
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: JKcjz2LlT2lA0h5JjctV5q5krFDWEuT68xdxpch3vSE=
Subject key identifier: 25:77:4D:33:CD:13:62:57:34:0B:98:25:35:8C:A2:22:47:51:62:8A
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0AD7
Signing time: Fri 12 Jun 2026 19:27:57 +0000
Manifest this update: Fri 12 Jun 2026 19:27:56 +0000
Manifest next update: Fri 19 Jun 2026 19:27:56 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: JH17WkG3xMKvl87JhhuFbnbMOVDTEpj475uMuutcWng=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Jun 12 19:27:56 2026 GMT
Not After : Jun 19 19:27:56 2026 GMT
Subject: CN=6a2c5dbd-ffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:1d:1c:e7:6c:51:40:35:38:67:10:78:b3:
b5:ff:31:b1:a2:8d:92:42:43:38:08:9e:f9:6a:08:
43:03:ae:b7:87:23:61:de:72:c0:28:bb:78:41:6e:
d7:b4:d5:14:7d:66:2c:e5:22:83:cc:bf:e7:b7:f7:
d8:8a:d4:f2:fe:6b:e4:c9:6e:d4:8a:11:bf:5e:81:
b5:b5:ec:d2:8f:d8:6f:94:d6:c6:c0:82:74:8d:04:
50:de:4b:39:17:81:43:37:b2:ad:99:54:04:a3:7e:
ab:b8:5f:fa:15:4d:0c:ec:c8:5f:1b:fb:ca:a0:ac:
4f:c4:63:5d:fa:ef:4d:33:99:e3:3f:d9:24:ef:6f:
ce:63:8d:25:c2:e3:70:7e:1c:59:37:d9:a9:3a:3f:
d4:6c:5d:42:89:e1:f6:4b:d6:c6:a8:38:d8:b3:90:
50:fe:32:ef:f6:43:ab:60:fc:5e:37:8e:16:10:57:
57:34:ac:56:fc:74:3d:fc:16:19:5e:01:2d:8e:17:
15:f9:65:43:b8:6b:2a:bc:aa:88:07:ae:aa:68:ae:
94:70:a2:73:5a:be:4b:52:34:1e:89:85:6c:2b:d8:
7a:fa:5b:c0:eb:18:9f:75:3f:3d:34:c5:5e:67:87:
b6:2b:64:6a:78:6f:41:1e:af:0d:56:f2:a9:c8:a7:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:4D:33:CD:13:62:57:34:0B:98:25:35:8C:A2:22:47:51:62:8A
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:29:fc:50:2a:b9:37:fb:fd:c5:24:35:40:9e:97:a7:34:
04:ae:ae:20:da:45:9f:20:e8:e0:d6:4a:5c:fd:fb:02:5e:22:
aa:0d:3b:7d:46:94:32:d3:cb:f0:39:b2:c0:7f:ea:b7:f0:55:
5b:e9:c8:01:d2:50:d4:06:08:68:08:29:2d:ec:b0:94:68:5c:
a4:c8:f1:c5:47:de:c1:25:87:e9:61:b3:d9:18:aa:87:73:e3:
58:56:7a:ba:62:43:6a:9f:5a:59:ff:44:d7:d6:e3:07:76:28:
d9:ce:44:d5:1d:07:77:39:7b:c0:54:4a:94:11:ea:6e:94:96:
90:83:78:c5:45:57:e1:61:44:56:9e:08:87:ba:39:d1:d4:6c:
f3:09:58:5a:bb:8e:33:26:49:a3:5b:3c:b8:49:26:16:db:79:
52:3f:62:e8:cf:e7:9d:a4:98:50:d8:f2:10:81:c7:d7:6d:d9:
ff:05:ca:d8:d9:f1:9e:92:23:ff:14:00:36:bb:e4:e3:4c:44:
f3:a8:d5:4d:a6:ab:d6:0e:0d:43:af:d1:18:fa:e7:6a:22:10:
65:37:6f:a4:98:2b:ec:56:0e:ad:b1:f0:1f:c8:1c:39:4c:d3:
b9:64:26:39:56:05:db:e4:92:c2:da:51:cf:2e:8e:60:06:16:
51:7d:c3:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3
ODNFOEFDQkYwHhcNMjYwNjEyMTkyNzU2WhcNMjYwNjE5MTkyNzU2WjAYMRYwFAYD
VQQDEw02YTJjNWRiZC1mZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnAgdHOdsUUA1OGcQeLO1/zGxoo2SQkM4CJ75aghDA663hyNh3nLAKLt4QW7X
tNUUfWYs5SKDzL/nt/fYitTy/mvkyW7UihG/XoG1tezSj9hvlNbGwIJ0jQRQ3ks5
F4FDN7KtmVQEo36ruF/6FU0M7MhfG/vKoKxPxGNd+u9NM5njP9kk72/OY40lwuNw
fhxZN9mpOj/UbF1CieH2S9bGqDjYs5BQ/jLv9kOrYPxeN44WEFdXNKxW/HQ9/BYZ
XgEtjhcV+WVDuGsqvKqIB66qaK6UcKJzWr5LUjQeiYVsK9h6+lvA6xifdT89NMVe
Z4e2K2RqeG9BHq8NVvKpyKebAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCV3TTPN
E2JXNAuYJTWMoiJHUWKKMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz
RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx
MmFXWGhwcktreDU0UG9yTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMdYp/FAquTf7/cUkNUCel6c0BK6uINpFnyDo4NZKXP37Al4iqg07fUaUMtPL
8DmywH/qt/BVW+nIAdJQ1AYIaAgpLeywlGhcpMjxxUfewSWH6WGz2Riqh3PjWFZ6
umJDap9aWf9E19bjB3Yo2c5E1R0Hdzl7wFRKlBHqbpSWkIN4xUVX4WFEVp4Ih7o5
0dRs8wlYWruOMyZJo1s8uEkmFtt5Uj9i6M/nnaSYUNjyEIHH123Z/wXK2NnxnpIj
/xQANrvk40xE86jVTaar1g4NQ6/RGPrnaiIQZTdvpJgr7FYOrbHwH8gcOUzTuWQm
OVYF2+SSwtpRzy6OYAYWUX3DcA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:05 2026 by rpki-client