38:fe:5a:
df:72:21:ba:03:55:58:88:68:45:d3:66:85:c1:0b:ea:a0:6a:
96:1c:9e:67:a0:44:98:1d:40:cd:c8:35:f8:52:16:57:42:86:
5c:a2:02:b2:b1:23:f2:7b:be:9f:57:03:ef:d4:8c:72:fa:88:
39:a3:49:19:f8:06:ba:09:b9:e3:c0:c4:81:80:e6:30:f8:bc:
fe:d7:66:80:07:09:bd:c0:24:10:8e:25:28:ca:29:80:c9:e7:
da:4e:be:e7:e4:38:9e:15:e0:93:07:b7:00:03:a4:26:e0:59:
95:bc:f0:99:98:db:b7:6b:ca:77:cc:c9:d7:59:03:8e:25:c0:
7c:27:68:29:d5:e6:99:71:5b:8e:4e:79:2d:c8:5c:b4:ba:2a:
de:ba:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:55:51 2026 by rpki-client